[Mon Nov 10 21:16:36.034642 2025] [autoindex:error] [pid 34820:tid 34825] [client 196.251.85.129:63207] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Nov 10 21:34:04.238145 2025] [:error] [pid 31030:tid 31090] [client 146.190.103.103:48684] [client 146.190.103.103] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRHpzDdQpWeECLLAfnZfnQAAAE4"]
[Mon Nov 10 21:34:06.188666 2025] [authz_core:error] [pid 34820:tid 34826] [client 146.190.103.103:33162] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Nov 10 21:34:07.174643 2025] [:error] [pid 34820:tid 34833] [client 146.190.103.103:33192] [client 146.190.103.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aRHpz2K3qvhYIA1ghWDZRwAAAQs"]
[Mon Nov 10 21:34:07.349615 2025] [:error] [pid 34820:tid 34835] [client 146.190.103.103:33200] [client 146.190.103.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aRHpz2K3qvhYIA1ghWDZSAAAAQ0"]
[Tue Nov 11 00:45:30.137367 2025] [:error] [pid 24225:tid 24255] [client 91.92.242.56:58574] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/wp-content/debug.log"] [unique_id "aRIWqp2rrdiHvhXEioVpDgAAAlY"]
[Tue Nov 11 00:47:29.980356 2025] [:error] [pid 20886:tid 20925] [client 91.92.242.56:64212] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/usc-e-shop/functions/content-log.php"] [unique_id "aRIXIR5bk0pxdL2ZEXEMJgAAAcA"]
[Tue Nov 11 00:48:22.241214 2025] [:error] [pid 24554:tid 24581] [client 91.92.242.56:59993] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/post-pdf-export/dompdf/dompdf.php"] [unique_id "aRIXVhbgcg5JFvN-BGVi4gAAAtc"]
[Tue Nov 11 00:48:23.305221 2025] [:error] [pid 24554:tid 24581] [client 91.92.242.56:60898] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "aRIXVxbgcg5JFvN-BGVi5gAAAtc"]
[Tue Nov 11 00:48:24.369836 2025] [:error] [pid 41978:tid 42018] [client 91.92.242.56:61854] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "aRIXWJTXUiwDnS4PcJ873wAAANg"]
[Tue Nov 11 00:48:25.433425 2025] [:error] [pid 14120:tid 14123] [client 91.92.242.56:62713] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRIXWST8OKKuPaCGMt0XtgAAAUE"]
[Tue Nov 11 00:48:26.497319 2025] [:error] [pid 41839:tid 41935] [client 91.92.242.56:63601] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "aRIXWjGxg5uCD9Nfh5W1XAAAAJU"]
[Tue Nov 11 00:48:27.561208 2025] [:error] [pid 24354:tid 24367] [client 91.92.242.56:64599] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRIXWyiUwEIL0MTd44PTvQAAAok"]
[Tue Nov 11 00:48:28.624147 2025] [:error] [pid 41825:tid 41901] [client 91.92.242.56:49158] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRIXXIr5hkwmQG_pQgABLwAAAE4"]
[Tue Nov 11 00:48:29.707126 2025] [:error] [pid 20886:tid 20946] [client 91.92.242.56:50143] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/mapsvg/gm_download.php"] [unique_id "aRIXXR5bk0pxdL2ZEXEMWwAAAdU"]
[Tue Nov 11 00:48:30.770151 2025] [:error] [pid 24554:tid 24576] [client 91.92.242.56:51091] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "aRIXXhbgcg5JFvN-BGVi_wAAAtI"]
[Tue Nov 11 07:58:05.486514 2025] [:error] [pid 57437:tid 57446] [client 91.92.242.56:60754] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/wp-content/debug.log"] [unique_id "aRJ8DexevBIdHxHQtFqvqwAAAEU"]
[Tue Nov 11 08:00:50.158749 2025] [:error] [pid 19909:tid 19927] [client 91.92.242.56:55911] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/usc-e-shop/functions/content-log.php"] [unique_id "aRJ8spj4ijhm0fzOSagNqQAAAo4"]
[Tue Nov 11 08:01:54.950759 2025] [:error] [pid 33931:tid 33964] [client 91.92.242.56:58825] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/post-pdf-export/dompdf/dompdf.php"] [unique_id "aRJ88knJb679KZEjo-MS5AAAARg"]
[Tue Nov 11 08:01:56.050907 2025] [:error] [pid 57437:tid 57460] [client 91.92.242.56:59402] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "aRJ89OxevBIdHxHQtFqx4QAAAFM"]
[Tue Nov 11 08:01:57.127113 2025] [:error] [pid 33888:tid 33894] [client 91.92.242.56:59978] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "aRJ89YhA0uVBNwBRvPofGQAAAIM"]
[Tue Nov 11 08:01:58.203650 2025] [:error] [pid 34002:tid 34014] [client 91.92.242.56:60578] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRJ89tNx46Ag0u620orwOQAAAAg"]
[Tue Nov 11 08:01:59.280768 2025] [:error] [pid 19559:tid 19577] [client 91.92.242.56:61177] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "aRJ8902A7XQJ15MEH8CdTwAAAg4"]
[Tue Nov 11 08:02:00.380446 2025] [:error] [pid 19559:tid 19568] [client 91.92.242.56:61781] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRJ8-E2A7XQJ15MEH8CdVQAAAgU"]
[Tue Nov 11 08:02:01.458257 2025] [:error] [pid 20101:tid 20109] [client 91.92.242.56:62336] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRJ8-fSZnd_J7V4i60IzgAAAAsY"]
[Tue Nov 11 08:02:02.561939 2025] [:error] [pid 33888:tid 33905] [client 91.92.242.56:62919] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/mapsvg/gm_download.php"] [unique_id "aRJ8-ohA0uVBNwBRvPofIgAAAI4"]
[Tue Nov 11 08:02:03.641411 2025] [:error] [pid 19756:tid 19761] [client 91.92.242.56:63480] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "aRJ8--kAxCY2xqQFnfr2GQAAAkM"]
[Tue Nov 11 12:07:26.687682 2025] [:error] [pid 53449:tid 53461] [client 213.209.143.137:63335] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRK2ftpz08j5NoUSzp_r6AAAAUc"]
[Tue Nov 11 12:07:27.207481 2025] [:error] [pid 53449:tid 53455] [client 213.209.143.137:51926] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRK2f9pz08j5NoUSzp_r6QAAAUE"]
[Tue Nov 11 12:07:27.727035 2025] [:error] [pid 59670:tid 59678] [client 213.209.143.137:55823] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRK2f6k2Cnts0y-hpfqyCQAAAIU"]
[Tue Nov 11 21:00:56.738216 2025] [:error] [pid 36673:tid 36685] [client 213.209.143.137:53863] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRMziCvASiSDHs9bkfciAwAAAIo"]
[Tue Nov 11 21:01:23.745501 2025] [:error] [pid 36673:tid 36682] [client 213.209.143.137:63255] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRMzoyvASiSDHs9bkfciIQAAAIc"]
[Tue Nov 11 22:10:18.275437 2025] [:error] [pid 47859:tid 47879] [client 213.209.143.137:57755] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRNDyqRzLR7egYHK_4d5xAAAAA8"]
[Tue Nov 11 22:10:18.804178 2025] [:error] [pid 47860:tid 47914] [client 213.209.143.137:61614] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRNDyqPe6bkmJWx80CzSHgAAAFc"]
[Tue Nov 11 22:10:19.324852 2025] [:error] [pid 47931:tid 47957] [client 213.209.143.137:65233] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRNDyzWP7ptQ6Y-gz68dJgAAAVc"]
[Wed Nov 12 04:19:51.782243 2025] [:error] [pid 57222:tid 57243] [client 213.209.143.137:55184] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aROaZ2GJazH5XCcA91cTgwAAABA"]
[Wed Nov 12 04:19:52.287435 2025] [:error] [pid 57224:tid 57302] [client 213.209.143.137:58539] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aROaaBs7oZ7imwCSdAnmpAAAAJI"]
[Wed Nov 12 04:19:52.790714 2025] [:error] [pid 57312:tid 57328] [client 213.209.143.137:61205] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aROaaI0cuHgB17JK5qWdnAAAAMs"]
[Wed Nov 12 13:02:25.902172 2025] [:error] [pid 60405:tid 60420] [client 164.90.228.79:37362] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/@vite/env"] [unique_id "aRQU4XMGv_mlVi6mf5qPcgAAAAw"]
[Wed Nov 12 13:02:26.820284 2025] [:error] [pid 60095:tid 60111] [client 164.90.228.79:37376] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/actuator/env"] [unique_id "aRQU4nlw2elroagFF1rYHAAAAEw"]
[Wed Nov 12 13:02:27.559311 2025] [:error] [pid 60097:tid 60169] [client 164.90.228.79:37382] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRQU48dT5oio_TbWpi8WrwAAANA"]
[Wed Nov 12 13:02:28.509916 2025] [:error] [pid 60405:tid 60416] [client 164.90.228.79:37386] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/server"] [unique_id "aRQU5HMGv_mlVi6mf5qPdgAAAAg"]
[Wed Nov 12 13:02:29.234397 2025] [:error] [pid 60097:tid 60164] [client 164.90.228.79:37398] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/.vscode/sftp.json"] [unique_id "aRQU5cdT5oio_TbWpi8WsgAAAMs"]
[Wed Nov 12 13:02:29.980929 2025] [:error] [pid 12744:tid 12761] [client 164.90.228.79:37408] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/about"] [unique_id "aRQU5Z1cp_ouUvkFj0XIdAAAAQ0"]
[Wed Nov 12 13:02:30.710253 2025] [:error] [pid 60096:tid 60128] [client 164.90.228.79:37422] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/debug/default/view"] [unique_id "aRQU5jmzkhCvvk8DXOxARAAAAII"]
[Wed Nov 12 13:02:31.454564 2025] [:error] [pid 60096:tid 60151] [client 164.90.228.79:37426] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/v2/_catalog"] [unique_id "aRQU5zmzkhCvvk8DXOxARQAAAJM"]
[Wed Nov 12 13:02:32.177560 2025] [:error] [pid 12744:tid 12749] [client 164.90.228.79:36238] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRQU6J1cp_ouUvkFj0XIeQAAAQE"]
[Wed Nov 12 13:02:33.037529 2025] [:error] [pid 12744:tid 12754] [client 164.90.228.79:36242] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/server-status"] [unique_id "aRQU6Z1cp_ouUvkFj0XIfAAAAQY"]
[Wed Nov 12 13:02:33.775145 2025] [:error] [pid 60096:tid 60145] [client 164.90.228.79:36254] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/login.action"] [unique_id "aRQU6TmzkhCvvk8DXOxATQAAAJA"]
[Wed Nov 12 13:02:35.677136 2025] [:error] [pid 60097:tid 60167] [client 164.90.228.79:36268] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/.DS_Store"] [unique_id "aRQU68dT5oio_TbWpi8WugAAAM4"]
[Wed Nov 12 13:02:36.408201 2025] [:error] [pid 60097:tid 60169] [client 164.90.228.79:36272] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aRQU7MdT5oio_TbWpi8WvAAAANA"]
[Wed Nov 12 13:02:37.143139 2025] [:error] [pid 12744:tid 12762] [client 164.90.228.79:36280] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aRQU7Z1cp_ouUvkFj0XIiQAAAQ4"]
[Wed Nov 12 13:02:37.868803 2025] [:error] [pid 60097:tid 60171] [client 164.90.228.79:36284] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRQU7cdT5oio_TbWpi8WzAAAANI"]
[Wed Nov 12 13:02:38.588866 2025] [:error] [pid 60096:tid 60126] [client 164.90.228.79:36288] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/config.json"] [unique_id "aRQU7jmzkhCvvk8DXOxAXQAAAIA"]
[Wed Nov 12 13:02:39.345424 2025] [:error] [pid 60096:tid 60135] [client 164.90.228.79:36298] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/telescope/requests"] [unique_id "aRQU7zmzkhCvvk8DXOxAXgAAAIk"]
[Wed Nov 12 13:02:40.345422 2025] [:error] [pid 60097:tid 60147] [client 164.90.228.79:36308] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/info.php"] [unique_id "aRQU8MdT5oio_TbWpi8W0AAAAMI"]
[Wed Nov 12 13:02:41.193123 2025] [:error] [pid 60096:tid 60151] [client 164.90.228.79:36318] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aRQU8TmzkhCvvk8DXOxAYQAAAJM"]
[Wed Nov 12 17:11:02.039345 2025] [:error] [pid 12744:tid 12753] [client 159.65.144.72:32912] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/@vite/env"] [unique_id "aRRPJp1cp_ouUvkFj0U4pAAAAQU"]
[Wed Nov 12 17:11:02.477293 2025] [:error] [pid 60180:tid 60183] [client 159.65.144.72:32926] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/actuator/env"] [unique_id "aRRPJlhgd7ccS8EZg1onUwAAAUE"]
[Wed Nov 12 17:11:02.887874 2025] [:error] [pid 60097:tid 60150] [client 159.65.144.72:32942] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRRPJsdT5oio_TbWpi9higAAAMQ"]
[Wed Nov 12 17:11:03.329245 2025] [:error] [pid 60180:tid 60196] [client 159.65.144.72:32944] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/server"] [unique_id "aRRPJ1hgd7ccS8EZg1onVAAAAU4"]
[Wed Nov 12 17:11:03.729300 2025] [:error] [pid 60095:tid 60122] [client 159.65.144.72:32946] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/.vscode/sftp.json"] [unique_id "aRRPJ3lw2elroagFF1obyAAAAFc"]
[Wed Nov 12 17:11:04.167397 2025] [:error] [pid 12744:tid 12749] [client 159.65.144.72:32952] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/about"] [unique_id "aRRPKJ1cp_ouUvkFj0U4pgAAAQE"]
[Wed Nov 12 17:11:04.564550 2025] [:error] [pid 60095:tid 60120] [client 159.65.144.72:32964] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/debug/default/view"] [unique_id "aRRPKHlw2elroagFF1obygAAAFU"]
[Wed Nov 12 17:11:05.001495 2025] [:error] [pid 12744:tid 12748] [client 159.65.144.72:51058] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/v2/_catalog"] [unique_id "aRRPKZ1cp_ouUvkFj0U4qAAAAQA"]
[Wed Nov 12 17:11:05.398899 2025] [:error] [pid 60405:tid 60410] [client 159.65.144.72:51066] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRRPKXMGv_mlVi6mf5rjtQAAAAI"]
[Wed Nov 12 17:11:05.796530 2025] [:error] [pid 60095:tid 60106] [client 159.65.144.72:51072] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/server-status"] [unique_id "aRRPKXlw2elroagFF1obzAAAAEc"]
[Wed Nov 12 17:11:06.195067 2025] [:error] [pid 12744:tid 12759] [client 159.65.144.72:51074] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/login.action"] [unique_id "aRRPKp1cp_ouUvkFj0U4qgAAAQs"]
[Wed Nov 12 17:11:07.371371 2025] [:error] [pid 60096:tid 60140] [client 159.65.144.72:51094] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/.DS_Store"] [unique_id "aRRPKzmzkhCvvk8DXOyJtgAAAI0"]
[Wed Nov 12 17:11:07.767639 2025] [:error] [pid 60097:tid 60167] [client 159.65.144.72:51108] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aRRPK8dT5oio_TbWpi9hjQAAAM4"]
[Wed Nov 12 17:11:08.165636 2025] [:error] [pid 12744:tid 12770] [client 159.65.144.72:51116] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aRRPLJ1cp_ouUvkFj0U4sAAAARY"]
[Wed Nov 12 17:11:08.603145 2025] [:error] [pid 60097:tid 60165] [client 159.65.144.72:51126] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRRPLMdT5oio_TbWpi9hjgAAAMw"]
[Wed Nov 12 17:11:09.067924 2025] [:error] [pid 60180:tid 60195] [client 159.65.144.72:51128] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/config.json"] [unique_id "aRRPLVhgd7ccS8EZg1onWAAAAU0"]
[Wed Nov 12 17:11:09.505371 2025] [:error] [pid 60097:tid 60172] [client 159.65.144.72:51144] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/telescope/requests"] [unique_id "aRRPLcdT5oio_TbWpi9hkAAAANM"]
[Wed Nov 12 17:11:09.941943 2025] [:error] [pid 12744:tid 12749] [client 159.65.144.72:51152] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/info.php"] [unique_id "aRRPLZ1cp_ouUvkFj0U4swAAAQE"]
[Wed Nov 12 17:11:10.353982 2025] [:error] [pid 12744:tid 12748] [client 159.65.144.72:51154] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/"] [unique_id "aRRPLp1cp_ouUvkFj0U4tgAAAQA"]
[Thu Nov 13 11:08:23.799175 2025] [:error] [pid 62303:tid 62329] [client 45.153.34.41:56308] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aRVLp7-hlFTtVrZw8jBJ2wAAAJY"]
[Thu Nov 13 12:20:28.043269 2025] [:error] [pid 62303:tid 62327] [client 45.153.34.41:41500] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aRVcjL-hlFTtVrZw8jBrrQAAAJQ"]
[Fri Nov 14 23:46:34.872692 2025] [:error] [pid 1170:tid 1195] [client 35.231.232.75:57786] [client 35.231.232.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aRdO2g5pkvzCDzzjItTFgQAAABc"]
[Sat Nov 15 01:22:28.185927 2025] [proxy_fcgi:error] [pid 45995:tid 46011] [client 4.205.91.17:11085] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 01:22:35.748936 2025] [:error] [pid 18513:tid 18518] [client 4.205.91.17:11162] [client 4.205.91.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "aRdlW_c94upQFzRWlUnDpQAAAEA"]
[Sat Nov 15 01:22:43.053901 2025] [:error] [pid 45995:tid 46023] [client 4.205.91.17:11234] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/goat1.php"] [unique_id "aRdlY8fhZrb6EV4SvFvAvwAAAhc"]
[Sat Nov 15 01:22:43.595784 2025] [:error] [pid 45907:tid 45917] [client 4.205.91.17:11215] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/goat1.php"] [unique_id "aRdlY1AqmYxCpnT9gJGC-gAAAUY"]
[Sat Nov 15 01:22:44.152886 2025] [:error] [pid 45995:tid 46014] [client 4.205.91.17:11173] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/goat1.php"] [unique_id "aRdlZMfhZrb6EV4SvFvAxAAAAg4"]
[Sat Nov 15 01:22:44.606390 2025] [:error] [pid 45909:tid 45969] [client 4.205.91.17:11196] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/goat1.php"] [unique_id "aRdlZMZqItrYybG86kiV_QAAAcQ"]
[Sat Nov 15 01:22:45.171056 2025] [:error] [pid 45995:tid 46018] [client 4.205.91.17:11077] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lock.php"] [unique_id "aRdlZcfhZrb6EV4SvFvAxQAAAhI"]
[Sat Nov 15 01:22:45.599177 2025] [:error] [pid 45995:tid 46024] [client 4.205.91.17:11107] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lock.php"] [unique_id "aRdlZcfhZrb6EV4SvFvAxgAAAhg"]
[Sat Nov 15 01:22:46.032786 2025] [:error] [pid 18513:tid 18531] [client 4.205.91.17:11008] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lock.php"] [unique_id "aRdlZvc94upQFzRWlUnDtAAAAE0"]
[Sat Nov 15 01:22:46.452655 2025] [:error] [pid 45995:tid 46020] [client 4.205.91.17:11183] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lock.php"] [unique_id "aRdlZsfhZrb6EV4SvFvAywAAAhQ"]
[Sat Nov 15 01:22:46.883679 2025] [:error] [pid 45995:tid 46023] [client 4.205.91.17:11221] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aRdlZsfhZrb6EV4SvFvAzwAAAhc"]
[Sat Nov 15 01:22:47.313660 2025] [:error] [pid 45995:tid 46015] [client 4.205.91.17:11156] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aRdlZ8fhZrb6EV4SvFvA0QAAAg8"]
[Sat Nov 15 01:22:47.740778 2025] [:error] [pid 18513:tid 18540] [client 4.205.91.17:11164] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aRdlZ_c94upQFzRWlUnDtQAAAFY"]
[Sat Nov 15 01:22:48.162907 2025] [:error] [pid 45908:tid 45946] [client 4.205.91.17:11114] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aRdlaGWG19mWwZX7KathOAAAAAg"]
[Sat Nov 15 01:22:48.581607 2025] [:error] [pid 45907:tid 45913] [client 4.205.91.17:11115] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/i1.php"] [unique_id "aRdlaFAqmYxCpnT9gJGC_AAAAUI"]
[Sat Nov 15 01:22:49.009798 2025] [:error] [pid 45908:tid 45962] [client 4.205.91.17:11175] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/i1.php"] [unique_id "aRdlaWWG19mWwZX7KathOgAAABg"]
[Sat Nov 15 01:22:49.469885 2025] [:error] [pid 45995:tid 46010] [client 4.205.91.17:11089] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/i1.php"] [unique_id "aRdlacfhZrb6EV4SvFvA2AAAAgo"]
[Sat Nov 15 01:22:50.020210 2025] [:error] [pid 18513:tid 18523] [client 4.205.91.17:11100] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/i1.php"] [unique_id "aRdlavc94upQFzRWlUnDuAAAAEU"]
[Sat Nov 15 01:22:50.520470 2025] [:error] [pid 45995:tid 46008] [client 4.205.91.17:11101] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/thai.php"] [unique_id "aRdlasfhZrb6EV4SvFvA2QAAAgg"]
[Sat Nov 15 01:22:50.995384 2025] [:error] [pid 18513:tid 18541] [client 4.205.91.17:11111] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/thai.php"] [unique_id "aRdlavc94upQFzRWlUnDvgAAAFc"]
[Sat Nov 15 01:22:51.486737 2025] [:error] [pid 18513:tid 18522] [client 4.205.91.17:11202] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/thai.php"] [unique_id "aRdla_c94upQFzRWlUnDwwAAAEQ"]
[Sat Nov 15 01:22:52.016792 2025] [:error] [pid 45909:tid 45971] [client 4.205.91.17:11193] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/thai.php"] [unique_id "aRdlbMZqItrYybG86kiWBQAAAcY"]
[Sat Nov 15 12:09:27.888495 2025] [:error] [pid 20346:tid 20358] [client 138.197.23.42:65206] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aRf8957hsydZdIoVTlvM_gAAAwk"]
[Sat Nov 15 12:09:28.320789 2025] [:error] [pid 27997:tid 28010] [client 138.197.23.42:56094] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aRf8-Npja_6cDxKbxFmObwAAAMs"]
[Sat Nov 15 12:09:28.761060 2025] [:error] [pid 27997:tid 28009] [client 138.197.23.42:52455] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aRf8-Npja_6cDxKbxFmOfwAAAMo"]
[Sat Nov 15 12:09:29.192587 2025] [:error] [pid 19959:tid 19975] [client 138.197.23.42:52759] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aRf8-cjejiTUP1-IawOAVwAAAYk"]
[Sat Nov 15 12:09:29.631238 2025] [:error] [pid 22765:tid 22783] [client 138.197.23.42:53082] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aRf8-abrQzjuZmPIWDafVwAAAo0"]
[Sat Nov 15 20:26:28.217177 2025] [:error] [pid 20654:tid 20659] [client 45.134.79.103:64137] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aRhxdHcS7eC8vO76_ycI8gAAA4I"]
[Sat Nov 15 20:26:28.856684 2025] [:error] [pid 20346:tid 20350] [client 45.134.79.103:64323] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aRhxdJ7hsydZdIoVTltM4QAAAwE"]
[Sat Nov 15 20:26:29.486691 2025] [:error] [pid 20346:tid 20368] [client 45.134.79.103:64475] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdZ7hsydZdIoVTltM5QAAAxM"]
[Sun Nov 16 17:12:39.163941 2025] [:error] [pid 52469:tid 52494] [client 157.245.204.205:43542] [client 157.245.204.205] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRmVh06HaXpHeEZ98Z3AcwAAABE"]
[Sun Nov 16 17:12:43.069600 2025] [authz_core:error] [pid 34227:tid 34240] [client 157.245.204.205:43604] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Sun Nov 16 17:12:45.090779 2025] [:error] [pid 52469:tid 52492] [client 157.245.204.205:43644] [client 157.245.204.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aRmVjU6HaXpHeEZ98Z3AggAAAA8"]
[Sun Nov 16 17:12:45.353039 2025] [:error] [pid 34164:tid 34168] [client 157.245.204.205:43646] [client 157.245.204.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aRmVje93ccBCLD8-Q4Y-dAAAAYA"]
[Sun Nov 16 19:10:34.038263 2025] [autoindex:error] [pid 52563:tid 52590] [client 155.94.163.116:61535] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Nov 17 00:48:03.128538 2025] [:error] [pid 65480:tid 335] [client 167.172.232.142:58350] [client 167.172.232.142] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRoAQw3NjAS-v6ul5QBRQAAAAMw"]
[Mon Nov 17 00:48:08.141617 2025] [authz_core:error] [pid 55745:tid 55764] [client 167.172.232.142:58410] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Nov 17 00:48:10.708718 2025] [:error] [pid 55655:tid 55680] [client 167.172.232.142:56756] [client 167.172.232.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aRoASiGT_hu1vaVuRSRl-gAAABU"]
[Mon Nov 17 00:48:11.121773 2025] [:error] [pid 55656:tid 55714] [client 167.172.232.142:56762] [client 167.172.232.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aRoAS6ZDObyEN97tsHBOxAAAAJU"]
[Mon Nov 17 20:01:53.342009 2025] [:error] [pid 32753:tid 32774] [client 103.186.31.45:57324] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/style.php"] [unique_id "aRsOsU6YNqI5vkht922DOgAAA9I"]
[Mon Nov 17 20:01:53.616194 2025] [:error] [pid 65302:tid 65308] [client 103.186.31.45:57378] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/style.php"] [unique_id "aRsOsQPMSx2v85r8y7wD0QAAAUQ"]
[Mon Nov 17 20:01:53.884387 2025] [:error] [pid 39449:tid 39468] [client 103.186.31.45:57436] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/style.php"] [unique_id "aRsOsaUCymTA3MDfzLNcBgAAAA4"]
[Mon Nov 17 20:01:54.148557 2025] [:error] [pid 32753:tid 32780] [client 103.186.31.45:57494] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/style.php"] [unique_id "aRsOsk6YNqI5vkht922DVQAAA9g"]
[Mon Nov 17 20:01:54.413117 2025] [:error] [pid 39451:tid 39529] [client 103.186.31.45:57549] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style.php"] [unique_id "aRsOsufgkqXTS0SO3fAitQAAAJU"]
[Mon Nov 17 20:01:54.683293 2025] [:error] [pid 39451:tid 39527] [client 103.186.31.45:57600] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "aRsOsufgkqXTS0SO3fAiwgAAAJM"]
[Mon Nov 17 20:01:54.958438 2025] [:error] [pid 32753:tid 32756] [client 103.186.31.45:57653] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/file.php"] [unique_id "aRsOsk6YNqI5vkht922DaQAAA8A"]
[Mon Nov 17 20:01:55.213508 2025] [:error] [pid 32753:tid 32775] [client 103.186.31.45:57710] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/flower.php"] [unique_id "aRsOs06YNqI5vkht922DcQAAA9M"]
[Mon Nov 17 20:01:55.465599 2025] [:error] [pid 32753:tid 32759] [client 103.186.31.45:57779] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/gifclass.php"] [unique_id "aRsOs06YNqI5vkht922DfwAAA8M"]
[Mon Nov 17 20:01:55.712948 2025] [:error] [pid 39451:tid 39532] [client 103.186.31.45:57859] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/bless.php"] [unique_id "aRsOs-fgkqXTS0SO3fAiyQAAAJg"]
[Mon Nov 17 20:01:55.979227 2025] [:error] [pid 39451:tid 39521] [client 103.186.31.45:57947] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/class-t.api.php"] [unique_id "aRsOs-fgkqXTS0SO3fAizAAAAI0"]
[Mon Nov 17 20:01:56.241209 2025] [:error] [pid 39537:tid 39559] [client 103.186.31.45:58011] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/blurbs.php"] [unique_id "aRsOtIZRrh1pcrdcLB-9kAAAANM"]
[Mon Nov 17 20:01:56.507362 2025] [:error] [pid 65302:tid 65324] [client 103.186.31.45:58080] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/akcc.php"] [unique_id "aRsOtAPMSx2v85r8y7wD9AAAAVQ"]
[Mon Nov 17 20:01:56.761334 2025] [:error] [pid 65302:tid 65305] [client 103.186.31.45:58148] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "aRsOtAPMSx2v85r8y7wD_gAAAUE"]
[Mon Nov 17 20:01:57.026070 2025] [:error] [pid 39451:tid 39515] [client 103.186.31.45:58251] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/shelp.php"] [unique_id "aRsOtefgkqXTS0SO3fAi3AAAAIc"]
[Mon Nov 17 20:01:57.291317 2025] [:error] [pid 31419:tid 31424] [client 103.186.31.45:58454] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/cord.php"] [unique_id "aRsOtQHQ5Sbp7elmDZiY7AAAAoM"]
[Mon Nov 17 20:01:57.581477 2025] [:error] [pid 39537:tid 39544] [client 103.186.31.45:58568] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/dex.php"] [unique_id "aRsOtYZRrh1pcrdcLB-9mQAAAMQ"]
[Mon Nov 17 20:01:57.839311 2025] [:error] [pid 39449:tid 39461] [client 103.186.31.45:58634] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRsOtaUCymTA3MDfzLNcKAAAAAc"]
[Mon Nov 17 20:01:58.083251 2025] [:error] [pid 65302:tid 65313] [client 103.186.31.45:58685] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/file2.php"] [unique_id "aRsOtgPMSx2v85r8y7wEGAAAAUk"]
[Mon Nov 17 20:01:58.332767 2025] [:error] [pid 30801:tid 30807] [client 103.186.31.45:58752] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/zwso.php"] [unique_id "aRsOtjbGAU49DhMTBD7wMwAAAkQ"]
[Mon Nov 17 20:01:58.574909 2025] [:error] [pid 32753:tid 32769] [client 103.186.31.45:58800] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/zwso.php"] [unique_id "aRsOtk6YNqI5vkht922D4wAAA80"]
[Mon Nov 17 20:01:58.819518 2025] [:error] [pid 39449:tid 39474] [client 103.186.31.45:58862] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "aRsOtqUCymTA3MDfzLNcOQAAABQ"]
[Mon Nov 17 20:01:59.064481 2025] [:error] [pid 20913:tid 20924] [client 103.186.31.45:58921] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/bolt.php"] [unique_id "aRsOt-kafGNeN3nY1bdbOAAAA0k"]
[Mon Nov 17 20:01:59.309992 2025] [:error] [pid 65302:tid 65322] [client 103.186.31.45:58969] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/shlo.php"] [unique_id "aRsOtwPMSx2v85r8y7wELgAAAVI"]
[Mon Nov 17 20:01:59.568684 2025] [:error] [pid 32753:tid 32770] [client 103.186.31.45:59018] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/133.php"] [unique_id "aRsOt06YNqI5vkht922D_gAAA84"]
[Mon Nov 17 20:01:59.858594 2025] [:error] [pid 32753:tid 32758] [client 103.186.31.45:59079] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ahax.php"] [unique_id "aRsOt06YNqI5vkht922EDQAAA8I"]
[Mon Nov 17 20:02:00.121634 2025] [:error] [pid 39537:tid 39564] [client 103.186.31.45:59156] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/php8.php"] [unique_id "aRsOuIZRrh1pcrdcLB-9rQAAANg"]
[Mon Nov 17 20:02:00.367407 2025] [:error] [pid 15888:tid 15908] [client 103.186.31.45:59344] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/lufix1.php"] [unique_id "aRsOuAjAdDTBm4W3qW037AAAAdE"]
[Mon Nov 17 20:02:00.616053 2025] [:error] [pid 20913:tid 20939] [client 103.186.31.45:59398] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/witmm.php"] [unique_id "aRsOuOkafGNeN3nY1bdbUAAAA1g"]
[Mon Nov 17 20:02:00.864682 2025] [:error] [pid 15888:tid 15902] [client 103.186.31.45:59459] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/index.php"] [unique_id "aRsOuAjAdDTBm4W3qW039AAAAcs"]
[Mon Nov 17 20:02:01.110440 2025] [:error] [pid 39451:tid 39509] [client 103.186.31.45:59552] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aRsOuefgkqXTS0SO3fAi7gAAAIE"]
[Mon Nov 17 20:02:01.356923 2025] [:error] [pid 65302:tid 65322] [client 103.186.31.45:59611] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/index.php"] [unique_id "aRsOuQPMSx2v85r8y7wERgAAAVI"]
[Mon Nov 17 20:02:01.601230 2025] [:error] [pid 20913:tid 20915] [client 103.186.31.45:59664] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ioxi-o.php"] [unique_id "aRsOuekafGNeN3nY1bdbWAAAA0A"]
[Mon Nov 17 20:02:01.850910 2025] [:error] [pid 39537:tid 39551] [client 103.186.31.45:59715] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "aRsOuYZRrh1pcrdcLB-9yQAAAMs"]
[Mon Nov 17 20:02:02.094621 2025] [:error] [pid 15888:tid 15897] [client 103.186.31.45:59869] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/files.php"] [unique_id "aRsOugjAdDTBm4W3qW04AwAAAcY"]
[Mon Nov 17 20:02:02.349238 2025] [:error] [pid 39449:tid 39473] [client 103.186.31.45:59929] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-editor.php"] [unique_id "aRsOuqUCymTA3MDfzLNcbwAAABM"]
[Tue Nov 18 17:34:40.940020 2025] [autoindex:error] [pid 1387:tid 1409] [client 84.247.191.22:55327] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 18 21:37:31.892027 2025] [:error] [pid 1387:tid 1411] [client 45.134.79.103:60950] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aRx2m0zBvalKyx3hMvWergAAABI"]
[Tue Nov 18 21:37:32.570960 2025] [:error] [pid 44471:tid 44519] [client 45.134.79.103:54305] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aRx2nO_6m0bQO14XwtOC9gAAAQ8"]
[Tue Nov 18 21:37:33.241111 2025] [:error] [pid 1387:tid 1395] [client 45.134.79.103:59257] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2nUzBvalKyx3hMvWeygAAAAU"]
[Wed Nov 19 07:30:40.438312 2025] [:error] [pid 26664:tid 26680] [client 18.191.165.250:56934] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aR0BoIpWc1yoj2P7MeASFgAAAU0"]
[Wed Nov 19 07:30:40.830674 2025] [:error] [pid 6919:tid 6944] [client 18.191.165.250:57103] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aR0BoEYFdN1s_9xJVUmrYgAAARY"]
[Wed Nov 19 07:30:41.224725 2025] [:error] [pid 6919:tid 6943] [client 18.191.165.250:57215] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aR0BoUYFdN1s_9xJVUmrcgAAARU"]
[Wed Nov 19 07:30:41.615750 2025] [:error] [pid 26664:tid 26688] [client 18.191.165.250:57298] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aR0BoYpWc1yoj2P7MeASRQAAAVQ"]
[Wed Nov 19 07:30:42.006739 2025] [:error] [pid 26664:tid 26670] [client 18.191.165.250:57391] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aR0BoopWc1yoj2P7MeASUgAAAUM"]
[Wed Nov 19 20:35:58.434479 2025] [:error] [pid 12643:tid 12652] [client 104.196.176.201:57699] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/media/system/js/core.js"] [unique_id "aR25rsaLCNSdLHNAGt73QwAAAYY"]
[Thu Nov 20 02:21:50.617846 2025] [:error] [pid 50210:tid 50321] [client 91.92.242.56:57475] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wc-fields-factory/readme.txt"] [unique_id "aR4Kvt9KVfTGhSw-ebu_0QAAAA8"]
[Thu Nov 20 02:21:54.337342 2025] [:error] [pid 8909:tid 8939] [client 91.92.242.56:59806] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/user-registration/readme.txt"] [unique_id "aR4KwmnKNOWZ-UbT97B3EQAAA8A"]
[Thu Nov 20 02:21:54.901099 2025] [:error] [pid 50210:tid 50321] [client 91.92.242.56:60139] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/user-registration/readme.txt"] [unique_id "aR4Kwt9KVfTGhSw-ebu_2QAAAA8"]
[Thu Nov 20 02:21:55.465954 2025] [:error] [pid 8030:tid 8055] [client 91.92.242.56:60416] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/user-registration/readme.txt"] [unique_id "aR4Kw4aRI7v0Hh2prI878wAAAZY"]
[Thu Nov 20 12:10:22.902746 2025] [:error] [pid 804:tid 807] [client 98.81.111.26:58132] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aR6UrvaRHpUlPL9O0Lk10wAAAYE"]
[Thu Nov 20 12:10:23.317469 2025] [:error] [pid 55340:tid 55369] [client 98.81.111.26:58639] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aR6Ur_OxD-NeMydTybBKAgAAABg"]
[Thu Nov 20 12:10:23.741304 2025] [:error] [pid 34444:tid 34465] [client 98.81.111.26:54110] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aR6Ur1NEol4jlmmA_GPxEgAAAVM"]
[Thu Nov 20 12:10:24.156263 2025] [:error] [pid 55430:tid 55450] [client 98.81.111.26:52685] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aR6UsPPZXaIMEU4pE7uhRAAAANE"]
[Thu Nov 20 12:10:24.565119 2025] [:error] [pid 55342:tid 55377] [client 98.81.111.26:53014] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aR6UsLg6x32Tvk7fIG-MMQAAAEU"]
[Thu Nov 20 12:15:53.030714 2025] [:error] [pid 55430:tid 55448] [client 98.81.111.26:65471] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aR6V-fPZXaIMEU4pE7umMAAAAM8"]
[Thu Nov 20 12:15:53.439664 2025] [:error] [pid 55343:tid 55419] [client 98.81.111.26:51045] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aR6V-VWlO3EnyVMV7w5o4AAAAJQ"]
[Thu Nov 20 12:15:53.846636 2025] [:error] [pid 55343:tid 55410] [client 98.81.111.26:53261] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aR6V-VWlO3EnyVMV7w5o-QAAAIs"]
[Thu Nov 20 12:15:54.253904 2025] [:error] [pid 804:tid 836] [client 98.81.111.26:56129] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aR6V-vaRHpUlPL9O0Lk5ZgAAAYw"]
[Thu Nov 20 12:15:54.667933 2025] [:error] [pid 55342:tid 55392] [client 98.81.111.26:59601] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aR6V-rg6x32Tvk7fIG-PXwAAAFQ"]
[Thu Nov 20 20:40:05.861263 2025] [:error] [pid 40537:tid 40554] [client 20.58.138.186:61922] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/autoload_classmap.php"] [unique_id "aR8MJaKlsL5kxTa3c1z2ZQAAAs0"]
[Thu Nov 20 20:40:06.118302 2025] [:error] [pid 40537:tid 40560] [client 20.58.138.186:36565] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/autoload_classmap.php"] [unique_id "aR8MJqKlsL5kxTa3c1z2ZgAAAtM"]
[Thu Nov 20 20:40:07.440590 2025] [:error] [pid 40508:tid 40530] [client 20.58.138.186:63072] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/autoload_classmap.php"] [unique_id "aR8MJ6xXNVCMW_ksxPvM_gAAApQ"]
[Thu Nov 20 20:40:07.611462 2025] [:error] [pid 55430:tid 55442] [client 20.58.138.186:61948] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/autoload_classmap.php"] [unique_id "aR8MJ_PZXaIMEU4pE7sVGAAAAMk"]
[Thu Nov 20 20:40:08.829221 2025] [:error] [pid 34405:tid 34422] [client 20.58.138.186:61934] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aR8MKDFpvu8oRK7ATfsx2QAAAQ8"]
[Thu Nov 20 20:40:13.483020 2025] [:error] [pid 40636:tid 40658] [client 20.58.138.186:36605] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/BypassBest.php"] [unique_id "aR8MLQK8BWUoW3xq0HAhvAAAA5I"]
[Thu Nov 20 20:40:38.181003 2025] [:error] [pid 34405:tid 34424] [client 20.58.138.186:8389] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nc4.php"] [unique_id "aR8MRjFpvu8oRK7ATfsx6QAAARE"]
[Thu Nov 20 20:40:39.986345 2025] [:error] [pid 55430:tid 55436] [client 20.58.138.186:36580] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nc4.php"] [unique_id "aR8MR_PZXaIMEU4pE7sVMAAAAMM"]
[Thu Nov 20 20:40:42.761834 2025] [:error] [pid 40445:tid 40491] [client 20.58.138.186:61909] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nc4.php"] [unique_id "aR8MSlH-MuFcoWRjXpZ_pwAAAlA"]
[Thu Nov 20 20:40:54.415202 2025] [:error] [pid 40636:tid 40644] [client 20.58.138.186:44008] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aR8MVgK8BWUoW3xq0HAh_AAAA4Q"]
[Thu Nov 20 20:40:56.508728 2025] [:error] [pid 40445:tid 40493] [client 20.58.138.186:8447] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aR8MWFH-MuFcoWRjXpZ_xAAAAlI"]
[Thu Nov 20 20:40:57.795842 2025] [:error] [pid 40445:tid 40499] [client 20.58.138.186:31180] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aR8MWVH-MuFcoWRjXpZ_yAAAAlg"]
[Thu Nov 20 20:40:57.988841 2025] [:error] [pid 55343:tid 55410] [client 20.58.138.186:63761] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aR8MWVWlO3EnyVMV7w7F4AAAAIs"]
[Thu Nov 20 20:40:58.905060 2025] [:error] [pid 34405:tid 34421] [client 20.58.138.186:36550] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/g.php"] [unique_id "aR8MWjFpvu8oRK7ATfsyCgAAAQ4"]
[Thu Nov 20 20:41:04.085703 2025] [:error] [pid 40636:tid 40647] [client 20.58.138.186:63779] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/g.php"] [unique_id "aR8MYAK8BWUoW3xq0HAiCwAAA4c"]
[Thu Nov 20 20:41:26.441223 2025] [:error] [pid 34405:tid 34430] [client 20.58.138.186:60447] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aR8MdjFpvu8oRK7ATfsyGwAAARc"]
[Thu Nov 20 20:41:28.068431 2025] [:error] [pid 55343:tid 55404] [client 20.58.138.186:31177] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aR8MeFWlO3EnyVMV7w7F-wAAAIU"]
[Thu Nov 20 20:41:28.663538 2025] [:error] [pid 55340:tid 55346] [client 20.58.138.186:44029] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aR8MePOxD-NeMydTybCzkwAAAAE"]
[Thu Nov 20 20:41:30.554370 2025] [:error] [pid 40445:tid 40481] [client 20.58.138.186:44031] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aR8MelH-MuFcoWRjXpZ_9AAAAkY"]
[Thu Nov 20 20:41:31.027645 2025] [:error] [pid 40445:tid 40486] [client 20.58.138.186:63750] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aR8Me1H-MuFcoWRjXpZ_9gAAAks"]
[Thu Nov 20 20:41:32.962225 2025] [:error] [pid 40508:tid 40515] [client 20.58.138.186:44019] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aR8MfKxXNVCMW_ksxPvNXwAAAoU"]
[Thu Nov 20 20:41:33.797642 2025] [:error] [pid 40415:tid 40438] [client 20.58.138.186:44007] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aR8MfahjIyLSv09svwPC2AAAAdQ"]
[Thu Nov 20 20:41:35.599218 2025] [:error] [pid 55430:tid 55445] [client 20.58.138.186:60428] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aR8Mf_PZXaIMEU4pE7sVTAAAAMw"]
[Thu Nov 20 20:41:38.356097 2025] [:error] [pid 34405:tid 34431] [client 20.58.138.186:31189] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aR8MgjFpvu8oRK7ATfsyLQAAARg"]
[Thu Nov 20 20:41:39.469856 2025] [:error] [pid 40537:tid 40554] [client 20.58.138.186:36606] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/0.php"] [unique_id "aR8Mg6KlsL5kxTa3c1z2nQAAAs0"]
[Thu Nov 20 20:41:40.935067 2025] [:error] [pid 40415:tid 40429] [client 20.58.138.186:43980] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aR8MhKhjIyLSv09svwPC5QAAAcs"]
[Thu Nov 20 20:41:46.132047 2025] [:error] [pid 55343:tid 55405] [client 20.58.138.186:43978] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aR8MilWlO3EnyVMV7w7GBwAAAIY"]
[Thu Nov 20 20:41:53.998433 2025] [:error] [pid 34405:tid 34420] [client 20.58.138.186:61373] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aR8MkTFpvu8oRK7ATfsyQAAAAQ0"]
[Thu Nov 20 20:41:55.747670 2025] [:error] [pid 55340:tid 55356] [client 20.58.138.186:60462] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aR8Mk_OxD-NeMydTybCz0AAAAAs"]
[Thu Nov 20 20:41:56.594471 2025] [:error] [pid 40445:tid 40475] [client 20.58.138.186:40417] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "aR8MlFH-MuFcoWRjXpaAGwAAAkA"]
[Thu Nov 20 20:41:57.793439 2025] [:error] [pid 55430:tid 55442] [client 20.58.138.186:46024] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "aR8MlfPZXaIMEU4pE7sVWQAAAMk"]
[Thu Nov 20 20:41:58.493261 2025] [:error] [pid 55430:tid 55439] [client 20.58.138.186:58270] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "aR8MlvPZXaIMEU4pE7sVWgAAAMY"]
[Thu Nov 20 20:42:03.333461 2025] [:error] [pid 40445:tid 40490] [client 20.58.138.186:61363] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/i1.php"] [unique_id "aR8Mm1H-MuFcoWRjXpaAIAAAAk8"]
[Thu Nov 20 20:42:04.771494 2025] [:error] [pid 40415:tid 40441] [client 20.58.138.186:61361] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/i1.php"] [unique_id "aR8MnKhjIyLSv09svwPC9gAAAdc"]
[Thu Nov 20 20:42:07.000459 2025] [:error] [pid 40636:tid 40664] [client 20.58.138.186:43903] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/i1.php"] [unique_id "aR8MngK8BWUoW3xq0HAiNgAAA5g"]
[Thu Nov 20 20:42:08.658547 2025] [:error] [pid 34405:tid 34426] [client 20.58.138.186:61321] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/i1.php"] [unique_id "aR8MoDFpvu8oRK7ATfsySQAAARM"]
[Thu Nov 20 20:42:09.363821 2025] [:error] [pid 40445:tid 40481] [client 20.58.138.186:43881] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/link.php"] [unique_id "aR8MoVH-MuFcoWRjXpaAMwAAAkY"]
[Thu Nov 20 20:42:17.606050 2025] [:error] [pid 40415:tid 40430] [client 20.58.138.186:43840] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/link.php"] [unique_id "aR8MqahjIyLSv09svwPC-QAAAcw"]
[Thu Nov 20 20:42:18.308950 2025] [:error] [pid 55342:tid 55377] [client 20.58.138.186:54113] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/link.php"] [unique_id "aR8Mqrg6x32Tvk7fIG_2oAAAAEU"]
[Thu Nov 20 20:42:22.119869 2025] [:error] [pid 55340:tid 55364] [client 20.58.138.186:45970] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/link.php"] [unique_id "aR8MrvOxD-NeMydTybCz5QAAABM"]
[Thu Nov 20 20:42:50.603258 2025] [:error] [pid 55340:tid 55346] [client 20.58.138.186:43870] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/17.php"] [unique_id "aR8MyvOxD-NeMydTybCz8gAAAAE"]
[Thu Nov 20 20:42:54.251004 2025] [:error] [pid 55430:tid 55446] [client 20.58.138.186:60439] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/0.php"] [unique_id "aR8MzvPZXaIMEU4pE7sVuAAAAM0"]
[Thu Nov 20 20:42:55.943992 2025] [:error] [pid 40445:tid 40487] [client 20.58.138.186:31230] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/0.php"] [unique_id "aR8Mz1H-MuFcoWRjXpaAlQAAAkw"]
[Thu Nov 20 20:43:12.924379 2025] [:error] [pid 55343:tid 55421] [client 20.58.138.186:31167] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aR8M4FWlO3EnyVMV7w7GNQAAAJY"]
[Thu Nov 20 20:43:14.577321 2025] [:error] [pid 40445:tid 40477] [client 20.58.138.186:58181] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aR8M4lH-MuFcoWRjXpaAtAAAAkI"]
[Thu Nov 20 20:43:16.094161 2025] [:error] [pid 40636:tid 40643] [client 20.58.138.186:43999] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aR8M5AK8BWUoW3xq0HAiXgAAA4M"]
[Thu Nov 20 20:43:16.478277 2025] [:error] [pid 40445:tid 40495] [client 20.58.138.186:8929] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aR8M5FH-MuFcoWRjXpaAtwAAAlQ"]
[Thu Nov 20 20:43:17.475025 2025] [:error] [pid 40636:tid 40645] [client 20.58.138.186:58220] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-configs.php"] [unique_id "aR8M5QK8BWUoW3xq0HAiYAAAA4U"]
[Thu Nov 20 20:43:20.098540 2025] [:error] [pid 40537:tid 40541] [client 20.58.138.186:31175] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-configs.php"] [unique_id "aR8M6KKlsL5kxTa3c1z26QAAAsA"]
[Thu Nov 20 20:43:21.728797 2025] [:error] [pid 40636:tid 40652] [client 20.58.138.186:44028] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-configs.php"] [unique_id "aR8M6QK8BWUoW3xq0HAiYwAAA4w"]
[Thu Nov 20 20:43:22.480256 2025] [:error] [pid 40445:tid 40477] [client 20.58.138.186:44010] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-configs.php"] [unique_id "aR8M6lH-MuFcoWRjXpaAwwAAAkI"]
[Thu Nov 20 20:43:23.888488 2025] [:error] [pid 55430:tid 55453] [client 20.58.138.186:31105] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aR8M6_PZXaIMEU4pE7sVzwAAANQ"]
[Thu Nov 20 20:43:24.648314 2025] [:error] [pid 40508:tid 40519] [client 20.58.138.186:58215] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/click.php"] [unique_id "aR8M7KxXNVCMW_ksxPvOBQAAAok"]
[Thu Nov 20 20:43:31.213987 2025] [:error] [pid 40445:tid 40477] [client 20.58.138.186:8934] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/click.php"] [unique_id "aR8M81H-MuFcoWRjXpaA1QAAAkI"]
[Thu Nov 20 20:43:33.275612 2025] [:error] [pid 40636:tid 40653] [client 20.58.138.186:60437] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/click.php"] [unique_id "aR8M9QK8BWUoW3xq0HAiaQAAA40"]
[Thu Nov 20 20:43:34.074817 2025] [:error] [pid 55342:tid 55386] [client 20.58.138.186:58186] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/click.php"] [unique_id "aR8M9rg6x32Tvk7fIG_2zgAAAE4"]
[Thu Nov 20 20:43:34.980452 2025] [:error] [pid 40445:tid 40497] [client 20.58.138.186:31125] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/install.php"] [unique_id "aR8M9lH-MuFcoWRjXpaA3QAAAlY"]
[Thu Nov 20 20:44:02.453291 2025] [:error] [pid 55343:tid 55411] [client 20.58.138.186:8896] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR8NElWlO3EnyVMV7w7GXwAAAIw"]
[Thu Nov 20 20:44:03.541658 2025] [:error] [pid 55430:tid 55457] [client 20.58.138.186:44002] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR8NE_PZXaIMEU4pE7sV-QAAANg"]
[Thu Nov 20 20:44:04.381050 2025] [:error] [pid 40636:tid 40656] [client 20.58.138.186:8902] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR8NFAK8BWUoW3xq0HAidwAAA5A"]
[Thu Nov 20 20:44:07.339921 2025] [:error] [pid 34405:tid 34407] [client 20.58.138.186:31173] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR8NFzFpvu8oRK7ATfsywgAAAQA"]
[Thu Nov 20 20:44:08.898346 2025] [:error] [pid 40445:tid 40485] [client 20.58.138.186:31144] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/q.php"] [unique_id "aR8NGFH-MuFcoWRjXpaBMgAAAko"]
[Thu Nov 20 20:44:13.929643 2025] [:error] [pid 40445:tid 40482] [client 20.58.138.186:61343] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/q.php"] [unique_id "aR8NHVH-MuFcoWRjXpaBOwAAAkc"]
[Thu Nov 20 20:44:15.578354 2025] [:error] [pid 55343:tid 55417] [client 20.58.138.186:40401] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/q.php"] [unique_id "aR8NH1WlO3EnyVMV7w7GYwAAAJI"]
[Thu Nov 20 20:44:16.295790 2025] [:error] [pid 55343:tid 55413] [client 20.58.138.186:31176] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/q.php"] [unique_id "aR8NIFWlO3EnyVMV7w7GZwAAAI4"]
[Thu Nov 20 20:44:17.383284 2025] [:error] [pid 40415:tid 40421] [client 20.58.138.186:40336] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/123.php"] [unique_id "aR8NIahjIyLSv09svwPDiAAAAcM"]
[Thu Nov 20 20:44:20.706578 2025] [:error] [pid 55343:tid 55421] [client 20.58.138.186:8953] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/123.php"] [unique_id "aR8NJFWlO3EnyVMV7w7GbAAAAJY"]
[Thu Nov 20 20:44:22.758967 2025] [:error] [pid 34405:tid 34418] [client 20.58.138.186:8940] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/123.php"] [unique_id "aR8NJjFpvu8oRK7ATfsy1wAAAQs"]
[Thu Nov 20 20:44:27.455875 2025] [:error] [pid 55430:tid 55442] [client 20.58.138.186:43988] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/123.php"] [unique_id "aR8NK_PZXaIMEU4pE7sWEQAAAMk"]
[Thu Nov 20 20:44:28.901734 2025] [:error] [pid 34405:tid 34421] [client 20.58.138.186:58211] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aR8NLDFpvu8oRK7ATfsy3AAAAQ4"]
[Thu Nov 20 20:44:29.812790 2025] [:error] [pid 55340:tid 55368] [client 20.58.138.186:53583] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aR8NLfOxD-NeMydTybC0VgAAABc"]
[Thu Nov 20 20:44:31.978976 2025] [:error] [pid 40537:tid 40546] [client 20.58.138.186:53626] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aR8NL6KlsL5kxTa3c1z3KQAAAsU"]
[Thu Nov 20 20:44:33.997660 2025] [:error] [pid 55343:tid 55423] [client 20.58.138.186:8912] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aR8NMVWlO3EnyVMV7w7GggAAAJg"]
[Thu Nov 20 20:44:35.686719 2025] [:error] [pid 40415:tid 40419] [client 20.58.138.186:8761] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/aa.php"] [unique_id "aR8NM6hjIyLSv09svwPDowAAAcE"]
[Thu Nov 20 20:44:36.538325 2025] [:error] [pid 34405:tid 34407] [client 20.58.138.186:8750] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/aa.php"] [unique_id "aR8NNDFpvu8oRK7ATfsy6QAAAQA"]
[Thu Nov 20 20:44:37.092283 2025] [:error] [pid 40445:tid 40495] [client 20.58.138.186:9190] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/aa.php"] [unique_id "aR8NNVH-MuFcoWRjXpaBVAAAAlQ"]
[Thu Nov 20 20:44:39.393685 2025] [:error] [pid 40636:tid 40657] [client 20.58.138.186:54668] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/aa.php"] [unique_id "aR8NNwK8BWUoW3xq0HAiiwAAA5E"]
[Thu Nov 20 20:44:40.674097 2025] [:error] [pid 40636:tid 40643] [client 20.58.138.186:8763] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uploads/multi.php"] [unique_id "aR8NOAK8BWUoW3xq0HAijQAAA4M"]
[Thu Nov 20 20:44:41.857385 2025] [:error] [pid 55342:tid 55380] [client 20.58.138.186:56012] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uploads/multi.php"] [unique_id "aR8NObg6x32Tvk7fIG_3CgAAAEg"]
[Thu Nov 20 20:44:45.496274 2025] [:error] [pid 55340:tid 55358] [client 20.58.138.186:56035] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uploads/multi.php"] [unique_id "aR8NPfOxD-NeMydTybC0XgAAAA0"]
[Thu Nov 20 20:44:46.128608 2025] [:error] [pid 40445:tid 40477] [client 20.58.138.186:8710] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uploads/multi.php"] [unique_id "aR8NPlH-MuFcoWRjXpaBXAAAAkI"]
[Thu Nov 20 20:44:47.770887 2025] [:error] [pid 55430:tid 55453] [client 20.58.138.186:8474] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/3.php"] [unique_id "aR8NP_PZXaIMEU4pE7sWLwAAANQ"]
[Thu Nov 20 20:44:48.123280 2025] [:error] [pid 40508:tid 40534] [client 20.58.138.186:8645] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/3.php"] [unique_id "aR8NQKxXNVCMW_ksxPvOiAAAApg"]
[Thu Nov 20 20:44:48.891113 2025] [:error] [pid 40508:tid 40531] [client 20.58.138.186:8501] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/3.php"] [unique_id "aR8NQKxXNVCMW_ksxPvOjAAAApU"]
[Thu Nov 20 20:44:50.358778 2025] [:error] [pid 55430:tid 55448] [client 20.58.138.186:8510] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/3.php"] [unique_id "aR8NQvPZXaIMEU4pE7sWMwAAAM8"]
[Thu Nov 20 20:44:50.953169 2025] [:error] [pid 55343:tid 55421] [client 20.58.138.186:8475] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aR8NQlWlO3EnyVMV7w7GiwAAAJY"]
[Thu Nov 20 20:45:23.787164 2025] [:error] [pid 40445:tid 40490] [client 20.58.138.186:43792] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/403.php"] [unique_id "aR8NY1H-MuFcoWRjXpaBrAAAAk8"]
[Thu Nov 20 20:45:24.615453 2025] [:error] [pid 55343:tid 55413] [client 20.58.138.186:43789] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/403.php"] [unique_id "aR8NZFWlO3EnyVMV7w7GowAAAI4"]
[Thu Nov 20 20:45:25.592771 2025] [:error] [pid 55343:tid 55420] [client 20.58.138.186:36575] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/403.php"] [unique_id "aR8NZVWlO3EnyVMV7w7GqAAAAJU"]
[Thu Nov 20 20:45:27.252002 2025] [:error] [pid 55430:tid 55436] [client 20.58.138.186:36581] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/403.php"] [unique_id "aR8NZ_PZXaIMEU4pE7sWWQAAAMM"]
[Thu Nov 20 20:45:28.789899 2025] [:error] [pid 55340:tid 55351] [client 20.58.138.186:28808] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aR8NaPOxD-NeMydTybC0dwAAAAY"]
[Thu Nov 20 20:45:29.262808 2025] [:error] [pid 40636:tid 40644] [client 20.58.138.186:8323] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aR8NaQK8BWUoW3xq0HAipQAAA4Q"]
[Thu Nov 20 20:45:30.573294 2025] [:error] [pid 55340:tid 55367] [client 20.58.138.186:9097] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aR8NavOxD-NeMydTybC0fAAAABY"]
[Thu Nov 20 20:45:32.016337 2025] [:error] [pid 40537:tid 40546] [client 20.58.138.186:24328] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aR8NbKKlsL5kxTa3c1z3XgAAAsU"]
[Thu Nov 20 20:45:35.294339 2025] [:error] [pid 40415:tid 40438] [client 20.58.138.186:63746] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lock360.php"] [unique_id "aR8Nb6hjIyLSv09svwPD5AAAAdQ"]
[Thu Nov 20 20:45:36.462117 2025] [:error] [pid 40508:tid 40527] [client 20.58.138.186:36600] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lock360.php"] [unique_id "aR8NcKxXNVCMW_ksxPvO8wAAApE"]
[Thu Nov 20 20:45:37.123323 2025] [:error] [pid 40445:tid 40490] [client 20.58.138.186:63769] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lock360.php"] [unique_id "aR8NcVH-MuFcoWRjXpaBvwAAAk8"]
[Thu Nov 20 20:45:40.230679 2025] [:error] [pid 40445:tid 40492] [client 20.58.138.186:8626] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lock360.php"] [unique_id "aR8NdFH-MuFcoWRjXpaBxQAAAlE"]
[Thu Nov 20 20:45:42.314827 2025] [:error] [pid 40415:tid 40426] [client 20.58.138.186:64838] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/up.php"] [unique_id "aR8NdqhjIyLSv09svwPD6wAAAcg"]
[Thu Nov 20 20:45:43.072797 2025] [:error] [pid 40415:tid 40437] [client 20.58.138.186:24329] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/up.php"] [unique_id "aR8Nd6hjIyLSv09svwPD7gAAAdM"]
[Thu Nov 20 20:45:43.436180 2025] [:error] [pid 55343:tid 55407] [client 20.58.138.186:8638] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/up.php"] [unique_id "aR8Nd1WlO3EnyVMV7w7GswAAAIg"]
[Thu Nov 20 20:45:45.744767 2025] [:error] [pid 40445:tid 40489] [client 20.58.138.186:9027] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/up.php"] [unique_id "aR8NeVH-MuFcoWRjXpaB2QAAAk4"]
[Thu Nov 20 20:45:48.797275 2025] [:error] [pid 40445:tid 40485] [client 20.58.138.186:8624] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sim.php"] [unique_id "aR8NfFH-MuFcoWRjXpaB3gAAAko"]
[Thu Nov 20 20:45:49.995266 2025] [:error] [pid 55340:tid 55350] [client 20.58.138.186:9065] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sim.php"] [unique_id "aR8NffOxD-NeMydTybC0kQAAAAU"]
[Thu Nov 20 20:45:51.198325 2025] [:error] [pid 40636:tid 40642] [client 20.58.138.186:9034] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sim.php"] [unique_id "aR8NfwK8BWUoW3xq0HAitAAAA4I"]
[Thu Nov 20 20:46:05.242170 2025] [:error] [pid 34405:tid 34415] [client 20.58.138.186:63777] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ioxi-o.php"] [unique_id "aR8NjTFpvu8oRK7ATfszNgAAAQg"]
[Thu Nov 20 20:46:06.133024 2025] [:error] [pid 55430:tid 55446] [client 20.58.138.186:9036] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ioxi-o.php"] [unique_id "aR8NjvPZXaIMEU4pE7sWjgAAAM0"]
[Thu Nov 20 20:46:07.604037 2025] [:error] [pid 34405:tid 34413] [client 20.58.138.186:36606] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ioxi-o.php"] [unique_id "aR8NjzFpvu8oRK7ATfszPgAAAQY"]
[Thu Nov 20 20:46:10.993754 2025] [:error] [pid 34405:tid 34414] [client 20.58.138.186:9039] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ioxi-o.php"] [unique_id "aR8NkjFpvu8oRK7ATfszQgAAAQc"]
[Thu Nov 20 20:46:12.237157 2025] [:error] [pid 40636:tid 40656] [client 20.58.138.186:49488] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/oo.php"] [unique_id "aR8NlAK8BWUoW3xq0HAivgAAA5A"]
[Thu Nov 20 20:46:30.221708 2025] [:error] [pid 55430:tid 55434] [client 20.58.138.186:8437] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aR8NpvPZXaIMEU4pE7sWpwAAAME"]
[Thu Nov 20 20:46:46.495677 2025] [:error] [pid 40636:tid 40643] [client 20.58.138.186:8613] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aR8NtgK8BWUoW3xq0HAi5QAAA4M"]
[Thu Nov 20 20:46:52.558831 2025] [:error] [pid 40508:tid 40532] [client 20.58.138.186:50859] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wi.php"] [unique_id "aR8NvKxXNVCMW_ksxPvPRQAAApY"]
[Thu Nov 20 20:46:54.008093 2025] [:error] [pid 55343:tid 55416] [client 20.58.138.186:8798] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wi.php"] [unique_id "aR8NvlWlO3EnyVMV7w7G_wAAAJE"]
[Thu Nov 20 20:46:54.782028 2025] [:error] [pid 55342:tid 55379] [client 20.58.138.186:61269] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wi.php"] [unique_id "aR8Nvrg6x32Tvk7fIG_3uAAAAEc"]
[Thu Nov 20 20:46:57.988902 2025] [:error] [pid 40445:tid 40478] [client 20.58.138.186:43846] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wi.php"] [unique_id "aR8NwVH-MuFcoWRjXpaCZgAAAkM"]
[Thu Nov 20 20:47:00.691228 2025] [:error] [pid 40415:tid 40420] [client 20.58.138.186:43895] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mms.php"] [unique_id "aR8NxKhjIyLSv09svwPEWgAAAcI"]
[Thu Nov 20 20:47:01.536891 2025] [:error] [pid 40445:tid 40476] [client 20.58.138.186:33515] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mms.php"] [unique_id "aR8NxVH-MuFcoWRjXpaCagAAAkE"]
[Thu Nov 20 20:47:16.268938 2025] [:error] [pid 40508:tid 40517] [client 20.58.138.186:46038] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aR8N1KxXNVCMW_ksxPvPZAAAAoc"]
[Thu Nov 20 20:47:16.963718 2025] [:error] [pid 55343:tid 55420] [client 20.58.138.186:45995] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/v4.php"] [unique_id "aR8N1FWlO3EnyVMV7w7HEQAAAJU"]
[Thu Nov 20 20:47:19.187213 2025] [:error] [pid 55340:tid 55357] [client 20.58.138.186:46012] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/v4.php"] [unique_id "aR8N1_OxD-NeMydTybC00wAAAAw"]
[Thu Nov 20 20:47:19.858965 2025] [:error] [pid 40636:tid 40652] [client 20.58.138.186:59391] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/v4.php"] [unique_id "aR8N1wK8BWUoW3xq0HAjBAAAA4w"]
[Thu Nov 20 20:47:22.230377 2025] [:error] [pid 40445:tid 40481] [client 20.58.138.186:45979] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/v4.php"] [unique_id "aR8N2lH-MuFcoWRjXpaClQAAAkY"]
[Thu Nov 20 20:47:36.640440 2025] [:error] [pid 55430:tid 55448] [client 20.58.138.186:50848] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-mn.php"] [unique_id "aR8N6PPZXaIMEU4pE7sW5gAAAM8"]
[Thu Nov 20 20:47:37.370854 2025] [:error] [pid 55343:tid 55407] [client 20.58.138.186:59338] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-mn.php"] [unique_id "aR8N6VWlO3EnyVMV7w7HMQAAAIg"]
[Thu Nov 20 20:47:38.041426 2025] [:error] [pid 40415:tid 40434] [client 20.58.138.186:46048] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "aR8N6qhjIyLSv09svwPEjAAAAdA"]
[Thu Nov 20 20:47:41.102911 2025] [:error] [pid 55342:tid 55374] [client 20.58.138.186:45954] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "aR8N7bg6x32Tvk7fIG_38QAAAEI"]
[Thu Nov 20 20:47:46.385918 2025] [:error] [pid 40508:tid 40511] [client 20.58.138.186:47964] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "aR8N8qxXNVCMW_ksxPvPngAAAoE"]
[Thu Nov 20 20:48:03.080564 2025] [:error] [pid 55430:tid 55448] [client 20.58.138.186:64312] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aR8OA_PZXaIMEU4pE7sXAgAAAM8"]
[Thu Nov 20 20:48:20.615326 2025] [:error] [pid 40508:tid 40532] [client 20.58.138.186:33485] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/assets/js/wp-config.php"] [unique_id "aR8OFKxXNVCMW_ksxPvPxAAAApY"]
[Thu Nov 20 23:47:40.526990 2025] [:error] [pid 40415:tid 40440] [client 188.166.108.93:37554] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aR84HKhjIyLSv09svwPq1wAAAdY"]
[Thu Nov 20 23:47:48.139396 2025] [authz_core:error] [pid 55430:tid 55449] [client 188.166.108.93:56020] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Thu Nov 20 23:47:52.115368 2025] [:error] [pid 40508:tid 40528] [client 188.166.108.93:32798] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aR84KKxXNVCMW_ksxPsCIAAAApI"]
[Thu Nov 20 23:47:52.832099 2025] [:error] [pid 40508:tid 40524] [client 188.166.108.93:32804] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aR84KKxXNVCMW_ksxPsCIgAAAo4"]
[Fri Nov 21 14:49:35.254831 2025] [:error] [pid 25430:tid 25478] [client 213.21.239.4:34192] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSALf6pnWJcWt_4foXkZBQAAAFI"]
[Fri Nov 21 15:13:17.464225 2025] [:error] [pid 25521:tid 25540] [client 213.21.239.4:44554] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSARDfhXnBMilDddn3XAewAAANE"]
[Fri Nov 21 15:28:02.689872 2025] [:error] [pid 25429:tid 25442] [client 167.172.158.128:42798] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSAUgj4rZbRSr7vu-NONaQAAAAk"]
[Fri Nov 21 15:28:07.718018 2025] [authz_core:error] [pid 25554:tid 25563] [client 167.172.158.128:42868] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Fri Nov 21 15:28:10.266370 2025] [:error] [pid 25429:tid 25451] [client 167.172.158.128:42902] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aSAUij4rZbRSr7vu-NONeAAAABI"]
[Fri Nov 21 15:28:10.684494 2025] [:error] [pid 25429:tid 25452] [client 167.172.158.128:42914] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSAUij4rZbRSr7vu-NONegAAABM"]
[Fri Nov 21 15:48:38.507692 2025] [:error] [pid 25521:tid 25535] [client 213.21.239.4:57786] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.svn/wc.db"] [unique_id "aSAZVvhXnBMilDddn3XWKAAAAMw"]
[Fri Nov 21 16:12:20.812514 2025] [:error] [pid 25554:tid 25570] [client 213.21.239.4:52206] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.svn/wc.db"] [unique_id "aSAe5B-NtB-9AzFZrk5dmAAAAQw"]
[Sat Nov 22 02:49:20.718635 2025] [:error] [pid 49641:tid 49825] [client 165.227.98.210:45852] [client 165.227.98.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSC0MFnhuiDak938N_bSuAAAAAI"]
[Sat Nov 22 03:53:15.330929 2025] [:error] [pid 53479:tid 53543] [client 103.167.150.158:56215] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/media/system/js/core.js"] [unique_id "aSDDK26cicFF3Aas-oQ8IAAAAIc"]
[Sat Nov 22 05:14:27.076615 2025] [:error] [pid 53477:tid 53502] [client 165.227.98.210:51520] [client 165.227.98.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSDWM37Lu30Ku9O40aLL-wAAABU"]
[Sat Nov 22 10:40:31.190543 2025] [:error] [pid 53479:tid 53558] [client 167.172.246.101:33046] [client 167.172.246.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSEin26cicFF3Aas-oTiZQAAAJY"]
[Sat Nov 22 13:02:15.020386 2025] [:error] [pid 9547:tid 9564] [client 167.172.246.101:60200] [client 167.172.246.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSFD19ClOR5qk7DoMeFCnwAAAUs"]
[Sat Nov 22 18:11:26.888571 2025] [:error] [pid 53478:tid 53523] [client 134.209.25.199:38274] [client 134.209.25.199] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSGMTghUYdXBbQswAdTtfQAAAE4"]
[Sat Nov 22 18:11:37.811770 2025] [authz_core:error] [pid 53478:tid 53527] [client 134.209.25.199:55350] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Sat Nov 22 18:11:43.477222 2025] [:error] [pid 53478:tid 53529] [client 134.209.25.199:37182] [client 134.209.25.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aSGMXwhUYdXBbQswAdTtnAAAAFQ"]
[Sat Nov 22 18:11:44.499733 2025] [:error] [pid 9547:tid 9573] [client 134.209.25.199:37194] [client 134.209.25.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSGMYNClOR5qk7DoMeGkAgAAAVQ"]
[Sat Nov 22 21:05:44.867693 2025] [:error] [pid 53566:tid 53590] [client 216.73.163.143:54001] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSG1KMbSHDBkRbwMbd5ZFwAAANY"]
[Sat Nov 22 21:05:49.631730 2025] [:error] [pid 53478:tid 53513] [client 216.73.163.141:56555] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSG1LQhUYdXBbQswAdQh7wAAAEQ"]
[Sat Nov 22 21:05:56.485809 2025] [:error] [pid 44259:tid 44265] [client 216.73.163.144:21569] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tinyfilemanager.php"] [unique_id "aSG1NHXe1xL-_YOdRmS-CQAAAYM"]
[Sat Nov 22 21:06:00.346091 2025] [:error] [pid 53479:tid 53558] [client 216.73.163.151:52749] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSG1OG6cicFF3Aas-oTDoAAAAJY"]
[Sat Nov 22 21:06:07.515806 2025] [:error] [pid 9547:tid 9554] [client 45.146.54.139:62555] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSG1P9ClOR5qk7DoMeHvdQAAAUE"]
[Sat Nov 22 21:06:09.245894 2025] [:error] [pid 53477:tid 53504] [client 216.73.163.154:50169] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSG1QX7Lu30Ku9O40aLoxwAAABc"]
[Sat Nov 22 21:06:09.924147 2025] [:error] [pid 53477:tid 53492] [client 216.73.163.152:55117] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSG1QX7Lu30Ku9O40aLoyQAAAAs"]
[Sat Nov 22 21:06:10.605925 2025] [:error] [pid 9547:tid 9575] [client 216.73.163.130:39157] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSG1QtClOR5qk7DoMeHvggAAAVY"]
[Sat Nov 22 21:06:11.288488 2025] [:error] [pid 53477:tid 53483] [client 216.73.163.155:64339] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSG1Q37Lu30Ku9O40aLozAAAAAI"]
[Sat Nov 22 21:06:12.194367 2025] [:error] [pid 9547:tid 9558] [client 216.73.163.150:61251] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSG1RNClOR5qk7DoMeHvnQAAAUU"]
[Sat Nov 22 21:06:13.535854 2025] [:error] [pid 53479:tid 53538] [client 216.73.163.132:60213] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSG1RW6cicFF3Aas-oTDuAAAAII"]
[Sat Nov 22 21:06:15.695286 2025] [:error] [pid 53566:tid 53571] [client 216.73.163.132:57765] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "aSG1R8bSHDBkRbwMbd5ZTgAAAMM"]
[Sat Nov 22 21:06:18.521387 2025] [:error] [pid 25856:tid 25858] [client 216.73.163.153:23403] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSG1ShsTP0wy94zKUvHpngAAAQA"]
[Sat Nov 22 21:06:19.912627 2025] [:error] [pid 53479:tid 53544] [client 45.146.54.137:20013] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSG1S26cicFF3Aas-oTDxwAAAIg"]
[Sat Nov 22 21:06:21.647165 2025] [:error] [pid 53477:tid 53505] [client 216.73.163.150:25583] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSG1TX7Lu30Ku9O40aLo1AAAABg"]
[Sat Nov 22 21:06:28.232848 2025] [:error] [pid 25856:tid 25870] [client 216.73.163.145:21815] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSG1VBsTP0wy94zKUvHppwAAAQw"]
[Sat Nov 22 21:06:29.980349 2025] [:error] [pid 9547:tid 9574] [client 216.73.163.156:25257] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSG1VdClOR5qk7DoMeHvpQAAAVU"]
[Sat Nov 22 21:06:32.679491 2025] [:error] [pid 53479:tid 53541] [client 216.73.163.157:48263] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSG1WG6cicFF3Aas-oTD4wAAAIU"]
[Sat Nov 22 21:06:34.405805 2025] [:error] [pid 44259:tid 44266] [client 216.73.163.155:32283] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSG1WnXe1xL-_YOdRmS-VgAAAYQ"]
[Sat Nov 22 21:06:39.310456 2025] [:error] [pid 44259:tid 44262] [client 216.73.163.136:49391] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSG1X3Xe1xL-_YOdRmS-WwAAAYA"]
[Sat Nov 22 21:06:41.010039 2025] [:error] [pid 44259:tid 44277] [client 216.73.163.157:50889] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSG1YXXe1xL-_YOdRmS-XgAAAY8"]
[Sat Nov 22 21:06:42.685784 2025] [:error] [pid 44259:tid 44264] [client 216.73.163.116:20117] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSG1YnXe1xL-_YOdRmS-YgAAAYI"]
[Sat Nov 22 21:06:43.382646 2025] [:error] [pid 9547:tid 9557] [client 216.73.163.120:49993] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSG1Y9ClOR5qk7DoMeHvwAAAAUQ"]
[Sat Nov 22 21:06:44.082592 2025] [:error] [pid 9547:tid 9574] [client 45.131.194.123:33729] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSG1ZNClOR5qk7DoMeHvwQAAAVU"]
[Sat Nov 22 21:06:47.862375 2025] [:error] [pid 53478:tid 53533] [client 216.73.163.144:37663] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSG1ZwhUYdXBbQswAdQiDwAAAFg"]
[Sat Nov 22 21:06:48.570170 2025] [:error] [pid 25856:tid 25858] [client 216.73.163.147:64967] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSG1aBsTP0wy94zKUvHpswAAAQA"]
[Sat Nov 22 21:06:49.287298 2025] [:error] [pid 9547:tid 9566] [client 216.73.163.160:39395] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSG1adClOR5qk7DoMeHvxwAAAU0"]
[Sat Nov 22 21:06:58.125989 2025] [:error] [pid 53477:tid 53482] [client 45.131.194.123:52761] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/admin.php"] [unique_id "aSG1cn7Lu30Ku9O40aLpCAAAAAE"]
[Sat Nov 22 21:07:01.544060 2025] [:error] [pid 53479:tid 53537] [client 45.131.194.123:56013] [client 45.131.194.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.123, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSG1dW6cicFF3Aas-oTEAQAAAIE"]
[Sat Nov 22 21:07:13.226057 2025] [:error] [pid 25856:tid 25874] [client 216.73.163.153:49893] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSG1gRsTP0wy94zKUvHpxwAAARA"]
[Sat Nov 22 21:07:15.943950 2025] [:error] [pid 53566:tid 53572] [client 216.73.163.147:64935] [client 216.73.163.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.147, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSG1g8bSHDBkRbwMbd5ZcwAAAMQ"]
[Sat Nov 22 21:07:17.948373 2025] [:error] [pid 44259:tid 44266] [client 216.73.163.119:47703] [client 216.73.163.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/item.php"] [unique_id "aSG1hXXe1xL-_YOdRmS-yQAAAYQ"]
[Sat Nov 22 21:07:26.089624 2025] [:error] [pid 53479:tid 53555] [client 216.73.163.121:39985] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSG1jm6cicFF3Aas-oTEHQAAAJM"]
[Sat Nov 22 21:07:34.812698 2025] [:error] [pid 9547:tid 9573] [client 216.73.163.134:59973] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSG1ltClOR5qk7DoMeHwBAAAAVQ"]
[Sat Nov 22 21:07:37.492760 2025] [:error] [pid 44259:tid 44276] [client 216.73.163.147:30633] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSG1mXXe1xL-_YOdRmS-9QAAAY4"]
[Sat Nov 22 21:07:50.183307 2025] [autoindex:error] [pid 53478:tid 53509] [client 216.73.163.138:36619] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:07:50.538689 2025] [autoindex:error] [pid 53478:tid 53523] [client 216.73.163.138:36619] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:07:50.887869 2025] [autoindex:error] [pid 53478:tid 53529] [client 216.73.163.138:36619] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:07:51.232998 2025] [autoindex:error] [pid 53478:tid 53511] [client 216.73.163.138:36619] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:07:53.635803 2025] [autoindex:error] [pid 53477:tid 53481] [client 216.73.163.134:37451] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:07:53.982928 2025] [autoindex:error] [pid 53477:tid 53505] [client 216.73.163.134:37451] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:07:54.345855 2025] [autoindex:error] [pid 53477:tid 53503] [client 216.73.163.134:37451] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:07:54.695769 2025] [autoindex:error] [pid 53477:tid 53487] [client 216.73.163.134:37451] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:07:56.403815 2025] [autoindex:error] [pid 44259:tid 44266] [client 216.73.163.139:21213] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:07:57.428104 2025] [autoindex:error] [pid 44259:tid 44269] [client 216.73.163.139:21213] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:07:57.770079 2025] [autoindex:error] [pid 44259:tid 44283] [client 216.73.163.139:21213] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:00.214857 2025] [autoindex:error] [pid 53478:tid 53511] [client 216.73.163.136:63011] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:00.580012 2025] [autoindex:error] [pid 53478:tid 53528] [client 216.73.163.136:63011] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:00.951787 2025] [autoindex:error] [pid 53478:tid 53521] [client 216.73.163.136:63011] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:01.315069 2025] [autoindex:error] [pid 53478:tid 53517] [client 216.73.163.136:63011] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:05.736545 2025] [autoindex:error] [pid 44259:tid 44269] [client 216.73.163.133:57449] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:08.158120 2025] [autoindex:error] [pid 53477:tid 53491] [client 216.73.163.143:62921] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:08.506351 2025] [autoindex:error] [pid 53477:tid 53493] [client 216.73.163.143:62921] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:08.865896 2025] [autoindex:error] [pid 53477:tid 53484] [client 216.73.163.143:62921] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:12.283813 2025] [autoindex:error] [pid 9547:tid 9561] [client 216.73.163.117:50441] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:15.365275 2025] [autoindex:error] [pid 53478:tid 53512] [client 45.146.54.133:27479] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:16.724718 2025] [autoindex:error] [pid 44259:tid 44264] [client 216.73.163.151:55437] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:17.136189 2025] [autoindex:error] [pid 44259:tid 44283] [client 216.73.163.151:55437] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:17.822345 2025] [proxy_fcgi:error] [pid 44259:tid 44267] [client 216.73.163.151:55437] AH01071: Got error 'PHP message: PHP Warning:  Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/crosscen/public_html/wp-includes/blocks/index.php on line 8PHP message: PHP Warning:  Use of undefined constant WPINC - assumed 'WPINC' (this will throw an Error in a future version of PHP) in /home/crosscen/public_html/wp-includes/blocks/index.php on line 8PHP message: PHP Warning:  require(ABSPATHWPINC/blocks/legacy-widget.php): failed to open stream: No such file or directory in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11PHP message: PHP Warning:  require(ABSPATHWPINC/blocks/legacy-widget.php): failed to open stream: No such file or directory in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11PHP message: PHP Fatal error:  require(): Failed opening required 'ABSPATHWPINC/blocks/legacy-widget.php' (include_path='.:') in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11'
[Sat Nov 22 21:08:18.585945 2025] [autoindex:error] [pid 53477:tid 53497] [client 216.73.163.153:25447] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:18.976068 2025] [autoindex:error] [pid 53477:tid 53504] [client 216.73.163.153:25447] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:19.328746 2025] [autoindex:error] [pid 53477:tid 53505] [client 216.73.163.153:25447] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:22.443524 2025] [autoindex:error] [pid 9547:tid 9567] [client 216.73.163.157:57879] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:50.584149 2025] [autoindex:error] [pid 53478:tid 53529] [client 216.73.163.120:28167] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:50.964899 2025] [autoindex:error] [pid 53478:tid 53525] [client 216.73.163.120:28167] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:51.309229 2025] [autoindex:error] [pid 53478:tid 53512] [client 216.73.163.120:28167] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:51.652458 2025] [autoindex:error] [pid 53478:tid 53527] [client 216.73.163.120:28167] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:52.003142 2025] [autoindex:error] [pid 53478:tid 53528] [client 216.73.163.120:28167] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:52.348667 2025] [autoindex:error] [pid 53478:tid 53521] [client 216.73.163.120:28167] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:52.810029 2025] [autoindex:error] [pid 53478:tid 53524] [client 216.73.163.120:28167] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:53.159302 2025] [autoindex:error] [pid 53478:tid 53518] [client 216.73.163.120:28167] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:54.603718 2025] [autoindex:error] [pid 53479:tid 53558] [client 216.73.163.121:33059] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:55.947157 2025] [autoindex:error] [pid 44259:tid 44276] [client 216.73.163.146:20873] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:56.291524 2025] [autoindex:error] [pid 44259:tid 44279] [client 216.73.163.146:20873] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:56.641043 2025] [autoindex:error] [pid 44259:tid 44275] [client 216.73.163.146:20873] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:56.988836 2025] [autoindex:error] [pid 44259:tid 44283] [client 216.73.163.146:20873] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/wlw/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:57.347213 2025] [autoindex:error] [pid 44259:tid 44282] [client 216.73.163.146:20873] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:57.710663 2025] [autoindex:error] [pid 44259:tid 44264] [client 216.73.163.146:20873] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:58.068083 2025] [autoindex:error] [pid 44259:tid 44272] [client 216.73.163.146:20873] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:08:58.421661 2025] [autoindex:error] [pid 44259:tid 44281] [client 216.73.163.146:20873] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:09:22.603213 2025] [autoindex:error] [pid 53478:tid 53529] [client 216.73.163.139:34963] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:09:34.540163 2025] [autoindex:error] [pid 44259:tid 44262] [client 216.73.163.134:22451] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:09:38.838271 2025] [autoindex:error] [pid 53566:tid 53573] [client 216.73.163.157:60529] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:09:39.184125 2025] [autoindex:error] [pid 53566:tid 53585] [client 216.73.163.157:60529] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:09:39.525955 2025] [autoindex:error] [pid 53566:tid 53570] [client 216.73.163.157:60529] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/XML/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:09:42.978128 2025] [autoindex:error] [pid 53477:tid 53486] [client 216.73.163.147:43867] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:09:43.334319 2025] [autoindex:error] [pid 53477:tid 53484] [client 216.73.163.147:43867] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:09:43.742933 2025] [autoindex:error] [pid 53477:tid 53503] [client 216.73.163.147:43867] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:09:44.085769 2025] [autoindex:error] [pid 53477:tid 53481] [client 216.73.163.147:43867] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:09:44.435331 2025] [autoindex:error] [pid 53477:tid 53489] [client 216.73.163.147:43867] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:09:44.827362 2025] [autoindex:error] [pid 53477:tid 53496] [client 216.73.163.147:43867] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:09:45.188274 2025] [autoindex:error] [pid 53477:tid 53488] [client 216.73.163.147:43867] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:09:45.538898 2025] [autoindex:error] [pid 53477:tid 53504] [client 216.73.163.147:43867] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:09:45.882036 2025] [autoindex:error] [pid 53477:tid 53501] [client 216.73.163.147:43867] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:10:05.309754 2025] [autoindex:error] [pid 53478:tid 53525] [client 216.73.163.132:54413] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 03:44:47.269241 2025] [:error] [pid 13598:tid 13624] [client 48.210.12.181:36149] [client 48.210.12.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "aSISr53OmqQ8OkmlvgzhHwAAABI"]
[Sun Nov 23 04:01:10.770531 2025] [:error] [pid 56178:tid 56221] [client 103.163.161.30:63032] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/style.php"] [unique_id "aSIWhpzQAXWPTUeTK1RgfQAAAEc"]
[Sun Nov 23 04:01:11.031107 2025] [:error] [pid 56275:tid 56294] [client 103.163.161.30:63303] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/style.php"] [unique_id "aSIWh7haClcAPg7VXOSFPAAAAM8"]
[Sun Nov 23 04:01:11.355857 2025] [:error] [pid 56178:tid 56232] [client 103.163.161.30:63400] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/style.php"] [unique_id "aSIWh5zQAXWPTUeTK1RgmgAAAFI"]
[Sun Nov 23 04:01:11.635940 2025] [:error] [pid 56178:tid 56221] [client 103.163.161.30:63580] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/style.php"] [unique_id "aSIWh5zQAXWPTUeTK1RgoAAAAEc"]
[Sun Nov 23 04:01:11.917100 2025] [:error] [pid 56178:tid 56228] [client 103.163.161.30:63663] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style.php"] [unique_id "aSIWh5zQAXWPTUeTK1RgqAAAAE4"]
[Sun Nov 23 04:01:12.175872 2025] [:error] [pid 56275:tid 56291] [client 103.163.161.30:63736] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "aSIWiLhaClcAPg7VXOSFUAAAAMw"]
[Sun Nov 23 04:01:12.429652 2025] [:error] [pid 56178:tid 56228] [client 103.163.161.30:63820] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/file.php"] [unique_id "aSIWiJzQAXWPTUeTK1RgtAAAAE4"]
[Sun Nov 23 04:01:12.687106 2025] [:error] [pid 56178:tid 56233] [client 103.163.161.30:63963] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/flower.php"] [unique_id "aSIWiJzQAXWPTUeTK1RgvQAAAFM"]
[Sun Nov 23 04:01:12.953494 2025] [:error] [pid 56178:tid 56234] [client 103.163.161.30:64071] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/gifclass.php"] [unique_id "aSIWiJzQAXWPTUeTK1RgxQAAAFQ"]
[Sun Nov 23 04:01:13.212326 2025] [:error] [pid 56176:tid 56198] [client 103.163.161.30:64122] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/bless.php"] [unique_id "aSIWibjUOh400lKsKrFWZAAAAAs"]
[Sun Nov 23 04:01:13.466943 2025] [:error] [pid 56176:tid 56191] [client 103.163.161.30:64268] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/class-t.api.php"] [unique_id "aSIWibjUOh400lKsKrFWbQAAAAQ"]
[Sun Nov 23 04:01:13.730026 2025] [:error] [pid 56178:tid 56238] [client 103.163.161.30:64454] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/blurbs.php"] [unique_id "aSIWiZzQAXWPTUeTK1Rg2AAAAFg"]
[Sun Nov 23 04:01:13.996377 2025] [:error] [pid 56181:tid 56246] [client 103.163.161.30:64574] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/akcc.php"] [unique_id "aSIWickLwhNGnt-ns6aTvwAAAIU"]
[Sun Nov 23 04:01:14.259935 2025] [:error] [pid 56178:tid 56234] [client 103.163.161.30:64731] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "aSIWipzQAXWPTUeTK1Rg8wAAAFQ"]
[Sun Nov 23 04:01:14.512968 2025] [:error] [pid 56176:tid 56189] [client 103.163.161.30:64875] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/shelp.php"] [unique_id "aSIWirjUOh400lKsKrFWgwAAAAI"]
[Sun Nov 23 04:01:14.754001 2025] [:error] [pid 56275:tid 56301] [client 103.163.161.30:65000] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/cord.php"] [unique_id "aSIWirhaClcAPg7VXOSFhQAAANY"]
[Sun Nov 23 04:01:15.042177 2025] [:error] [pid 56176:tid 56198] [client 103.163.161.30:65191] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/dex.php"] [unique_id "aSIWi7jUOh400lKsKrFWkgAAAAs"]
[Sun Nov 23 04:01:15.349770 2025] [:error] [pid 56176:tid 56210] [client 103.163.161.30:65345] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aSIWi7jUOh400lKsKrFWmQAAABc"]
[Sun Nov 23 04:01:15.628173 2025] [:error] [pid 56181:tid 56261] [client 103.163.161.30:49243] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/file2.php"] [unique_id "aSIWi8kLwhNGnt-ns6aT7AAAAJQ"]
[Sun Nov 23 04:01:15.912226 2025] [:error] [pid 56178:tid 56227] [client 103.163.161.30:49321] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/zwso.php"] [unique_id "aSIWi5zQAXWPTUeTK1RhFgAAAE0"]
[Sun Nov 23 04:01:16.184615 2025] [:error] [pid 56181:tid 56261] [client 103.163.161.30:49483] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/zwso.php"] [unique_id "aSIWjMkLwhNGnt-ns6aT9gAAAJQ"]
[Sun Nov 23 04:01:16.467808 2025] [:error] [pid 56176:tid 56203] [client 103.163.161.30:49579] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "aSIWjLjUOh400lKsKrFWrAAAABA"]
[Sun Nov 23 04:01:16.744115 2025] [:error] [pid 56275:tid 56301] [client 103.163.161.30:49753] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/bolt.php"] [unique_id "aSIWjLhaClcAPg7VXOSFmwAAANY"]
[Sun Nov 23 04:01:17.002937 2025] [:error] [pid 56181:tid 56243] [client 103.163.161.30:49859] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/shlo.php"] [unique_id "aSIWjckLwhNGnt-ns6aUGgAAAII"]
[Sun Nov 23 04:01:17.270981 2025] [:error] [pid 56176:tid 56207] [client 103.163.161.30:50011] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/133.php"] [unique_id "aSIWjbjUOh400lKsKrFWtAAAABQ"]
[Sun Nov 23 04:01:17.571670 2025] [:error] [pid 56176:tid 56187] [client 103.163.161.30:50133] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ahax.php"] [unique_id "aSIWjbjUOh400lKsKrFWugAAAAA"]
[Sun Nov 23 04:01:17.829181 2025] [:error] [pid 56275:tid 56286] [client 103.163.161.30:50311] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/php8.php"] [unique_id "aSIWjbhaClcAPg7VXOSFqQAAAMc"]
[Sun Nov 23 04:01:18.124034 2025] [:error] [pid 56181:tid 56264] [client 103.163.161.30:50525] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/lufix1.php"] [unique_id "aSIWjskLwhNGnt-ns6aUTAAAAJc"]
[Sun Nov 23 04:01:18.389653 2025] [:error] [pid 56181:tid 56241] [client 103.163.161.30:50735] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/witmm.php"] [unique_id "aSIWjskLwhNGnt-ns6aUVQAAAIA"]
[Sun Nov 23 04:01:18.655386 2025] [:error] [pid 56181:tid 56245] [client 103.163.161.30:50818] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/index.php"] [unique_id "aSIWjskLwhNGnt-ns6aUYgAAAIQ"]
[Sun Nov 23 04:01:18.932334 2025] [:error] [pid 56275:tid 56285] [client 103.163.161.30:50892] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSIWjrhaClcAPg7VXOSFtQAAAMY"]
[Sun Nov 23 04:01:19.212691 2025] [:error] [pid 56178:tid 56229] [client 103.163.161.30:50982] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/index.php"] [unique_id "aSIWj5zQAXWPTUeTK1RhTAAAAE8"]
[Sun Nov 23 04:01:19.484697 2025] [:error] [pid 56181:tid 56247] [client 103.163.161.30:51078] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ioxi-o.php"] [unique_id "aSIWj8kLwhNGnt-ns6aUiwAAAIY"]
[Sun Nov 23 04:01:19.779385 2025] [:error] [pid 56178:tid 56220] [client 103.163.161.30:51240] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "aSIWj5zQAXWPTUeTK1RhUwAAAEY"]
[Sun Nov 23 04:01:20.072060 2025] [:error] [pid 56275:tid 56296] [client 103.163.161.30:51430] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/files.php"] [unique_id "aSIWkLhaClcAPg7VXOSFxwAAANE"]
[Sun Nov 23 04:01:20.346575 2025] [:error] [pid 56178:tid 56223] [client 103.163.161.30:51594] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-editor.php"] [unique_id "aSIWkJzQAXWPTUeTK1RhXgAAAEk"]
[Sun Nov 23 06:25:49.230387 2025] [:error] [pid 38739:tid 38782] [client 216.126.225.91:54648] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSI4bQdvEgJm2n2cDmoWCAAAAE0"]
[Sun Nov 23 18:30:10.114915 2025] [:error] [pid 16066:tid 16079] [client 176.65.132.18:38842] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSLiMvq-c47Q5mW5E9GpwwAAAYo"]
[Sun Nov 23 19:12:52.824694 2025] [:error] [pid 38740:tid 38819] [client 172.70.250.23:13681] [client 172.70.250.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSLsNA13QPZSi6O8umXhRQAAAJc"]
[Sun Nov 23 20:43:20.448750 2025] [:error] [pid 14602:tid 14644] [client 172.70.240.201:9429] [client 172.70.240.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSMBaB-I77jdD81pU-nm7AAAAVc"]
[Mon Nov 24 02:51:55.981972 2025] [:error] [pid 1454:tid 1521] [client 176.65.132.18:47850] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSNXy7eh4NH3skJ5n4SMoQAAAMk"]
[Mon Nov 24 08:22:19.290789 2025] [:error] [pid 48600:tid 48637] [client 103.65.237.124:64934] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/sftp-config.json"] [unique_id "aSOlO_tOzSUAQvWVjBcLRAAAAcc"]
[Mon Nov 24 21:45:38.790875 2025] [:error] [pid 16593:tid 16600] [client 193.32.126.212:54982] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aSRhghVGznHBJI2LKpRr_wAAAoU"]
[Mon Nov 24 21:45:39.284980 2025] [:error] [pid 16549:tid 16573] [client 193.32.126.212:55575] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aSRhg6eWW19A99PUw_doEAAAAVQ"]
[Mon Nov 24 21:45:39.779487 2025] [:error] [pid 16441:tid 16453] [client 193.32.126.212:56037] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aSRhg4q_bc5MOa9HflmTYgAAAIk"]
[Tue Nov 25 15:35:57.205560 2025] [:error] [pid 28609:tid 28635] [client 157.245.64.206:60044] [client 157.245.64.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.64.206, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aSVcXSGGdT-nZJVs3x2RHQAAAZE"]
[Tue Nov 25 15:35:58.697623 2025] [:error] [pid 28609:tid 28633] [client 157.245.64.206:60809] [client 157.245.64.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.64.206, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aSVcXiGGdT-nZJVs3x2RIAAAAY8"]
[Tue Nov 25 19:14:10.466680 2025] [:error] [pid 14077:tid 14126] [client 54.173.250.15:39868] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSWPghG9n7UHEkwDTyiIPAAAAFA"]
[Tue Nov 25 22:59:22.774248 2025] [:error] [pid 14077:tid 14128] [client 157.245.64.206:49240] [client 157.245.64.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.64.206, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aSXEShG9n7UHEkwDTyjkrgAAAFI"]
[Tue Nov 25 23:37:32.397708 2025] [:error] [pid 14168:tid 14189] [client 4.251.107.128:50932] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSXNPPR-ZDU0QEgAIIusAgAAANI"]
[Tue Nov 25 23:37:38.456643 2025] [:error] [pid 43981:tid 43992] [client 4.251.107.128:50900] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSXNQggZn97m_qh_RaGHhQAAAwk"]
[Wed Nov 26 04:03:59.271529 2025] [:error] [pid 3010:tid 3035] [client 54.173.250.15:48082] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSYLr0Wl16-roARWvItK_gAAABU"]
[Wed Nov 26 04:38:50.876797 2025] [:error] [pid 3097:tid 3105] [client 104.154.131.238:54640] [client 104.154.131.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSYT2uVgdOH9N9jhT558FgAAAMQ"]
[Wed Nov 26 12:54:41.609846 2025] [:error] [pid 34744:tid 34822] [client 157.245.64.206:49683] [client 157.245.64.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.64.206, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aSaIEUtgOvVbhyALkTTxNAAAAZM"]
[Wed Nov 26 13:13:05.044673 2025] [:error] [pid 35540:tid 35570] [client 157.245.64.206:56529] [client 157.245.64.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.64.206, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aSaMYcGrIq2A6SZSnkJzpAAAAJg"]
[Wed Nov 26 16:57:39.476492 2025] [:error] [pid 46443:tid 46451] [client 213.21.239.4:48908] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/admin/.git/config"] [unique_id "aSbBA8LmDsnHrj-QFB-xmQAAAEY"]
[Wed Nov 26 16:57:39.479519 2025] [:error] [pid 46443:tid 46468] [client 213.21.239.4:48972] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/developer/.git/config"] [unique_id "aSbBA8LmDsnHrj-QFB-xmgAAAFc"]
[Wed Nov 26 16:57:39.480625 2025] [:error] [pid 46443:tid 46447] [client 213.21.239.4:48934] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/database/.git/config"] [unique_id "aSbBA8LmDsnHrj-QFB-xmwAAAEI"]
[Wed Nov 26 16:57:39.481416 2025] [:error] [pid 46443:tid 46466] [client 213.21.239.4:48974] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/dev/.git/config"] [unique_id "aSbBA8LmDsnHrj-QFB-xnAAAAFU"]
[Wed Nov 26 16:57:39.482285 2025] [:error] [pid 46443:tid 46455] [client 213.21.239.4:49104] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre/.git/%0Aconfig"] [unique_id "aSbBA8LmDsnHrj-QFB-xnQAAAEo"]
[Wed Nov 26 16:57:39.486172 2025] [:error] [pid 6471:tid 6496] [client 213.21.239.4:49082] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/application/.git/config"] [unique_id "aSbBA-h3Z9TZLlRuTiNiBQAAAJY"]
[Wed Nov 26 16:57:39.486758 2025] [:error] [pid 46443:tid 46445] [client 213.21.239.4:48936] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/api/.git/config"] [unique_id "aSbBA8LmDsnHrj-QFB-xngAAAEA"]
[Wed Nov 26 16:57:39.487054 2025] [:error] [pid 46443:tid 46448] [client 213.21.239.4:48902] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre/.git/config"] [unique_id "aSbBA8LmDsnHrj-QFB-xnwAAAEM"]
[Wed Nov 26 16:57:39.490072 2025] [:error] [pid 6471:tid 6479] [client 213.21.239.4:48960] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre/.git/config;.."] [unique_id "aSbBA-h3Z9TZLlRuTiNiBwAAAIU"]
[Wed Nov 26 16:57:39.491002 2025] [:error] [pid 6471:tid 6482] [client 213.21.239.4:49050] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre/.git/config;"] [unique_id "aSbBA-h3Z9TZLlRuTiNiCAAAAIg"]
[Wed Nov 26 16:57:39.493750 2025] [:error] [pid 6471:tid 6486] [client 213.21.239.4:48962] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/app/.git/config"] [unique_id "aSbBA-h3Z9TZLlRuTiNiCQAAAIw"]
[Wed Nov 26 16:57:39.494668 2025] [:error] [pid 46443:tid 46464] [client 213.21.239.4:48918] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre../.git/config"] [unique_id "aSbBA8LmDsnHrj-QFB-xoAAAAFM"]
[Wed Nov 26 16:57:39.496283 2025] [:error] [pid 6471:tid 6474] [client 213.21.239.4:49118] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre/..;/.git/config"] [unique_id "aSbBA-h3Z9TZLlRuTiNiCgAAAIA"]
[Wed Nov 26 16:57:39.530486 2025] [:error] [pid 45683:tid 45711] [client 213.21.239.4:49094] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre/;/.git/config"] [unique_id "aSbBAxX1gQgNFW_222qHsAAAAVc"]
[Wed Nov 26 16:57:39.541783 2025] [:error] [pid 6471:tid 6485] [client 213.21.239.4:48988] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/content../.git/config"] [unique_id "aSbBA-h3Z9TZLlRuTiNiDAAAAIs"]
[Wed Nov 26 16:57:39.541859 2025] [:error] [pid 45683:tid 45702] [client 213.21.239.4:49024] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/assets../.git/config"] [unique_id "aSbBAxX1gQgNFW_222qHsQAAAU4"]
[Wed Nov 26 16:57:39.542984 2025] [:error] [pid 6471:tid 6478] [client 213.21.239.4:49026] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/css../.git/config"] [unique_id "aSbBA-h3Z9TZLlRuTiNiDQAAAIQ"]
[Wed Nov 26 16:57:39.545727 2025] [:error] [pid 45685:tid 45753] [client 213.21.239.4:49010] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/backup/.git/config"] [unique_id "aSbBA1j3f_NRdgU0DQ622wAAAQs"]
[Wed Nov 26 16:57:39.576837 2025] [:error] [pid 45769:tid 45779] [client 213.21.239.4:48920] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre/static../.git/config"] [unique_id "aSbBA1dG5Eht9c3yy4P_fQAAAcc"]
[Wed Nov 26 16:57:39.577136 2025] [:error] [pid 46443:tid 46463] [client 213.21.239.4:48894] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/common/.git/config"] [unique_id "aSbBA8LmDsnHrj-QFB-xogAAAFI"]
[Wed Nov 26 16:57:42.263046 2025] [:error] [pid 45769:tid 45780] [client 213.21.239.4:48834] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config;.."] [unique_id "aSbBBldG5Eht9c3yy4P_ggAAAcg"]
[Wed Nov 26 16:57:42.263183 2025] [:error] [pid 45769:tid 45772] [client 213.21.239.4:48832] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/.git/config"] [unique_id "aSbBBldG5Eht9c3yy4P_gwAAAcA"]
[Wed Nov 26 16:57:42.268496 2025] [:error] [pid 45685:tid 45759] [client 213.21.239.4:48992] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/git/.git/config"] [unique_id "aSbBBlj3f_NRdgU0DQ627AAAARE"]
[Wed Nov 26 16:57:42.269141 2025] [:error] [pid 45685:tid 45743] [client 213.21.239.4:48842] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/.git/config;"] [unique_id "aSbBBlj3f_NRdgU0DQ627QAAAQE"]
[Wed Nov 26 16:57:42.271435 2025] [:error] [pid 45685:tid 45756] [client 213.21.239.4:48820] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au../.git/config"] [unique_id "aSbBBlj3f_NRdgU0DQ627gAAAQ4"]
[Wed Nov 26 16:57:42.275092 2025] [:error] [pid 6471:tid 6490] [client 213.21.239.4:48936] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/images../.git/config"] [unique_id "aSbBBuh3Z9TZLlRuTiNiFgAAAJA"]
[Wed Nov 26 16:57:42.275952 2025] [:error] [pid 45685:tid 45757] [client 213.21.239.4:48968] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/.git/config;.."] [unique_id "aSbBBlj3f_NRdgU0DQ627wAAAQ8"]
[Wed Nov 26 16:57:42.277206 2025] [:error] [pid 45769:tid 45776] [client 213.21.239.4:48884] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/static../.git/config"] [unique_id "aSbBBldG5Eht9c3yy4P_hgAAAcQ"]
[Wed Nov 26 16:57:42.277243 2025] [:error] [pid 45685:tid 45745] [client 213.21.239.4:48856] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/;/.git/config"] [unique_id "aSbBBlj3f_NRdgU0DQ628AAAAQM"]
[Wed Nov 26 16:57:42.278504 2025] [:error] [pid 45685:tid 45748] [client 213.21.239.4:48914] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSbBBlj3f_NRdgU0DQ628QAAAQY"]
[Wed Nov 26 16:57:42.282566 2025] [:error] [pid 6471:tid 6495] [client 213.21.239.4:48938] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/img../.git/config"] [unique_id "aSbBBuh3Z9TZLlRuTiNiFwAAAJU"]
[Wed Nov 26 16:57:42.283158 2025] [:error] [pid 45685:tid 45746] [client 213.21.239.4:49006] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/m/.git/config"] [unique_id "aSbBBlj3f_NRdgU0DQ628gAAAQQ"]
[Wed Nov 26 16:57:42.283276 2025] [:error] [pid 45769:tid 45783] [client 213.21.239.4:49044] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/.git/%0Aconfig"] [unique_id "aSbBBldG5Eht9c3yy4P_hwAAAcs"]
[Wed Nov 26 16:57:42.283844 2025] [:error] [pid 45685:tid 45763] [client 213.21.239.4:48980] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/%0Aconfig"] [unique_id "aSbBBlj3f_NRdgU0DQ628wAAARU"]
[Wed Nov 26 16:57:42.284271 2025] [:error] [pid 6471:tid 6493] [client 213.21.239.4:48954] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/;/.git/config"] [unique_id "aSbBBuh3Z9TZLlRuTiNiGAAAAJM"]
[Wed Nov 26 16:57:42.284700 2025] [:error] [pid 6471:tid 6488] [client 213.21.239.4:48830] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/..;/.git/config"] [unique_id "aSbBBuh3Z9TZLlRuTiNiGQAAAI4"]
[Wed Nov 26 16:57:42.285564 2025] [:error] [pid 45685:tid 45762] [client 213.21.239.4:49016] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/js../.git/config"] [unique_id "aSbBBlj3f_NRdgU0DQ629AAAARQ"]
[Wed Nov 26 16:57:42.288046 2025] [:error] [pid 45769:tid 45781] [client 213.21.239.4:48920] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config;"] [unique_id "aSbBBldG5Eht9c3yy4P_iAAAAck"]
[Wed Nov 26 16:57:42.289710 2025] [:error] [pid 45769:tid 45778] [client 213.21.239.4:49038] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/message-api/.git/config"] [unique_id "aSbBBldG5Eht9c3yy4P_iQAAAcY"]
[Wed Nov 26 16:57:42.290924 2025] [:error] [pid 6471:tid 6475] [client 213.21.239.4:49022] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/lib../.git/config"] [unique_id "aSbBBuh3Z9TZLlRuTiNiGgAAAIE"]
[Wed Nov 26 16:57:42.293352 2025] [:error] [pid 6471:tid 6481] [client 213.21.239.4:49010] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/live/.git/config"] [unique_id "aSbBBuh3Z9TZLlRuTiNiGwAAAIc"]
[Wed Nov 26 16:57:42.293404 2025] [:error] [pid 45769:tid 45784] [client 213.21.239.4:48890] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/..;/.git/config"] [unique_id "aSbBBldG5Eht9c3yy4P_igAAAcw"]
[Wed Nov 26 16:57:44.274059 2025] [:error] [pid 45683:tid 45705] [client 213.21.239.4:49536] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config;"] [unique_id "aSbBCBX1gQgNFW_222qHzAAAAVE"]
[Wed Nov 26 16:57:44.275050 2025] [:error] [pid 45683:tid 45697] [client 213.21.239.4:49602] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au../.git/config"] [unique_id "aSbBCBX1gQgNFW_222qHzQAAAUk"]
[Wed Nov 26 16:57:44.278796 2025] [:error] [pid 6471:tid 6475] [client 213.21.239.4:49640] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/.git/config;.."] [unique_id "aSbBCOh3Z9TZLlRuTiNiJQAAAIE"]
[Wed Nov 26 16:57:44.280332 2025] [:error] [pid 6471:tid 6479] [client 213.21.239.4:49752] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/;/.git/config"] [unique_id "aSbBCOh3Z9TZLlRuTiNiJgAAAIU"]
[Wed Nov 26 16:57:44.285311 2025] [:error] [pid 45683:tid 45710] [client 213.21.239.4:49572] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/.git/%0Aconfig"] [unique_id "aSbBCBX1gQgNFW_222qHzgAAAVY"]
[Wed Nov 26 16:57:44.285719 2025] [:error] [pid 45769:tid 45787] [client 213.21.239.4:49718] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/../.git/config"] [unique_id "aSbBCFdG5Eht9c3yy4P_mwAAAc8"]
[Wed Nov 26 16:57:44.286866 2025] [:error] [pid 45685:tid 45760] [client 213.21.239.4:49680] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/public/.git/config"] [unique_id "aSbBCFj3f_NRdgU0DQ63AwAAARI"]
[Wed Nov 26 16:57:44.288473 2025] [core:error] [pid 6471:tid 6488] [client 213.21.239.4:49590] AH10244: invalid URI path (/../config)
[Wed Nov 26 16:57:44.289447 2025] [:error] [pid 46443:tid 46465] [client 213.21.239.4:49638] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/.git/config;"] [unique_id "aSbBCMLmDsnHrj-QFB-xrgAAAFQ"]
[Wed Nov 26 16:57:44.292220 2025] [:error] [pid 46443:tid 46453] [client 213.21.239.4:49666] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/prod/.git/config"] [unique_id "aSbBCMLmDsnHrj-QFB-xrwAAAEg"]
[Wed Nov 26 16:57:44.293863 2025] [:error] [pid 45684:tid 45733] [client 213.21.239.4:49556] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/static../.git/config"] [unique_id "aSbBCPg5LMxwI4-PD1cR-gAAABI"]
[Wed Nov 26 16:57:44.295479 2025] [:error] [pid 45685:tid 45747] [client 213.21.239.4:49704] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/..;/.git/config"] [unique_id "aSbBCFj3f_NRdgU0DQ63BAAAAQU"]
[Wed Nov 26 16:57:44.296997 2025] [:error] [pid 46443:tid 46452] [client 213.21.239.4:49626] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/.git/config"] [unique_id "aSbBCMLmDsnHrj-QFB-xsAAAAEc"]
[Wed Nov 26 16:57:44.298617 2025] [:error] [pid 45769:tid 45779] [client 213.21.239.4:49618] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/..;/.git/config"] [unique_id "aSbBCFdG5Eht9c3yy4P_nAAAAcc"]
[Wed Nov 26 16:57:44.299343 2025] [:error] [pid 45769:tid 45781] [client 213.21.239.4:49730] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/qa/.git/config"] [unique_id "aSbBCFdG5Eht9c3yy4P_nQAAAck"]
[Wed Nov 26 16:57:44.299755 2025] [:error] [pid 45683:tid 45692] [client 213.21.239.4:49702] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/%0Aconfig"] [unique_id "aSbBCBX1gQgNFW_222qH0AAAAUQ"]
[Wed Nov 26 16:57:44.300854 2025] [:error] [pid 45683:tid 45709] [client 213.21.239.4:49662] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/new/.git/config"] [unique_id "aSbBCBX1gQgNFW_222qH0QAAAVU"]
[Wed Nov 26 16:57:44.301212 2025] [:error] [pid 45769:tid 45795] [client 213.21.239.4:49742] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSbBCFdG5Eht9c3yy4P_ngAAAdc"]
[Wed Nov 26 16:57:45.280826 2025] [:error] [pid 45684:tid 45725] [client 213.21.239.4:49790] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/;/.git/config"] [unique_id "aSbBCfg5LMxwI4-PD1cR_AAAAAo"]
[Wed Nov 26 16:57:45.283790 2025] [:error] [pid 46443:tid 46467] [client 213.21.239.4:49766] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config;.."] [unique_id "aSbBCcLmDsnHrj-QFB-xsQAAAFY"]
[Wed Nov 26 16:57:46.388489 2025] [:error] [pid 45683:tid 45700] [client 213.21.239.4:50132] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/web/.git/config"] [unique_id "aSbBChX1gQgNFW_222qH4AAAAUw"]
[Wed Nov 26 16:57:46.390170 2025] [:error] [pid 45683:tid 45693] [client 213.21.239.4:50100] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/static../.git/config"] [unique_id "aSbBChX1gQgNFW_222qH4QAAAUU"]
[Wed Nov 26 16:57:46.392126 2025] [:error] [pid 45683:tid 45690] [client 213.21.239.4:50086] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/staging/.git/config"] [unique_id "aSbBChX1gQgNFW_222qH4gAAAUI"]
[Wed Nov 26 16:57:46.397437 2025] [:error] [pid 45684:tid 45720] [client 213.21.239.4:50160] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/uat/.git/config"] [unique_id "aSbBCvg5LMxwI4-PD1cSBgAAAAU"]
[Wed Nov 26 16:57:46.398160 2025] [:error] [pid 45685:tid 45744] [client 213.21.239.4:50146] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSbBClj3f_NRdgU0DQ63CwAAAQI"]
[Wed Nov 26 16:57:46.401055 2025] [:error] [pid 45683:tid 45699] [client 213.21.239.4:50116] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSbBChX1gQgNFW_222qH4wAAAUs"]
[Wed Nov 26 16:57:46.403412 2025] [:error] [pid 45685:tid 45745] [client 213.21.239.4:50112] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/static../.git/config"] [unique_id "aSbBClj3f_NRdgU0DQ63DAAAAQM"]
[Wed Nov 26 16:57:46.409247 2025] [:error] [pid 45684:tid 45733] [client 213.21.239.4:50176] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/.git/config"] [unique_id "aSbBCvg5LMxwI4-PD1cSBwAAABI"]
[Wed Nov 26 20:31:35.894501 2025] [:error] [pid 45684:tid 45716] [client 13.239.140.69:50096] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSbzJ_g5LMxwI4-PD1dm5wAAAAE"]
[Wed Nov 26 20:31:35.960675 2025] [:error] [pid 45684:tid 45720] [client 13.239.140.69:50106] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aSbzJ_g5LMxwI4-PD1dm6AAAAAU"]
[Wed Nov 26 20:31:36.012326 2025] [:error] [pid 6471:tid 6496] [client 13.239.140.69:50110] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.local"] [unique_id "aSbzKOh3Z9TZLlRuTiOgXAAAAJY"]
[Wed Nov 26 20:31:36.073442 2025] [:error] [pid 6471:tid 6498] [client 13.239.140.69:50122] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.dev"] [unique_id "aSbzKOh3Z9TZLlRuTiOgXQAAAJg"]
[Wed Nov 26 20:31:36.134310 2025] [:error] [pid 46443:tid 46451] [client 13.239.140.69:50128] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.prod"] [unique_id "aSbzKMLmDsnHrj-QFB_3JQAAAEY"]
[Wed Nov 26 20:31:36.192293 2025] [:error] [pid 46443:tid 46460] [client 13.239.140.69:50136] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.staging"] [unique_id "aSbzKMLmDsnHrj-QFB_3JgAAAE8"]
[Wed Nov 26 20:31:36.260336 2025] [:error] [pid 45769:tid 45777] [client 13.239.140.69:50152] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.development"] [unique_id "aSbzKFdG5Eht9c3yy4MxsQAAAcU"]
[Wed Nov 26 20:31:36.313164 2025] [:error] [pid 6471:tid 6481] [client 13.239.140.69:50158] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.production"] [unique_id "aSbzKOh3Z9TZLlRuTiOgXwAAAIc"]
[Wed Nov 26 20:31:36.364534 2025] [:error] [pid 6471:tid 6477] [client 13.239.140.69:50166] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.test"] [unique_id "aSbzKOh3Z9TZLlRuTiOgYAAAAIM"]
[Wed Nov 26 20:31:36.419091 2025] [:error] [pid 45684:tid 45721] [client 13.239.140.69:50174] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.backup"] [unique_id "aSbzKPg5LMxwI4-PD1dm7AAAAAY"]
[Wed Nov 26 20:31:36.474020 2025] [:error] [pid 45684:tid 45727] [client 13.239.140.69:50180] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env~"] [unique_id "aSbzKPg5LMxwI4-PD1dm7QAAAAw"]
[Wed Nov 26 20:31:36.528081 2025] [:error] [pid 45684:tid 45738] [client 13.239.140.69:50186] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.sample"] [unique_id "aSbzKPg5LMxwI4-PD1dm7wAAABc"]
[Wed Nov 26 20:31:36.585424 2025] [:error] [pid 45684:tid 45735] [client 13.239.140.69:50190] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.old"] [unique_id "aSbzKPg5LMxwI4-PD1dm8QAAABQ"]
[Wed Nov 26 20:31:36.641197 2025] [:error] [pid 45684:tid 45718] [client 13.239.140.69:50196] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "aSbzKPg5LMxwI4-PD1dm8gAAAAM"]
[Wed Nov 26 20:31:36.703988 2025] [:error] [pid 45684:tid 45733] [client 13.239.140.69:50204] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.save"] [unique_id "aSbzKPg5LMxwI4-PD1dm9AAAABI"]
[Wed Nov 26 20:31:36.765339 2025] [:error] [pid 45769:tid 45789] [client 13.239.140.69:50220] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.orig"] [unique_id "aSbzKFdG5Eht9c3yy4MxswAAAdE"]
[Wed Nov 26 20:31:36.818633 2025] [:error] [pid 46443:tid 46464] [client 13.239.140.69:50224] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.swp"] [unique_id "aSbzKMLmDsnHrj-QFB_3MwAAAFM"]
[Wed Nov 26 20:31:36.877214 2025] [:error] [pid 46443:tid 46455] [client 13.239.140.69:50238] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.tmp"] [unique_id "aSbzKMLmDsnHrj-QFB_3NAAAAEo"]
[Wed Nov 26 20:31:36.935665 2025] [:error] [pid 45683:tid 45696] [client 13.239.140.69:50254] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.dist"] [unique_id "aSbzKBX1gQgNFW_222q55wAAAUg"]
[Wed Nov 26 20:31:36.994848 2025] [:error] [pid 45684:tid 45719] [client 13.239.140.69:50262] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/admin/.env"] [unique_id "aSbzKPg5LMxwI4-PD1dm9wAAAAQ"]
[Wed Nov 26 20:31:37.048342 2025] [:error] [pid 45684:tid 45728] [client 13.239.140.69:50274] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/admin/.env.save"] [unique_id "aSbzKfg5LMxwI4-PD1dm-AAAAA0"]
[Wed Nov 26 20:31:37.103060 2025] [:error] [pid 45684:tid 45715] [client 13.239.140.69:50282] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/admin/.env.bak"] [unique_id "aSbzKfg5LMxwI4-PD1dm-QAAAAA"]
[Wed Nov 26 20:31:37.159929 2025] [:error] [pid 45684:tid 45721] [client 13.239.140.69:50294] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/admin/.env.old"] [unique_id "aSbzKfg5LMxwI4-PD1dm-gAAAAY"]
[Wed Nov 26 20:31:37.219335 2025] [:error] [pid 45684:tid 45739] [client 13.239.140.69:50300] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/api/.env"] [unique_id "aSbzKfg5LMxwI4-PD1dm_QAAABg"]
[Wed Nov 26 20:31:37.286128 2025] [:error] [pid 45684:tid 45732] [client 13.239.140.69:50304] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/api/.env.save"] [unique_id "aSbzKfg5LMxwI4-PD1dm_gAAABE"]
[Wed Nov 26 20:31:37.362776 2025] [:error] [pid 45684:tid 45735] [client 13.239.140.69:50314] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/api/.env.bak"] [unique_id "aSbzKfg5LMxwI4-PD1dnAAAAABQ"]
[Wed Nov 26 20:31:37.426386 2025] [:error] [pid 45769:tid 45784] [client 13.239.140.69:50316] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/api/.env.old"] [unique_id "aSbzKVdG5Eht9c3yy4MxtAAAAcw"]
[Wed Nov 26 20:31:37.487961 2025] [:error] [pid 45769:tid 45792] [client 13.239.140.69:50318] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/app/.env"] [unique_id "aSbzKVdG5Eht9c3yy4MxtQAAAdQ"]
[Wed Nov 26 20:31:37.548353 2025] [:error] [pid 6471:tid 6486] [client 13.239.140.69:50328] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/app/.env.save"] [unique_id "aSbzKeh3Z9TZLlRuTiOgZQAAAIw"]
[Wed Nov 26 20:31:37.600090 2025] [:error] [pid 6471:tid 6492] [client 13.239.140.69:50344] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/app/.env.bak"] [unique_id "aSbzKeh3Z9TZLlRuTiOgZgAAAJI"]
[Wed Nov 26 20:31:37.659539 2025] [:error] [pid 6471:tid 6493] [client 13.239.140.69:50356] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/app/.env.old"] [unique_id "aSbzKeh3Z9TZLlRuTiOgZwAAAJM"]
[Wed Nov 26 20:31:37.722561 2025] [:error] [pid 20733:tid 20757] [client 13.239.140.69:50366] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/config/.env"] [unique_id "aSbzKQV9EP2HuRvnH8dkywAAANY"]
[Wed Nov 26 20:31:37.775473 2025] [:error] [pid 20733:tid 20756] [client 13.239.140.69:50376] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/config/.env.save"] [unique_id "aSbzKQV9EP2HuRvnH8dkzAAAANU"]
[Wed Nov 26 20:31:37.826777 2025] [:error] [pid 45769:tid 45776] [client 13.239.140.69:50392] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/config/.env.bak"] [unique_id "aSbzKVdG5Eht9c3yy4MxtgAAAcQ"]
[Wed Nov 26 20:31:37.884053 2025] [:error] [pid 45684:tid 45733] [client 13.239.140.69:50404] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/config/.env.old"] [unique_id "aSbzKfg5LMxwI4-PD1dnAwAAABI"]
[Wed Nov 26 20:31:37.943854 2025] [:error] [pid 45769:tid 45779] [client 13.239.140.69:50410] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/src/.env"] [unique_id "aSbzKVdG5Eht9c3yy4MxtwAAAcc"]
[Wed Nov 26 20:31:37.998335 2025] [:error] [pid 45684:tid 45716] [client 13.239.140.69:50414] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/src/.env.save"] [unique_id "aSbzKfg5LMxwI4-PD1dnBAAAAAE"]
[Wed Nov 26 20:31:38.052520 2025] [:error] [pid 45684:tid 45720] [client 13.239.140.69:50426] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/src/.env.bak"] [unique_id "aSbzKvg5LMxwI4-PD1dnBgAAAAU"]
[Wed Nov 26 20:31:38.104235 2025] [:error] [pid 45684:tid 45717] [client 13.239.140.69:50434] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/src/.env.old"] [unique_id "aSbzKvg5LMxwI4-PD1dnCAAAAAI"]
[Wed Nov 26 20:31:38.164497 2025] [:error] [pid 45684:tid 45726] [client 13.239.140.69:50436] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/public/.env"] [unique_id "aSbzKvg5LMxwI4-PD1dnCQAAAAs"]
[Wed Nov 26 20:31:38.218609 2025] [:error] [pid 45684:tid 45725] [client 13.239.140.69:50442] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/public/.env.save"] [unique_id "aSbzKvg5LMxwI4-PD1dnCgAAAAo"]
[Wed Nov 26 20:31:38.273771 2025] [:error] [pid 45684:tid 45732] [client 13.239.140.69:50448] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/public/.env.bak"] [unique_id "aSbzKvg5LMxwI4-PD1dnDAAAABE"]
[Wed Nov 26 20:31:38.332020 2025] [:error] [pid 45684:tid 45722] [client 13.239.140.69:50462] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/public/.env.old"] [unique_id "aSbzKvg5LMxwI4-PD1dnDQAAAAc"]
[Wed Nov 26 20:31:38.384974 2025] [:error] [pid 45684:tid 45730] [client 13.239.140.69:50474] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/assets/.env"] [unique_id "aSbzKvg5LMxwI4-PD1dnDgAAAA8"]
[Wed Nov 26 20:31:38.441094 2025] [:error] [pid 45684:tid 45724] [client 13.239.140.69:50476] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/assets/.env.save"] [unique_id "aSbzKvg5LMxwI4-PD1dnDwAAAAk"]
[Wed Nov 26 20:31:38.497765 2025] [:error] [pid 45684:tid 45723] [client 13.239.140.69:50488] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/assets/.env.bak"] [unique_id "aSbzKvg5LMxwI4-PD1dnEAAAAAg"]
[Wed Nov 26 20:31:38.555215 2025] [:error] [pid 45683:tid 45707] [client 13.239.140.69:50490] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/assets/.env.old"] [unique_id "aSbzKhX1gQgNFW_222q56AAAAVM"]
[Wed Nov 26 20:31:38.612083 2025] [:error] [pid 45683:tid 45702] [client 13.239.140.69:50500] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/includes/.env"] [unique_id "aSbzKhX1gQgNFW_222q56QAAAU4"]
[Wed Nov 26 20:31:38.674659 2025] [:error] [pid 45684:tid 45720] [client 13.239.140.69:50502] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/includes/.env.save"] [unique_id "aSbzKvg5LMxwI4-PD1dnEQAAAAU"]
[Wed Nov 26 20:31:38.728373 2025] [:error] [pid 45684:tid 45715] [client 13.239.140.69:50512] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/includes/.env.bak"] [unique_id "aSbzKvg5LMxwI4-PD1dnEgAAAAA"]
[Wed Nov 26 20:31:38.790103 2025] [:error] [pid 45683:tid 45697] [client 13.239.140.69:50516] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/includes/.env.old"] [unique_id "aSbzKhX1gQgNFW_222q56gAAAUk"]
[Wed Nov 26 20:31:38.848513 2025] [:error] [pid 45769:tid 45794] [client 13.239.140.69:50518] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/lib/.env"] [unique_id "aSbzKldG5Eht9c3yy4MxuAAAAdY"]
[Wed Nov 26 20:31:38.908936 2025] [:error] [pid 6471:tid 6488] [client 13.239.140.69:50526] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/lib/.env.save"] [unique_id "aSbzKuh3Z9TZLlRuTiOgawAAAI4"]
[Wed Nov 26 20:31:38.963718 2025] [:error] [pid 6471:tid 6496] [client 13.239.140.69:50528] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/lib/.env.bak"] [unique_id "aSbzKuh3Z9TZLlRuTiOgbAAAAJY"]
[Wed Nov 26 20:31:39.020015 2025] [:error] [pid 45684:tid 45717] [client 13.239.140.69:50542] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/lib/.env.old"] [unique_id "aSbzK_g5LMxwI4-PD1dnFAAAAAI"]
[Wed Nov 26 20:31:39.081420 2025] [:error] [pid 45684:tid 45736] [client 13.239.140.69:50558] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/application/.env"] [unique_id "aSbzK_g5LMxwI4-PD1dnFQAAABU"]
[Wed Nov 26 20:31:39.143951 2025] [:error] [pid 45684:tid 45725] [client 13.239.140.69:50572] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/application/.env.save"] [unique_id "aSbzK_g5LMxwI4-PD1dnFgAAAAo"]
[Wed Nov 26 20:31:39.204314 2025] [:error] [pid 45684:tid 45738] [client 13.239.140.69:50582] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/application/.env.bak"] [unique_id "aSbzK_g5LMxwI4-PD1dnFwAAABc"]
[Wed Nov 26 20:31:39.264291 2025] [:error] [pid 45684:tid 45731] [client 13.239.140.69:50590] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/application/.env.old"] [unique_id "aSbzK_g5LMxwI4-PD1dnGAAAABA"]
[Wed Nov 26 20:31:39.326786 2025] [:error] [pid 20733:tid 20738] [client 13.239.140.69:50604] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/system/.env"] [unique_id "aSbzKwV9EP2HuRvnH8dkzgAAAMM"]
[Wed Nov 26 20:31:39.386066 2025] [:error] [pid 45683:tid 45708] [client 13.239.140.69:50620] [client 13.239.140.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/system/.env.save"] [unique_id "aSbzKxX1gQgNFW_222q56wAAAVQ"]
[Wed Nov 26 20:39:14.772316 2025] [:error] [pid 6471:tid 6495] [client 64.227.70.2:47158] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSb08uh3Z9TZLlRuTiOiMQAAAJU"]
[Wed Nov 26 20:39:27.549362 2025] [authz_core:error] [pid 45769:tid 45795] [client 64.227.70.2:41554] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Wed Nov 26 20:39:35.149663 2025] [:error] [pid 6471:tid 6478] [client 64.227.70.2:57948] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aSb1B-h3Z9TZLlRuTiOiPgAAAIQ"]
[Wed Nov 26 20:39:36.951350 2025] [:error] [pid 20733:tid 20748] [client 64.227.70.2:57960] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSb1CAV9EP2HuRvnH8dlzgAAAM0"]
[Wed Nov 26 22:05:52.935517 2025] [:error] [pid 6471:tid 6484] [client 34.73.70.167:47836] [client 34.73.70.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aScJQOh3Z9TZLlRuTiO4bAAAAIo"]
[Thu Nov 27 00:56:38.214148 2025] [:error] [pid 8184:tid 8255] [client 103.77.107.57:52304] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/sftp-config.json"] [unique_id "aScxRr-M2IHkRYVrcbN8mAAAAFE"]
[Thu Nov 27 00:56:38.633452 2025] [:error] [pid 8184:tid 8252] [client 103.77.107.57:60703] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.vscode/sftp.json"] [unique_id "aScxRr-M2IHkRYVrcbN8mQAAAE4"]
[Thu Nov 27 01:02:58.454861 2025] [:error] [pid 8184:tid 8247] [client 216.126.239.203:46142] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aScywr-M2IHkRYVrcbN-uAAAAEo"]
[Thu Nov 27 08:27:50.985298 2025] [:error] [pid 19015:tid 19081] [client 142.93.0.66:51954] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSebBg4MxyJWPPh2qEi2hgAAAIo"]
[Thu Nov 27 08:27:51.030025 2025] [:error] [pid 19014:tid 19068] [client 167.71.81.114:33794] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSebB42utvwZ4eADRmrzEgAAAFg"]
[Thu Nov 27 08:27:56.064808 2025] [authz_core:error] [pid 19014:tid 19052] [client 142.93.0.66:52018] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Thu Nov 27 08:27:56.123258 2025] [authz_core:error] [pid 19014:tid 19047] [client 167.71.81.114:33872] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Thu Nov 27 08:27:58.672828 2025] [:error] [pid 19119:tid 19195] [client 142.93.0.66:57016] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aSebDhsL_RTusriYkwdtSgAAANU"]
[Thu Nov 27 08:27:58.697321 2025] [:error] [pid 19013:tid 19022] [client 167.71.81.114:47038] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aSebDoaBrX8b6-N6_86ODgAAAAU"]
[Thu Nov 27 08:27:59.089984 2025] [:error] [pid 19014:tid 19064] [client 142.93.0.66:57030] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSebD42utvwZ4eADRmrzIQAAAFQ"]
[Thu Nov 27 08:27:59.113186 2025] [:error] [pid 19119:tid 19198] [client 167.71.81.114:47054] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSebDxsL_RTusriYkwdtTAAAANg"]
[Thu Nov 27 14:53:16.101607 2025] [:error] [pid 23048:tid 23103] [client 142.93.0.66:60144] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSf1XGlPUZ9i3WDe1tmuggAAAZg"]
[Thu Nov 27 14:53:21.186896 2025] [authz_core:error] [pid 23997:tid 24021] [client 142.93.0.66:32830] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Thu Nov 27 14:53:23.795917 2025] [:error] [pid 23145:tid 23164] [client 142.93.0.66:32884] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aSf1Y3IgNR7UGAU0AxhBvgAAAVE"]
[Thu Nov 27 14:53:24.213098 2025] [:error] [pid 23046:tid 23065] [client 142.93.0.66:32890] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSf1ZIKOZx26yRRhdLXTUwAAAQ0"]
[Thu Nov 27 21:51:46.001007 2025] [autoindex:error] [pid 5536:tid 5557] [client 4.216.85.120:49489] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 27 21:52:23.117066 2025] [:error] [pid 5447:tid 5459] [client 4.216.85.120:57421] [client 4.216.85.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aShXl-IZYIJeFQV4nEgePgAAAUo"]
[Thu Nov 27 21:52:27.601477 2025] [:error] [pid 5536:tid 5556] [client 4.216.85.120:49486] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css.php"] [unique_id "aShXm_USQSfgGHTatIUfuAAAAdI"]
[Thu Nov 27 21:52:28.553604 2025] [:error] [pid 5536:tid 5549] [client 4.216.85.120:57957] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css.php"] [unique_id "aShXnPUSQSfgGHTatIUfvQAAAcs"]
[Thu Nov 27 21:52:29.088837 2025] [:error] [pid 5447:tid 5452] [client 4.216.85.120:7030] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css.php"] [unique_id "aShXneIZYIJeFQV4nEgeRgAAAUM"]
[Thu Nov 27 21:52:29.706849 2025] [:error] [pid 5447:tid 5455] [client 4.216.85.120:56000] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css.php"] [unique_id "aShXneIZYIJeFQV4nEgeSwAAAUY"]
[Thu Nov 27 21:52:30.260100 2025] [:error] [pid 5536:tid 5544] [client 4.216.85.120:57413] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "aShXnvUSQSfgGHTatIUfwwAAAcY"]
[Thu Nov 27 21:52:31.068965 2025] [:error] [pid 5536:tid 5546] [client 4.216.85.120:57467] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "aShXn_USQSfgGHTatIUfywAAAcg"]
[Thu Nov 27 21:52:31.687511 2025] [:error] [pid 5478:tid 5532] [client 4.216.85.120:50281] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "aShXn-hzZWazcfEzqI2WIAAAANg"]
[Thu Nov 27 21:52:32.756902 2025] [:error] [pid 5447:tid 5460] [client 4.216.85.120:49495] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "aShXoOIZYIJeFQV4nEgeUQAAAUs"]
[Thu Nov 27 21:52:33.538767 2025] [:error] [pid 5447:tid 5467] [client 4.216.85.120:57456] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/index.php"] [unique_id "aShXoeIZYIJeFQV4nEgeWwAAAVI"]
[Thu Nov 27 21:52:34.160436 2025] [:error] [pid 5478:tid 5528] [client 4.216.85.120:57408] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/index.php"] [unique_id "aShXouhzZWazcfEzqI2WIwAAANQ"]
[Thu Nov 27 21:52:34.839647 2025] [:error] [pid 5536:tid 5561] [client 4.216.85.120:7023] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/index.php"] [unique_id "aShXovUSQSfgGHTatIUf2QAAAdc"]
[Thu Nov 27 21:52:35.248475 2025] [:error] [pid 5536:tid 5547] [client 4.216.85.120:49505] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/index.php"] [unique_id "aShXo_USQSfgGHTatIUf2wAAAck"]
[Thu Nov 27 21:52:35.712101 2025] [:error] [pid 5536:tid 5555] [client 4.216.85.120:7003] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/1.php"] [unique_id "aShXo_USQSfgGHTatIUf4AAAAdE"]
[Thu Nov 27 21:52:36.423407 2025] [:error] [pid 5478:tid 5515] [client 4.216.85.120:57409] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/1.php"] [unique_id "aShXpOhzZWazcfEzqI2WJQAAAMc"]
[Thu Nov 27 21:52:36.949189 2025] [:error] [pid 5478:tid 5508] [client 4.216.85.120:7010] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/1.php"] [unique_id "aShXpOhzZWazcfEzqI2WJwAAAMA"]
[Thu Nov 27 21:52:37.768750 2025] [:error] [pid 5447:tid 5467] [client 4.216.85.120:6990] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/1.php"] [unique_id "aShXpeIZYIJeFQV4nEgebAAAAVI"]
[Thu Nov 27 21:52:38.089421 2025] [:error] [pid 5447:tid 5471] [client 4.216.85.120:50248] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aShXpuIZYIJeFQV4nEgebwAAAVY"]
[Thu Nov 27 21:52:39.125822 2025] [:error] [pid 5447:tid 5449] [client 4.216.85.120:57410] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aShXp-IZYIJeFQV4nEgedQAAAUA"]
[Thu Nov 27 21:52:39.809974 2025] [:error] [pid 5477:tid 5497] [client 4.216.85.120:49500] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aShXpxE-eNdvARcbXETXwQAAABA"]
[Thu Nov 27 21:52:40.747230 2025] [:error] [pid 5477:tid 5481] [client 4.216.85.120:50241] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aShXqBE-eNdvARcbXETXxgAAAAA"]
[Thu Nov 27 21:52:41.262465 2025] [:error] [pid 5477:tid 5505] [client 4.216.85.120:57466] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aShXqRE-eNdvARcbXETXxwAAABg"]
[Thu Nov 27 21:52:41.770067 2025] [:error] [pid 5478:tid 5515] [client 4.216.85.120:50279] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aShXqehzZWazcfEzqI2WNwAAAMc"]
[Thu Nov 27 21:52:42.206526 2025] [:error] [pid 5447:tid 5468] [client 4.216.85.120:57435] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aShXquIZYIJeFQV4nEgedwAAAVM"]
[Thu Nov 27 21:52:42.683371 2025] [:error] [pid 5478:tid 5526] [client 4.216.85.120:49534] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aShXquhzZWazcfEzqI2WOQAAANI"]
[Thu Nov 27 21:52:43.264077 2025] [:error] [pid 5447:tid 5467] [client 4.216.85.120:50247] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "aShXq-IZYIJeFQV4nEgeegAAAVI"]
[Thu Nov 27 21:52:44.017169 2025] [:error] [pid 5477:tid 5496] [client 4.216.85.120:57448] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "aShXrBE-eNdvARcbXETX0AAAAA8"]
[Thu Nov 27 21:52:44.690474 2025] [:error] [pid 5477:tid 5500] [client 4.216.85.120:49525] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "aShXrBE-eNdvARcbXETX1gAAABM"]
[Thu Nov 27 21:52:45.231580 2025] [:error] [pid 5478:tid 5524] [client 4.216.85.120:57974] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "aShXrehzZWazcfEzqI2WOgAAANA"]
[Thu Nov 27 21:52:46.495946 2025] [:error] [pid 5536:tid 5547] [client 4.216.85.120:50292] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "aShXrvUSQSfgGHTatIUf8AAAAck"]
[Thu Nov 27 21:52:47.387987 2025] [:error] [pid 5447:tid 5459] [client 4.216.85.120:57424] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "aShXr-IZYIJeFQV4nEgefwAAAUo"]
[Thu Nov 27 21:52:48.001965 2025] [:error] [pid 5477:tid 5505] [client 4.216.85.120:49473] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "aShXsBE-eNdvARcbXETX_wAAABg"]
[Thu Nov 27 21:52:48.899336 2025] [:error] [pid 5536:tid 5557] [client 4.216.85.120:6984] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "aShXsPUSQSfgGHTatIUf_gAAAdM"]
[Thu Nov 27 21:52:49.657207 2025] [:error] [pid 5536:tid 5559] [client 4.216.85.120:6980] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/0x.php"] [unique_id "aShXsfUSQSfgGHTatIUgBQAAAdU"]
[Thu Nov 27 21:52:49.986550 2025] [:error] [pid 5477:tid 5496] [client 4.216.85.120:57410] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/0x.php"] [unique_id "aShXsRE-eNdvARcbXETYJwAAAA8"]
[Thu Nov 27 21:52:50.777431 2025] [:error] [pid 5477:tid 5505] [client 4.216.85.120:57439] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/0x.php"] [unique_id "aShXshE-eNdvARcbXETYLwAAABg"]
[Thu Nov 27 21:52:51.405242 2025] [:error] [pid 5447:tid 5473] [client 4.216.85.120:56006] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/0x.php"] [unique_id "aShXs-IZYIJeFQV4nEgeiAAAAVg"]
[Thu Nov 27 21:52:51.906254 2025] [:error] [pid 5447:tid 5452] [client 4.216.85.120:62163] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/moon.php"] [unique_id "aShXs-IZYIJeFQV4nEgeiwAAAUM"]
[Thu Nov 27 21:52:52.415581 2025] [:error] [pid 5477:tid 5492] [client 4.216.85.120:49531] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/moon.php"] [unique_id "aShXtBE-eNdvARcbXETYNwAAAAs"]
[Thu Nov 27 21:52:53.201765 2025] [:error] [pid 5536:tid 5562] [client 4.216.85.120:57427] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/moon.php"] [unique_id "aShXtfUSQSfgGHTatIUgEQAAAdg"]
[Thu Nov 27 21:52:53.778486 2025] [:error] [pid 5447:tid 5459] [client 4.216.85.120:6982] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/moon.php"] [unique_id "aShXteIZYIJeFQV4nEgejwAAAUo"]
[Thu Nov 27 21:52:54.444213 2025] [:error] [pid 5478:tid 5513] [client 4.216.85.120:50268] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/autoload_classmap.php"] [unique_id "aShXtuhzZWazcfEzqI2WSQAAAMU"]
[Thu Nov 27 21:52:55.236960 2025] [:error] [pid 5447:tid 5453] [client 4.216.85.120:57465] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/autoload_classmap.php"] [unique_id "aShXt-IZYIJeFQV4nEgelQAAAUQ"]
[Thu Nov 27 21:52:55.552445 2025] [:error] [pid 5478:tid 5523] [client 4.216.85.120:49490] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/autoload_classmap.php"] [unique_id "aShXt-hzZWazcfEzqI2WTAAAAM8"]
[Thu Nov 27 21:52:56.265782 2025] [:error] [pid 5447:tid 5452] [client 4.216.85.120:49476] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/autoload_classmap.php"] [unique_id "aShXuOIZYIJeFQV4nEgelwAAAUM"]
[Thu Nov 27 21:52:56.642231 2025] [:error] [pid 5478:tid 5516] [client 4.216.85.120:49510] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "aShXuOhzZWazcfEzqI2WUAAAAMg"]
[Thu Nov 27 21:52:57.126393 2025] [:error] [pid 5536:tid 5555] [client 4.216.85.120:49497] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "aShXufUSQSfgGHTatIUgHwAAAdE"]
[Thu Nov 27 21:52:57.594355 2025] [:error] [pid 5477:tid 5495] [client 4.216.85.120:50272] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "aShXuRE-eNdvARcbXETYQgAAAA4"]
[Thu Nov 27 21:52:58.174001 2025] [:error] [pid 5447:tid 5468] [client 4.216.85.120:49480] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "aShXuuIZYIJeFQV4nEgemwAAAVM"]
[Thu Nov 27 21:52:58.540708 2025] [:error] [pid 5478:tid 5529] [client 4.216.85.120:49513] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "aShXuuhzZWazcfEzqI2WVAAAANU"]
[Thu Nov 27 21:52:59.010757 2025] [:error] [pid 5447:tid 5472] [client 4.216.85.120:49502] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "aShXu-IZYIJeFQV4nEgenwAAAVc"]
[Thu Nov 27 21:52:59.298019 2025] [:error] [pid 5477:tid 5503] [client 4.216.85.120:57458] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "aShXuxE-eNdvARcbXETYRgAAABY"]
[Thu Nov 27 21:52:59.836740 2025] [:error] [pid 5477:tid 5485] [client 4.216.85.120:6990] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "aShXuxE-eNdvARcbXETYSQAAAAQ"]
[Thu Nov 27 21:53:00.521538 2025] [:error] [pid 5478:tid 5519] [client 4.216.85.120:50275] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "aShXvOhzZWazcfEzqI2WVgAAAMs"]
[Thu Nov 27 21:53:01.303002 2025] [:error] [pid 5447:tid 5469] [client 4.216.85.120:7020] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "aShXveIZYIJeFQV4nEgeqgAAAVQ"]
[Thu Nov 27 21:53:01.653707 2025] [:error] [pid 5477:tid 5495] [client 4.216.85.120:6988] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "aShXvRE-eNdvARcbXETYUAAAAA4"]
[Thu Nov 27 21:53:02.208955 2025] [:error] [pid 5478:tid 5526] [client 4.216.85.120:50274] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "aShXvuhzZWazcfEzqI2WWQAAANI"]
[Thu Nov 27 21:53:02.772956 2025] [:error] [pid 5447:tid 5473] [client 4.216.85.120:56027] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aShXvuIZYIJeFQV4nEgesQAAAVg"]
[Thu Nov 27 21:53:03.579715 2025] [:error] [pid 5477:tid 5494] [client 4.216.85.120:50240] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aShXvxE-eNdvARcbXETYWAAAAA0"]
[Thu Nov 27 21:53:03.958079 2025] [:error] [pid 5478:tid 5514] [client 4.216.85.120:7039] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aShXv-hzZWazcfEzqI2WYAAAAMY"]
[Thu Nov 27 21:53:04.507926 2025] [:error] [pid 5478:tid 5525] [client 4.216.85.120:49509] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aShXwOhzZWazcfEzqI2WZAAAANE"]
[Thu Nov 27 21:53:04.859361 2025] [:error] [pid 5478:tid 5528] [client 4.216.85.120:57444] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aShXwOhzZWazcfEzqI2WZwAAANQ"]
[Thu Nov 27 21:53:06.068735 2025] [:error] [pid 5478:tid 5527] [client 4.216.85.120:7001] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aShXwuhzZWazcfEzqI2WcAAAANM"]
[Thu Nov 27 21:53:06.363163 2025] [:error] [pid 5477:tid 5497] [client 4.216.85.120:57452] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aShXwhE-eNdvARcbXETYXAAAABA"]
[Thu Nov 27 21:53:06.879842 2025] [:error] [pid 5478:tid 5528] [client 4.216.85.120:49478] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aShXwuhzZWazcfEzqI2WegAAANQ"]
[Thu Nov 27 21:53:07.212025 2025] [:error] [pid 5536:tid 5540] [client 4.216.85.120:50290] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aShXw_USQSfgGHTatIUgMgAAAcI"]
[Thu Nov 27 21:53:07.720958 2025] [:error] [pid 5447:tid 5456] [client 4.216.85.120:57450] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aShXw-IZYIJeFQV4nEgeuwAAAUc"]
[Thu Nov 27 21:53:08.290185 2025] [:error] [pid 5447:tid 5450] [client 4.216.85.120:50255] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aShXxOIZYIJeFQV4nEgevgAAAUE"]
[Thu Nov 27 21:53:09.301549 2025] [:error] [pid 5478:tid 5523] [client 4.216.85.120:56034] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aShXxehzZWazcfEzqI2WkAAAAM8"]
[Thu Nov 27 21:53:09.939691 2025] [:error] [pid 5447:tid 5451] [client 4.216.85.120:49517] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aShXxeIZYIJeFQV4nEgexgAAAUI"]
[Thu Nov 27 21:53:10.553338 2025] [:error] [pid 5478:tid 5518] [client 4.216.85.120:56017] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aShXxuhzZWazcfEzqI2WkwAAAMo"]
[Thu Nov 27 21:53:11.176650 2025] [:error] [pid 5447:tid 5473] [client 4.216.85.120:50284] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aShXx-IZYIJeFQV4nEgeygAAAVg"]
[Thu Nov 27 21:53:11.903301 2025] [:error] [pid 5536:tid 5544] [client 4.216.85.120:49504] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aShXx_USQSfgGHTatIUgPQAAAcY"]
[Thu Nov 27 21:53:12.239001 2025] [:error] [pid 5536:tid 5559] [client 4.216.85.120:7024] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/manager.php"] [unique_id "aShXyPUSQSfgGHTatIUgPwAAAdU"]
[Thu Nov 27 21:53:13.555830 2025] [:error] [pid 5447:tid 5463] [client 4.216.85.120:50283] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/manager.php"] [unique_id "aShXyeIZYIJeFQV4nEge1gAAAU4"]
[Thu Nov 27 21:53:14.199801 2025] [:error] [pid 5477:tid 5488] [client 4.216.85.120:56009] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/manager.php"] [unique_id "aShXyhE-eNdvARcbXETYcwAAAAc"]
[Thu Nov 27 21:53:14.499975 2025] [:error] [pid 5536:tid 5542] [client 4.216.85.120:50267] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/manager.php"] [unique_id "aShXyvUSQSfgGHTatIUgRQAAAcQ"]
[Thu Nov 27 21:53:14.945739 2025] [:error] [pid 5477:tid 5495] [client 4.216.85.120:7031] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/item.php"] [unique_id "aShXyhE-eNdvARcbXETYdQAAAA4"]
[Thu Nov 27 21:53:15.403506 2025] [:error] [pid 5536:tid 5538] [client 4.216.85.120:56005] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/item.php"] [unique_id "aShXy_USQSfgGHTatIUgSAAAAcA"]
[Thu Nov 27 21:53:16.276292 2025] [:error] [pid 5447:tid 5463] [client 4.216.85.120:7015] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/item.php"] [unique_id "aShXzOIZYIJeFQV4nEge4QAAAU4"]
[Thu Nov 27 21:53:16.751491 2025] [:error] [pid 5536:tid 5555] [client 4.216.85.120:57441] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/item.php"] [unique_id "aShXzPUSQSfgGHTatIUgUAAAAdE"]
[Thu Nov 27 21:53:17.407101 2025] [:error] [pid 5536:tid 5547] [client 4.216.85.120:50253] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aShXzfUSQSfgGHTatIUgUgAAAck"]
[Thu Nov 27 21:53:18.115005 2025] [:error] [pid 5478:tid 5518] [client 4.216.85.120:49483] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aShXzuhzZWazcfEzqI2WmwAAAMo"]
[Thu Nov 27 21:53:18.443313 2025] [:error] [pid 5477:tid 5490] [client 4.216.85.120:50293] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aShXzhE-eNdvARcbXETYeAAAAAk"]
[Thu Nov 27 21:53:19.299918 2025] [:error] [pid 5536:tid 5561] [client 4.216.85.120:57462] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aShXz_USQSfgGHTatIUgWwAAAdc"]
[Thu Nov 27 21:53:20.185652 2025] [:error] [pid 5447:tid 5462] [client 4.216.85.120:56033] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "aShX0OIZYIJeFQV4nEge6AAAAU0"]
[Thu Nov 27 21:53:20.920741 2025] [:error] [pid 5536:tid 5548] [client 4.216.85.120:57416] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "aShX0PUSQSfgGHTatIUgYAAAAco"]
[Thu Nov 27 21:53:21.848075 2025] [:error] [pid 5447:tid 5467] [client 4.216.85.120:7037] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "aShX0eIZYIJeFQV4nEge7QAAAVI"]
[Thu Nov 27 21:53:22.366705 2025] [:error] [pid 5477:tid 5502] [client 4.216.85.120:49477] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "aShX0hE-eNdvARcbXETYfgAAABU"]
[Thu Nov 27 21:53:22.964230 2025] [:error] [pid 5478:tid 5509] [client 4.216.85.120:50250] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mail.php"] [unique_id "aShX0uhzZWazcfEzqI2WrwAAAME"]
[Thu Nov 27 21:53:23.786870 2025] [:error] [pid 5536:tid 5545] [client 4.216.85.120:50249] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mail.php"] [unique_id "aShX0_USQSfgGHTatIUgZgAAAcc"]
[Thu Nov 27 21:53:24.697466 2025] [:error] [pid 5536:tid 5557] [client 4.216.85.120:57928] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mail.php"] [unique_id "aShX1PUSQSfgGHTatIUgZwAAAdM"]
[Thu Nov 27 21:53:25.430287 2025] [:error] [pid 5478:tid 5521] [client 4.216.85.120:57445] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mail.php"] [unique_id "aShX1ehzZWazcfEzqI2WuwAAAM0"]
[Thu Nov 27 21:53:25.840298 2025] [:error] [pid 5536:tid 5538] [client 4.216.85.120:7021] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aShX1fUSQSfgGHTatIUgagAAAcA"]
[Thu Nov 27 21:53:42.348656 2025] [:error] [pid 5447:tid 5455] [client 4.216.85.120:57939] [client 4.216.85.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aShX5uIZYIJeFQV4nEgfCwAAAUY"]
[Thu Nov 27 21:53:43.876454 2025] [:error] [pid 5536:tid 5542] [client 4.216.85.120:57433] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css/index.php"] [unique_id "aShX5_USQSfgGHTatIUgsAAAAcQ"]
[Thu Nov 27 21:53:44.180580 2025] [:error] [pid 5478:tid 5511] [client 4.216.85.120:57952] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css/index.php"] [unique_id "aShX6OhzZWazcfEzqI2W-AAAAMM"]
[Thu Nov 27 21:53:44.556179 2025] [:error] [pid 5478:tid 5512] [client 4.216.85.120:56031] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css/index.php"] [unique_id "aShX6OhzZWazcfEzqI2W-wAAAMQ"]
[Thu Nov 27 21:53:44.954724 2025] [:error] [pid 5478:tid 5514] [client 4.216.85.120:7011] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css/index.php"] [unique_id "aShX6OhzZWazcfEzqI2W_AAAAMY"]
[Thu Nov 27 21:53:45.513827 2025] [:error] [pid 5536:tid 5550] [client 4.216.85.120:49515] [client 4.216.85.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aShX6fUSQSfgGHTatIUgtAAAAcw"]
[Thu Nov 27 21:53:46.111824 2025] [:error] [pid 5447:tid 5470] [client 4.216.85.120:62173] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/about.php"] [unique_id "aShX6uIZYIJeFQV4nEgfEwAAAVU"]
[Thu Nov 27 21:53:46.547935 2025] [:error] [pid 5447:tid 5458] [client 4.216.85.120:56063] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/about.php"] [unique_id "aShX6uIZYIJeFQV4nEgfFAAAAUk"]
[Thu Nov 27 21:53:47.100912 2025] [:error] [pid 5447:tid 5460] [client 4.216.85.120:49514] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/about.php"] [unique_id "aShX6-IZYIJeFQV4nEgfFwAAAUs"]
[Thu Nov 27 21:53:47.540692 2025] [:error] [pid 5536:tid 5541] [client 4.216.85.120:49501] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/about.php"] [unique_id "aShX6_USQSfgGHTatIUgvAAAAcM"]
[Thu Nov 27 21:53:48.006282 2025] [:error] [pid 5447:tid 5461] [client 4.216.85.120:62175] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/filemanager/dialog.php"] [unique_id "aShX7OIZYIJeFQV4nEgfGAAAAUw"]
[Thu Nov 27 21:53:48.364649 2025] [:error] [pid 5477:tid 5489] [client 4.216.85.120:50256] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/filemanager/dialog.php"] [unique_id "aShX7BE-eNdvARcbXETYtAAAAAg"]
[Thu Nov 27 21:53:48.795707 2025] [:error] [pid 5478:tid 5530] [client 4.216.85.120:50280] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/filemanager/dialog.php"] [unique_id "aShX7OhzZWazcfEzqI2XAwAAANY"]
[Thu Nov 27 21:53:49.235363 2025] [:error] [pid 5478:tid 5511] [client 4.216.85.120:62173] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/filemanager/dialog.php"] [unique_id "aShX7ehzZWazcfEzqI2XBAAAAMM"]
[Thu Nov 27 21:53:49.703726 2025] [:error] [pid 5447:tid 5473] [client 4.216.85.120:57972] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aShX7eIZYIJeFQV4nEgfIAAAAVg"]
[Thu Nov 27 21:53:50.215970 2025] [:error] [pid 5478:tid 5529] [client 4.216.85.120:57443] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aShX7uhzZWazcfEzqI2XBwAAANU"]
[Thu Nov 27 21:53:50.740729 2025] [:error] [pid 5478:tid 5532] [client 4.216.85.120:50265] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aShX7uhzZWazcfEzqI2XCwAAANg"]
[Thu Nov 27 21:53:51.284220 2025] [:error] [pid 5447:tid 5458] [client 4.216.85.120:62159] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aShX7-IZYIJeFQV4nEgfJAAAAUk"]
[Thu Nov 27 21:53:51.731412 2025] [:error] [pid 5536:tid 5538] [client 4.216.85.120:6994] [client 4.216.85.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aShX7_USQSfgGHTatIUgwQAAAcA"]
[Thu Nov 27 21:53:52.409936 2025] [:error] [pid 5447:tid 5472] [client 4.216.85.120:56061] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/index/function.php"] [unique_id "aShX8OIZYIJeFQV4nEgfJgAAAVc"]
[Thu Nov 27 21:53:52.932339 2025] [:error] [pid 5447:tid 5460] [client 4.216.85.120:6999] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/index/function.php"] [unique_id "aShX8OIZYIJeFQV4nEgfJwAAAUs"]
[Thu Nov 27 21:53:53.323657 2025] [:error] [pid 5477:tid 5499] [client 4.216.85.120:6998] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/index/function.php"] [unique_id "aShX8RE-eNdvARcbXETYugAAABI"]
[Thu Nov 27 21:53:53.847481 2025] [:error] [pid 5477:tid 5503] [client 4.216.85.120:56032] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/index/function.php"] [unique_id "aShX8RE-eNdvARcbXETYvAAAABY"]
[Thu Nov 27 21:53:54.451705 2025] [:error] [pid 5447:tid 5455] [client 4.216.85.120:57940] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aShX8uIZYIJeFQV4nEgfKwAAAUY"]
[Thu Nov 27 21:53:55.105661 2025] [:error] [pid 5536:tid 5541] [client 4.216.85.120:49499] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aShX8_USQSfgGHTatIUgxQAAAcM"]
[Thu Nov 27 21:53:55.422824 2025] [:error] [pid 5478:tid 5529] [client 4.216.85.120:57447] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aShX8-hzZWazcfEzqI2XFgAAANU"]
[Thu Nov 27 21:53:56.042920 2025] [:error] [pid 5478:tid 5525] [client 4.216.85.120:7028] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aShX9OhzZWazcfEzqI2XGgAAANE"]
[Thu Nov 27 21:53:56.413560 2025] [:error] [pid 5477:tid 5491] [client 4.216.85.120:7033] [client 4.216.85.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aShX9BE-eNdvARcbXETYvQAAAAo"]
[Thu Nov 27 21:53:57.002243 2025] [:error] [pid 5447:tid 5469] [client 4.216.85.120:62171] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ww1.php"] [unique_id "aShX9eIZYIJeFQV4nEgfMgAAAVQ"]
[Thu Nov 27 21:53:57.640172 2025] [:error] [pid 5478:tid 5528] [client 4.216.85.120:57420] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ww1.php"] [unique_id "aShX9ehzZWazcfEzqI2XHwAAANQ"]
[Thu Nov 27 21:53:58.079855 2025] [:error] [pid 5478:tid 5517] [client 4.216.85.120:57956] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ww1.php"] [unique_id "aShX9uhzZWazcfEzqI2XIgAAAMk"]
[Thu Nov 27 21:53:58.633666 2025] [:error] [pid 5478:tid 5526] [client 4.216.85.120:7008] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ww1.php"] [unique_id "aShX9uhzZWazcfEzqI2XIwAAANI"]
[Thu Nov 27 21:53:59.079109 2025] [:error] [pid 5447:tid 5449] [client 4.216.85.120:56013] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about/function.php"] [unique_id "aShX9-IZYIJeFQV4nEgfNwAAAUA"]
[Thu Nov 27 21:53:59.748800 2025] [:error] [pid 5478:tid 5531] [client 4.216.85.120:50300] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about/function.php"] [unique_id "aShX9-hzZWazcfEzqI2XKAAAANc"]
[Thu Nov 27 21:54:00.535404 2025] [:error] [pid 5447:tid 5463] [client 4.216.85.120:57924] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about/function.php"] [unique_id "aShX-OIZYIJeFQV4nEgfOQAAAU4"]
[Thu Nov 27 21:54:00.865200 2025] [:error] [pid 5478:tid 5512] [client 4.216.85.120:7114] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about/function.php"] [unique_id "aShX-OhzZWazcfEzqI2XNAAAAMQ"]
[Thu Nov 27 21:54:01.403264 2025] [:error] [pid 5478:tid 5524] [client 4.216.85.120:62195] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin/function.php"] [unique_id "aShX-ehzZWazcfEzqI2XOAAAANA"]
[Thu Nov 27 21:54:01.762616 2025] [:error] [pid 5447:tid 5464] [client 4.216.85.120:56058] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin/function.php"] [unique_id "aShX-eIZYIJeFQV4nEgfOgAAAU8"]
[Thu Nov 27 21:54:02.117784 2025] [:error] [pid 5478:tid 5515] [client 4.216.85.120:57418] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin/function.php"] [unique_id "aShX-uhzZWazcfEzqI2XPAAAAMc"]
[Thu Nov 27 21:54:02.528884 2025] [:error] [pid 5477:tid 5493] [client 4.216.85.120:49479] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin/function.php"] [unique_id "aShX-hE-eNdvARcbXETYxAAAAAw"]
[Thu Nov 27 21:54:02.908654 2025] [:error] [pid 5477:tid 5504] [client 4.216.85.120:7122] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aShX-hE-eNdvARcbXETYxQAAABc"]
[Thu Nov 27 21:54:03.415388 2025] [:error] [pid 5447:tid 5465] [client 4.216.85.120:57934] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aShX--IZYIJeFQV4nEgfPwAAAVA"]
[Thu Nov 27 21:54:03.785494 2025] [:error] [pid 5477:tid 5492] [client 4.216.85.120:49520] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aShX-xE-eNdvARcbXETYzwAAAAs"]
[Thu Nov 27 21:54:04.242683 2025] [:error] [pid 5536:tid 5556] [client 4.216.85.120:62149] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aShX_PUSQSfgGHTatIUg4AAAAdI"]
[Thu Nov 27 21:54:04.669933 2025] [:error] [pid 5536:tid 5551] [client 4.216.85.120:57431] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css/colors/blue/index.php"] [unique_id "aShX_PUSQSfgGHTatIUg5AAAAc0"]
[Thu Nov 27 21:54:05.134061 2025] [:error] [pid 5477:tid 5493] [client 4.216.85.120:57960] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css/colors/blue/index.php"] [unique_id "aShX_RE-eNdvARcbXETY3AAAAAw"]
[Thu Nov 27 21:54:05.650477 2025] [:error] [pid 5478:tid 5525] [client 4.216.85.120:50302] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css/colors/blue/index.php"] [unique_id "aShX_ehzZWazcfEzqI2XRQAAANE"]
[Thu Nov 27 21:54:05.976964 2025] [:error] [pid 5447:tid 5459] [client 4.216.85.120:6983] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css/colors/blue/index.php"] [unique_id "aShX_eIZYIJeFQV4nEgfUgAAAUo"]
[Thu Nov 27 21:54:06.458478 2025] [:error] [pid 5477:tid 5486] [client 4.216.85.120:57468] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/security.php"] [unique_id "aShX_hE-eNdvARcbXETY3wAAAAU"]
[Thu Nov 27 21:54:06.860597 2025] [:error] [pid 5477:tid 5489] [client 4.216.85.120:6464] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/security.php"] [unique_id "aShX_hE-eNdvARcbXETY4gAAAAg"]
[Thu Nov 27 21:54:07.675198 2025] [:error] [pid 5447:tid 5455] [client 4.216.85.120:57933] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/security.php"] [unique_id "aShX_-IZYIJeFQV4nEgfVwAAAUY"]
[Thu Nov 27 21:54:07.958388 2025] [:error] [pid 5536:tid 5539] [client 4.216.85.120:50271] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/security.php"] [unique_id "aShX__USQSfgGHTatIUg8QAAAcE"]
[Thu Nov 27 21:54:08.446436 2025] [:error] [pid 5477:tid 5491] [client 4.216.85.120:50289] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/about.php"] [unique_id "aShYABE-eNdvARcbXETY6AAAAAo"]
[Thu Nov 27 21:54:08.883299 2025] [:error] [pid 5477:tid 5488] [client 4.216.85.120:49498] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/about.php"] [unique_id "aShYABE-eNdvARcbXETY6QAAAAc"]
[Thu Nov 27 21:54:09.298789 2025] [:error] [pid 5536:tid 5544] [client 4.216.85.120:62172] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/about.php"] [unique_id "aShYAfUSQSfgGHTatIUg-QAAAcY"]
[Thu Nov 27 21:54:09.802631 2025] [:error] [pid 5447:tid 5458] [client 4.216.85.120:49482] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/about.php"] [unique_id "aShYAeIZYIJeFQV4nEgfXgAAAUk"]
[Thu Nov 27 21:54:10.631444 2025] [:error] [pid 5478:tid 5523] [client 4.216.85.120:7038] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/index.php"] [unique_id "aShYAuhzZWazcfEzqI2XTgAAAM8"]
[Thu Nov 27 21:54:11.005989 2025] [:error] [pid 5536:tid 5545] [client 4.216.85.120:56002] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/index.php"] [unique_id "aShYA_USQSfgGHTatIUg_QAAAcc"]
[Thu Nov 27 21:54:11.537146 2025] [:error] [pid 5477:tid 5482] [client 4.216.85.120:57965] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/index.php"] [unique_id "aShYAxE-eNdvARcbXETY7wAAAAE"]
[Thu Nov 27 21:54:11.818399 2025] [:error] [pid 5478:tid 5511] [client 4.216.85.120:57946] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/index.php"] [unique_id "aShYA-hzZWazcfEzqI2XVQAAAMM"]
[Thu Nov 27 21:54:12.393753 2025] [:error] [pid 5477:tid 5498] [client 4.216.85.120:49511] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aShYBBE-eNdvARcbXETY8QAAABE"]
[Thu Nov 27 21:54:12.850712 2025] [:error] [pid 5478:tid 5519] [client 4.216.85.120:50296] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aShYBOhzZWazcfEzqI2XWwAAAMs"]
[Thu Nov 27 21:54:13.834750 2025] [:error] [pid 5478:tid 5508] [client 4.216.85.120:50259] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aShYBehzZWazcfEzqI2XYAAAAMA"]
[Thu Nov 27 21:54:14.263822 2025] [:error] [pid 5536:tid 5548] [client 4.216.85.120:62189] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aShYBvUSQSfgGHTatIUhBgAAAco"]
[Thu Nov 27 21:54:14.749453 2025] [:error] [pid 5478:tid 5521] [client 4.216.85.120:7151] [client 4.216.85.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aShYBuhzZWazcfEzqI2XYQAAAM0"]
[Thu Nov 27 21:54:15.759981 2025] [:error] [pid 5536:tid 5555] [client 4.216.85.120:56021] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/radio.php"] [unique_id "aShYB_USQSfgGHTatIUhDgAAAdE"]
[Thu Nov 27 21:54:16.469952 2025] [:error] [pid 5447:tid 5473] [client 4.216.85.120:57436] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/radio.php"] [unique_id "aShYCOIZYIJeFQV4nEgfaQAAAVg"]
[Thu Nov 27 21:54:17.178208 2025] [:error] [pid 5477:tid 5496] [client 4.216.85.120:50254] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/radio.php"] [unique_id "aShYCRE-eNdvARcbXETY_wAAAA8"]
[Thu Nov 27 21:54:17.736371 2025] [:error] [pid 5478:tid 5514] [client 4.216.85.120:7036] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/radio.php"] [unique_id "aShYCehzZWazcfEzqI2XZwAAAMY"]
[Thu Nov 27 21:54:18.016945 2025] [:error] [pid 5447:tid 5470] [client 4.216.85.120:57949] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aShYCuIZYIJeFQV4nEgfbAAAAVU"]
[Thu Nov 27 21:54:19.017254 2025] [:error] [pid 5447:tid 5453] [client 4.216.85.120:7110] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aShYC-IZYIJeFQV4nEgfcQAAAUQ"]
[Thu Nov 27 21:54:19.501008 2025] [:error] [pid 5536:tid 5561] [client 4.216.85.120:6976] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aShYC_USQSfgGHTatIUhGgAAAdc"]
[Thu Nov 27 21:54:19.940812 2025] [:error] [pid 5447:tid 5469] [client 4.216.85.120:7123] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aShYC-IZYIJeFQV4nEgfeAAAAVQ"]
[Thu Nov 27 21:54:20.461709 2025] [:error] [pid 5478:tid 5518] [client 4.216.85.120:56020] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/admin.php"] [unique_id "aShYDOhzZWazcfEzqI2XbwAAAMo"]
[Thu Nov 27 21:54:21.062601 2025] [:error] [pid 5478:tid 5513] [client 4.216.85.120:57426] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/admin.php"] [unique_id "aShYDehzZWazcfEzqI2XcQAAAMU"]
[Thu Nov 27 21:54:21.991440 2025] [:error] [pid 5536:tid 5540] [client 4.216.85.120:7019] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/admin.php"] [unique_id "aShYDfUSQSfgGHTatIUhJAAAAcI"]
[Thu Nov 27 21:54:22.924920 2025] [:error] [pid 5536:tid 5539] [client 4.216.85.120:50276] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/admin.php"] [unique_id "aShYDvUSQSfgGHTatIUhKwAAAcE"]
[Thu Nov 27 21:54:23.514104 2025] [:error] [pid 5536:tid 5548] [client 4.216.85.120:62180] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/admin.php"] [unique_id "aShYD_USQSfgGHTatIUhLQAAAco"]
[Thu Nov 27 21:54:24.271380 2025] [:error] [pid 5478:tid 5509] [client 4.216.85.120:7005] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/admin.php"] [unique_id "aShYEOhzZWazcfEzqI2XdgAAAME"]
[Thu Nov 27 21:54:25.285802 2025] [:error] [pid 5477:tid 5487] [client 4.216.85.120:57931] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/admin.php"] [unique_id "aShYERE-eNdvARcbXETZFwAAAAY"]
[Thu Nov 27 21:54:26.270973 2025] [:error] [pid 5536:tid 5545] [client 4.216.85.120:50288] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/admin.php"] [unique_id "aShYEvUSQSfgGHTatIUhOgAAAcc"]
[Thu Nov 27 21:54:26.668012 2025] [:error] [pid 5477:tid 5481] [client 4.216.85.120:7029] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aShYEhE-eNdvARcbXETZHAAAAAA"]
[Thu Nov 27 21:54:27.142539 2025] [:error] [pid 5536:tid 5562] [client 4.216.85.120:62191] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aShYE_USQSfgGHTatIUhQAAAAdg"]
[Thu Nov 27 21:54:27.737953 2025] [:error] [pid 5447:tid 5465] [client 4.216.85.120:50246] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aShYE-IZYIJeFQV4nEgfhwAAAVA"]
[Thu Nov 27 21:54:28.336835 2025] [:error] [pid 5536:tid 5545] [client 4.216.85.120:7017] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aShYFPUSQSfgGHTatIUhRwAAAcc"]
[Thu Nov 27 21:54:30.046720 2025] [:error] [pid 5477:tid 5489] [client 4.216.85.120:62185] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aShYFhE-eNdvARcbXETZJAAAAAg"]
[Thu Nov 27 21:54:30.630056 2025] [:error] [pid 5536:tid 5551] [client 4.216.85.120:50295] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aShYFvUSQSfgGHTatIUhSAAAAc0"]
[Thu Nov 27 21:54:31.558715 2025] [:error] [pid 5477:tid 5497] [client 4.216.85.120:7027] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aShYFxE-eNdvARcbXETZMAAAABA"]
[Thu Nov 27 21:54:32.275667 2025] [:error] [pid 5478:tid 5513] [client 4.216.85.120:50264] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aShYGOhzZWazcfEzqI2XhwAAAMU"]
[Thu Nov 27 21:54:32.747030 2025] [:error] [pid 5478:tid 5527] [client 4.216.85.120:50282] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/log.php"] [unique_id "aShYGOhzZWazcfEzqI2XiQAAANM"]
[Thu Nov 27 21:54:33.440065 2025] [:error] [pid 5478:tid 5523] [client 4.216.85.120:57975] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/log.php"] [unique_id "aShYGehzZWazcfEzqI2XjgAAAM8"]
[Thu Nov 27 21:54:33.949158 2025] [:error] [pid 5536:tid 5559] [client 4.216.85.120:56026] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/log.php"] [unique_id "aShYGfUSQSfgGHTatIUhTQAAAdU"]
[Thu Nov 27 21:54:34.412614 2025] [:error] [pid 5536:tid 5561] [client 4.216.85.120:57959] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/log.php"] [unique_id "aShYGvUSQSfgGHTatIUhTgAAAdc"]
[Thu Nov 27 21:54:35.174986 2025] [:error] [pid 5477:tid 5482] [client 4.216.85.120:7131] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/class.php"] [unique_id "aShYGxE-eNdvARcbXETZMwAAAAE"]
[Thu Nov 27 21:54:35.842363 2025] [:error] [pid 5478:tid 5531] [client 4.216.85.120:57953] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/class.php"] [unique_id "aShYG-hzZWazcfEzqI2XlAAAANc"]
[Thu Nov 27 21:54:36.766685 2025] [:error] [pid 5478:tid 5522] [client 4.216.85.120:56016] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/class.php"] [unique_id "aShYHOhzZWazcfEzqI2XmAAAAM4"]
[Thu Nov 27 21:54:37.523013 2025] [:error] [pid 5477:tid 5490] [client 4.216.85.120:57929] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/class.php"] [unique_id "aShYHRE-eNdvARcbXETZNgAAAAk"]
[Thu Nov 27 21:54:38.678859 2025] [:error] [pid 5478:tid 5514] [client 4.216.85.120:57932] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bless5.php"] [unique_id "aShYHuhzZWazcfEzqI2XngAAAMY"]
[Thu Nov 27 21:54:39.544657 2025] [:error] [pid 5536:tid 5547] [client 4.216.85.120:57981] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bless5.php"] [unique_id "aShYH_USQSfgGHTatIUhaAAAAck"]
[Thu Nov 27 21:54:40.113890 2025] [:error] [pid 5536:tid 5540] [client 4.216.85.120:62188] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bless5.php"] [unique_id "aShYIPUSQSfgGHTatIUhbAAAAcI"]
[Thu Nov 27 21:54:42.834376 2025] [:error] [pid 5447:tid 5471] [client 4.216.85.120:6722] [client 4.216.85.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aShYIuIZYIJeFQV4nEgfsgAAAVY"]
[Thu Nov 27 21:54:43.531797 2025] [:error] [pid 5478:tid 5528] [client 4.216.85.120:57423] [client 4.216.85.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aShYI-hzZWazcfEzqI2XrQAAANQ"]
[Sat Nov 29 15:00:52.308300 2025] [:error] [pid 62619:tid 62634] [client 207.154.216.0:56189] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aSqaJNk7ZYKT63FfVSUzFwAAAU0"]
[Sat Nov 29 15:00:53.365908 2025] [:error] [pid 25341:tid 25361] [client 207.154.216.0:56181] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aSqaJfWK8JdN03Mg7dz7TgAAAdA"]
[Sat Nov 29 15:00:54.026632 2025] [:error] [pid 16610:tid 16634] [client 207.154.216.0:57536] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aSqaJgTu2dLzNk_QISre8wAAAZY"]
[Sat Nov 29 15:00:54.526741 2025] [:error] [pid 20826:tid 20843] [client 207.154.216.0:50569] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aSqaJvABfBqk70vKX9SDywAAAA0"]
[Sat Nov 29 15:00:55.013361 2025] [:error] [pid 20827:tid 20860] [client 207.154.216.0:56909] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aSqaJ4R9B7FcLfh1rSFr5AAAAEI"]
[Sat Nov 29 15:14:23.262323 2025] [:error] [pid 16610:tid 16612] [client 207.154.216.0:53218] [client 207.154.216.0] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-json/"] [unique_id "aSqdTwTu2dLzNk_QISrgpwAAAYA"]
[Sat Nov 29 15:52:56.141953 2025] [:error] [pid 20826:tid 20847] [client 45.130.203.140:50407] [client 45.130.203.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/HEAD"] [unique_id "aSqmWPABfBqk70vKX9SJLwAAABE"]
[Sat Nov 29 21:50:34.765351 2025] [:error] [pid 37490:tid 37492] [client 3.98.89.194:34866] [client 3.98.89.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSr6KpjG6OUSCUo6XZ1ZEAAAAgA"]
[Sat Nov 29 21:50:35.645505 2025] [:error] [pid 20826:tid 20843] [client 3.98.89.194:49454] [client 3.98.89.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aSr6K_ABfBqk70vKX9TesQAAAA0"]
[Sat Nov 29 21:50:36.520946 2025] [:error] [pid 20915:tid 20933] [client 3.98.89.194:49470] [client 3.98.89.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.local"] [unique_id "aSr6LFOOtKw1QZ3TPEQNWgAAANA"]
[Sat Nov 29 21:50:37.400211 2025] [:error] [pid 25341:tid 25366] [client 3.98.89.194:49480] [client 3.98.89.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.production"] [unique_id "aSr6LfWK8JdN03Mg7dxlXQAAAdU"]
[Sat Nov 29 21:50:38.278329 2025] [:error] [pid 20915:tid 20930] [client 3.98.89.194:49482] [client 3.98.89.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.development"] [unique_id "aSr6LlOOtKw1QZ3TPEQNXAAAAM0"]
[Sat Nov 29 21:50:39.159163 2025] [:error] [pid 62619:tid 62621] [client 3.98.89.194:49498] [client 3.98.89.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "aSr6L9k7ZYKT63FfVSWITAAAAUA"]
[Sat Nov 29 21:50:40.041322 2025] [:error] [pid 20826:tid 20840] [client 3.98.89.194:49514] [client 3.98.89.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.example"] [unique_id "aSr6MPABfBqk70vKX9TeuAAAAAo"]
[Sat Nov 29 21:50:51.606598 2025] [:error] [pid 20826:tid 20847] [client 3.98.89.194:34692] [client 3.98.89.194] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/config.ini"] [unique_id "aSr6O_ABfBqk70vKX9TexgAAABE"]
[Sat Nov 29 21:51:05.331216 2025] [:error] [pid 20826:tid 20846] [client 3.98.89.194:46312] [client 3.98.89.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/wp-config.php"] [unique_id "aSr6SfABfBqk70vKX9Te2gAAABA"]
[Sat Nov 29 21:51:06.202697 2025] [:error] [pid 20826:tid 20837] [client 3.98.89.194:46322] [client 3.98.89.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/composer.json"] [unique_id "aSr6SvABfBqk70vKX9Te3QAAAAc"]
[Sat Nov 29 23:04:56.589661 2025] [:error] [pid 32136:tid 32138] [client 13.251.128.22:52832] [client 13.251.128.22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSsLmMSj_WSVQM1psKrMTQAAAQA"]
[Sat Nov 29 23:04:56.979982 2025] [:error] [pid 37490:tid 37516] [client 13.251.128.22:52836] [client 13.251.128.22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aSsLmJjG6OUSCUo6XZ1pdwAAAhg"]
[Sat Nov 29 23:04:57.373476 2025] [:error] [pid 20915:tid 20919] [client 13.251.128.22:52852] [client 13.251.128.22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.local"] [unique_id "aSsLmVOOtKw1QZ3TPEQfowAAAMI"]
[Sat Nov 29 23:04:57.766366 2025] [:error] [pid 20826:tid 20849] [client 13.251.128.22:52862] [client 13.251.128.22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.production"] [unique_id "aSsLmfABfBqk70vKX9TukgAAABM"]
[Sat Nov 29 23:04:58.159063 2025] [:error] [pid 37490:tid 37499] [client 13.251.128.22:52876] [client 13.251.128.22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.development"] [unique_id "aSsLmpjG6OUSCUo6XZ1pewAAAgc"]
[Sat Nov 29 23:04:58.549754 2025] [:error] [pid 62619:tid 62640] [client 13.251.128.22:38260] [client 13.251.128.22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "aSsLmtk7ZYKT63FfVSWe8QAAAVM"]
[Sat Nov 29 23:04:58.939252 2025] [:error] [pid 20827:tid 20865] [client 13.251.128.22:38272] [client 13.251.128.22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.example"] [unique_id "aSsLmoR9B7FcLfh1rSG6xAAAAEc"]
[Sat Nov 29 23:05:06.042925 2025] [:error] [pid 32136:tid 32150] [client 13.251.128.22:38364] [client 13.251.128.22] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/config.ini"] [unique_id "aSsLosSj_WSVQM1psKrMWAAAAQw"]
[Sat Nov 29 23:05:14.177501 2025] [:error] [pid 37490:tid 37493] [client 13.251.128.22:44914] [client 13.251.128.22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-config.php"] [unique_id "aSsLqpjG6OUSCUo6XZ1pjwAAAgE"]
[Sat Nov 29 23:05:14.568195 2025] [:error] [pid 37490:tid 37515] [client 13.251.128.22:44918] [client 13.251.128.22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/composer.json"] [unique_id "aSsLqpjG6OUSCUo6XZ1pkAAAAhc"]
[Sun Nov 30 00:49:51.315968 2025] [:error] [pid 58730:tid 58772] [client 54.250.33.107:39664] [client 54.250.33.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSskL6DQq6rwusUXQKjOzQAAAAc"]
[Sun Nov 30 00:49:51.859033 2025] [:error] [pid 58730:tid 58783] [client 54.250.33.107:39666] [client 54.250.33.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aSskL6DQq6rwusUXQKjO0AAAABI"]
[Sun Nov 30 00:49:52.399209 2025] [:error] [pid 42162:tid 42172] [client 54.250.33.107:39674] [client 54.250.33.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.local"] [unique_id "aSskMNePpz4Ije-_Ejrk4QAAAIU"]
[Sun Nov 30 00:49:52.944068 2025] [:error] [pid 42252:tid 42267] [client 54.250.33.107:39690] [client 54.250.33.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.production"] [unique_id "aSskMLweMxCk051n8_-pKgAAAU0"]
[Sun Nov 30 00:49:53.484431 2025] [:error] [pid 42163:tid 42199] [client 54.250.33.107:39696] [client 54.250.33.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.development"] [unique_id "aSskMZnaEs-eGc51wg2FvwAAAMQ"]
[Sun Nov 30 00:49:54.024252 2025] [:error] [pid 42164:tid 42225] [client 54.250.33.107:39706] [client 54.250.33.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "aSskMtip8Nhatsq7KxzOpgAAAQM"]
[Sun Nov 30 00:49:54.564991 2025] [:error] [pid 42162:tid 42167] [client 54.250.33.107:39720] [client 54.250.33.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.example"] [unique_id "aSskMtePpz4Ije-_Ejrk6wAAAIA"]
[Sun Nov 30 00:50:02.960073 2025] [:error] [pid 58730:tid 58782] [client 54.250.33.107:42436] [client 54.250.33.107] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/config.ini"] [unique_id "aSskOqDQq6rwusUXQKjO6gAAABE"]
[Sun Nov 30 00:50:12.905490 2025] [:error] [pid 42162:tid 42174] [client 54.250.33.107:34306] [client 54.250.33.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-config.php"] [unique_id "aSskRNePpz4Ije-_EjrlFAAAAIc"]
[Sun Nov 30 00:50:13.446162 2025] [:error] [pid 58730:tid 58786] [client 54.250.33.107:34322] [client 54.250.33.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/composer.json"] [unique_id "aSskRaDQq6rwusUXQKjPEQAAABQ"]
[Sun Nov 30 01:05:12.764844 2025] [:error] [pid 42252:tid 42258] [client 18.201.178.190:51588] [client 18.201.178.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSsnyLweMxCk051n8_-ukgAAAUQ"]
[Sun Nov 30 01:05:13.832315 2025] [:error] [pid 42252:tid 42265] [client 18.201.178.190:51598] [client 18.201.178.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aSsnybweMxCk051n8_-ukwAAAUs"]
[Sun Nov 30 01:05:14.899645 2025] [:error] [pid 58730:tid 58783] [client 18.201.178.190:51614] [client 18.201.178.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.local"] [unique_id "aSsnyqDQq6rwusUXQKjVOwAAABI"]
[Sun Nov 30 01:05:15.969299 2025] [:error] [pid 42164:tid 42223] [client 18.201.178.190:51624] [client 18.201.178.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.production"] [unique_id "aSsny9ip8Nhatsq7KxzUZwAAAQE"]
[Sun Nov 30 01:05:17.041244 2025] [:error] [pid 42164:tid 42233] [client 18.201.178.190:55496] [client 18.201.178.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.development"] [unique_id "aSsnzdip8Nhatsq7KxzUaQAAAQs"]
[Sun Nov 30 01:05:18.111905 2025] [:error] [pid 42164:tid 42228] [client 18.201.178.190:55508] [client 18.201.178.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "aSsnztip8Nhatsq7KxzUbAAAAQY"]
[Sun Nov 30 01:05:19.182068 2025] [:error] [pid 42164:tid 42246] [client 18.201.178.190:55524] [client 18.201.178.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.example"] [unique_id "aSsnz9ip8Nhatsq7KxzUbgAAARg"]
[Sun Nov 30 01:05:32.925825 2025] [:error] [pid 58730:tid 58783] [client 18.201.178.190:43302] [client 18.201.178.190] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/config.ini"] [unique_id "aSsn3KDQq6rwusUXQKjVSAAAABI"]
[Sun Nov 30 01:05:49.068640 2025] [:error] [pid 42162:tid 42167] [client 18.201.178.190:33524] [client 18.201.178.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/wp-config.php"] [unique_id "aSsn7dePpz4Ije-_EjrpXwAAAIA"]
[Sun Nov 30 01:05:50.137018 2025] [:error] [pid 42163:tid 42202] [client 18.201.178.190:33536] [client 18.201.178.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/composer.json"] [unique_id "aSsn7pnaEs-eGc51wg2KuAAAAMc"]
[Sun Nov 30 01:07:26.267282 2025] [:error] [pid 42252:tid 42260] [client 93.123.109.7:46656] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSsoTrweMxCk051n8_-vmQAAAUY"]
[Sun Nov 30 03:16:09.238338 2025] [:error] [pid 42164:tid 42232] [client 34.214.157.237:48804] [client 34.214.157.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aStGedip8Nhatsq7KxzzeAAAAQo"]
[Sun Nov 30 03:16:09.975362 2025] [:error] [pid 58730:tid 58777] [client 34.214.157.237:48820] [client 34.214.157.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aStGeaDQq6rwusUXQKjw_gAAAAw"]
[Sun Nov 30 03:16:10.710450 2025] [:error] [pid 29714:tid 29717] [client 34.214.157.237:48828] [client 34.214.157.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.local"] [unique_id "aStGer76_KNwefuiUY-IGQAAAEE"]
[Sun Nov 30 03:16:11.446891 2025] [:error] [pid 53977:tid 53985] [client 34.214.157.237:48832] [client 34.214.157.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.production"] [unique_id "aStGe6CMKg3RMo8GfKIi-AAAAkY"]
[Sun Nov 30 03:16:12.185315 2025] [:error] [pid 53977:tid 53990] [client 34.214.157.237:48848] [client 34.214.157.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.development"] [unique_id "aStGfKCMKg3RMo8GfKIi-QAAAks"]
[Sun Nov 30 03:16:12.917699 2025] [:error] [pid 33376:tid 33379] [client 34.214.157.237:48862] [client 34.214.157.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "aStGfHpx_7viPEhKF36iPgAAAgA"]
[Sun Nov 30 03:16:13.648974 2025] [:error] [pid 33376:tid 33402] [client 34.214.157.237:48718] [client 34.214.157.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.example"] [unique_id "aStGfXpx_7viPEhKF36iPwAAAhc"]
[Sun Nov 30 03:16:23.623263 2025] [:error] [pid 33303:tid 33308] [client 34.214.157.237:35332] [client 34.214.157.237] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/config.ini"] [unique_id "aStGh_vL3Xz3V8uL8l6IkQAAAYM"]
[Sun Nov 30 03:16:35.673303 2025] [:error] [pid 33337:tid 33360] [client 34.214.157.237:57300] [client 34.214.157.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/wp-config.php"] [unique_id "aStGkz7HzFQftKzaJgKEHwAAAdM"]
[Sun Nov 30 03:16:36.396728 2025] [:error] [pid 42162:tid 42186] [client 34.214.157.237:57308] [client 34.214.157.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/composer.json"] [unique_id "aStGlNePpz4Ije-_EjoEHAAAAJM"]
[Sun Nov 30 04:06:41.968851 2025] [:error] [pid 6906:tid 6983] [client 18.184.183.124:39116] [client 18.184.183.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aStSUaIKvUa3opAJwtB8CQAAAJI"]
[Sun Nov 30 04:06:42.940282 2025] [:error] [pid 6994:tid 7017] [client 18.184.183.124:39124] [client 18.184.183.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aStSUnHT5RlJRaQcChXAuQAAANU"]
[Sun Nov 30 04:06:43.915220 2025] [:error] [pid 6905:tid 6957] [client 18.184.183.124:39130] [client 18.184.183.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.local"] [unique_id "aStSU7Asw5HpJFTs_iDODwAAAFM"]
[Sun Nov 30 04:06:44.879422 2025] [:error] [pid 6905:tid 6939] [client 18.184.183.124:39142] [client 18.184.183.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.production"] [unique_id "aStSVLAsw5HpJFTs_iDOEAAAAEE"]
[Sun Nov 30 04:06:45.849970 2025] [:error] [pid 6904:tid 6911] [client 18.184.183.124:39146] [client 18.184.183.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.development"] [unique_id "aStSVVDhdoNopa1cdId2cgAAAAI"]
[Sun Nov 30 04:06:46.813338 2025] [:error] [pid 6906:tid 6977] [client 18.184.183.124:39150] [client 18.184.183.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "aStSVqIKvUa3opAJwtB8EQAAAIw"]
[Sun Nov 30 04:06:47.784384 2025] [:error] [pid 6994:tid 7018] [client 18.184.183.124:39164] [client 18.184.183.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.example"] [unique_id "aStSV3HT5RlJRaQcChXAxQAAANY"]
[Sun Nov 30 04:07:00.628958 2025] [:error] [pid 6905:tid 6953] [client 18.184.183.124:32904] [client 18.184.183.124] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/config.ini"] [unique_id "aStSZLAsw5HpJFTs_iDONAAAAE8"]
[Sun Nov 30 04:07:15.858858 2025] [:error] [pid 6994:tid 7020] [client 18.184.183.124:56778] [client 18.184.183.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-config.php"] [unique_id "aStSc3HT5RlJRaQcChXA-gAAANg"]
[Sun Nov 30 04:07:16.821459 2025] [:error] [pid 6994:tid 7014] [client 18.184.183.124:56792] [client 18.184.183.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/composer.json"] [unique_id "aStSdHHT5RlJRaQcChXA_wAAANI"]
[Sun Nov 30 20:57:06.260620 2025] [:error] [pid 58704:tid 58724] [client 159.223.57.182:60894] [client 159.223.57.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.57.182, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aSw_IlgCdnbXMzbONnNpSwAAA5E"]
[Sun Nov 30 20:57:07.938214 2025] [:error] [pid 58704:tid 58726] [client 159.223.57.182:61132] [client 159.223.57.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.57.182, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aSw_I1gCdnbXMzbONnNpTQAAA5M"]
[Mon Dec 01 02:43:02.393746 2025] [:error] [pid 32521:tid 32552] [client 103.65.237.153:62799] [client 103.65.237.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/sftp-config.json"] [unique_id "aSyQNj-OXioBrWvHoPrgwgAAAwA"]
[Mon Dec 01 02:43:02.669458 2025] [:error] [pid 41526:tid 41538] [client 103.65.237.153:62829] [client 103.65.237.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.vscode/sftp.json"] [unique_id "aSyQNl0bjN1zt83-HJ0oJgAAAUc"]
[Mon Dec 01 08:01:35.217412 2025] [:error] [pid 57571:tid 57582] [client 142.93.0.66:47688] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSza35QRq1ZryWodkfH7PAAAAEk"]
[Mon Dec 01 08:01:41.381812 2025] [authz_core:error] [pid 57483:tid 57563] [client 142.93.0.66:50058] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Dec 01 08:01:43.173059 2025] [:error] [pid 10057:tid 10068] [client 142.93.0.66:50088] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aSza50kuZadWSzAB9cz5pgAAAUk"]
[Mon Dec 01 08:01:43.601935 2025] [:error] [pid 10057:tid 10066] [client 142.93.0.66:50098] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aSza50kuZadWSzAB9cz5qQAAAUc"]
[Mon Dec 01 11:12:49.924048 2025] [:error] [pid 50172:tid 50196] [client 213.21.239.4:52436] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/content../.svn/wc.db"] [unique_id "aS0HsWA_oUkA7PwzMCfbOAAAAFM"]
[Mon Dec 01 11:12:49.924064 2025] [:error] [pid 50172:tid 50197] [client 213.21.239.4:52468] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/app/.svn/wc.db"] [unique_id "aS0HsWA_oUkA7PwzMCfbNwAAAFQ"]
[Mon Dec 01 11:12:49.924417 2025] [:error] [pid 50172:tid 50179] [client 213.21.239.4:52400] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/css../.svn/wc.db"] [unique_id "aS0HsWA_oUkA7PwzMCfbOQAAAEI"]
[Mon Dec 01 11:12:49.924634 2025] [:error] [pid 50172:tid 50192] [client 213.21.239.4:52414] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/aomanalyzer/.svn/wc.db"] [unique_id "aS0HsWA_oUkA7PwzMCfbOgAAAE8"]
[Mon Dec 01 11:12:49.925138 2025] [:error] [pid 50172:tid 50182] [client 213.21.239.4:52382] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/common/.svn/wc.db"] [unique_id "aS0HsWA_oUkA7PwzMCfbOwAAAEU"]
[Mon Dec 01 11:12:49.925983 2025] [:error] [pid 50236:tid 50261] [client 213.21.239.4:52484] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/admin/.svn/wc.db"] [unique_id "aS0HsdFh6opCMA7G1YQHbgAAAVc"]
[Mon Dec 01 11:12:49.926065 2025] [:error] [pid 60651:tid 60672] [client 213.21.239.4:52368] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/developer/.svn/wc.db"] [unique_id "aS0HsWFx-k5xX1VD6QLmRAAAAJI"]
[Mon Dec 01 11:12:49.926574 2025] [:error] [pid 50172:tid 50193] [client 213.21.239.4:52384] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/dev/.svn/wc.db"] [unique_id "aS0HsWA_oUkA7PwzMCfbPAAAAFA"]
[Mon Dec 01 11:12:49.926590 2025] [:error] [pid 60651:tid 60663] [client 213.21.239.4:52392] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/api/.svn/wc.db"] [unique_id "aS0HsWFx-k5xX1VD6QLmRQAAAIk"]
[Mon Dec 01 11:12:49.926966 2025] [:error] [pid 60651:tid 60669] [client 213.21.239.4:52448] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/assets../.svn/wc.db"] [unique_id "aS0HsWFx-k5xX1VD6QLmRgAAAI8"]
[Mon Dec 01 11:12:49.927768 2025] [:error] [pid 60651:tid 60658] [client 213.21.239.4:52390] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/data/.svn/wc.db"] [unique_id "aS0HsWFx-k5xX1VD6QLmRwAAAIQ"]
[Mon Dec 01 11:12:49.927856 2025] [:error] [pid 50172:tid 50180] [client 213.21.239.4:52358] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/build/.svn/wc.db"] [unique_id "aS0HsWA_oUkA7PwzMCfbPQAAAEM"]
[Mon Dec 01 11:12:49.928325 2025] [:error] [pid 50172:tid 50185] [client 213.21.239.4:52452] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/blog/wp-content/themes/.svn/wc.db"] [unique_id "aS0HsWA_oUkA7PwzMCfbPgAAAEg"]
[Mon Dec 01 11:12:49.928997 2025] [:error] [pid 60651:tid 60666] [client 213.21.239.4:52470] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/a/.svn/wc.db"] [unique_id "aS0HsWFx-k5xX1VD6QLmSQAAAIw"]
[Mon Dec 01 11:12:49.929783 2025] [:error] [pid 50236:tid 50258] [client 213.21.239.4:52348] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/cms/.svn/wc.db"] [unique_id "aS0HsdFh6opCMA7G1YQHbwAAAVQ"]
[Mon Dec 01 11:12:49.931309 2025] [:error] [pid 60651:tid 60661] [client 213.21.239.4:52538] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/AWSconf.svn/wc.db"] [unique_id "aS0HsWFx-k5xX1VD6QLmSAAAAIc"]
[Mon Dec 01 11:12:49.931705 2025] [:error] [pid 60651:tid 60660] [client 213.21.239.4:52532] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/application/.svn/wc.db"] [unique_id "aS0HsWFx-k5xX1VD6QLmSgAAAIY"]
[Mon Dec 01 11:12:49.933997 2025] [:error] [pid 60651:tid 60655] [client 213.21.239.4:52330] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/database/.svn/wc.db"] [unique_id "aS0HsWFx-k5xX1VD6QLmSwAAAIE"]
[Mon Dec 01 11:12:49.934873 2025] [:error] [pid 50236:tid 50259] [client 213.21.239.4:52526] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/backup/.svn/wc.db"] [unique_id "aS0HsdFh6opCMA7G1YQHcAAAAVU"]
[Mon Dec 01 11:12:49.936870 2025] [:error] [pid 60651:tid 60664] [client 213.21.239.4:52332] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre../wc.db"] [unique_id "aS0HsWFx-k5xX1VD6QLmTAAAAIo"]
[Mon Dec 01 11:12:49.938727 2025] [:error] [pid 60651:tid 60675] [client 213.21.239.4:52458] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/blog/.svn/wc.db"] [unique_id "aS0HsWFx-k5xX1VD6QLmTgAAAJU"]
[Mon Dec 01 11:12:49.938801 2025] [:error] [pid 60651:tid 60676] [client 213.21.239.4:52394] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/wc.db"] [unique_id "aS0HsWFx-k5xX1VD6QLmTQAAAJY"]
[Mon Dec 01 11:12:49.939585 2025] [:error] [pid 50173:tid 50210] [client 213.21.239.4:52494] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/amphtml/.svn/wc.db"] [unique_id "aS0HsYv3zN9A0dVx6aSK1AAAAQY"]
[Mon Dec 01 11:12:49.944379 2025] [:error] [pid 50236:tid 50239] [client 213.21.239.4:52422] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/demo/.svn/wc.db"] [unique_id "aS0HsdFh6opCMA7G1YQHcQAAAUE"]
[Mon Dec 01 11:12:49.945038 2025] [:error] [pid 50236:tid 50245] [client 213.21.239.4:52460] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/beta/.svn/wc.db"] [unique_id "aS0HsdFh6opCMA7G1YQHcgAAAUc"]
[Mon Dec 01 11:12:52.258768 2025] [:error] [pid 50236:tid 50251] [client 213.21.239.4:45970] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/.svn/wc.db"] [unique_id "aS0HtNFh6opCMA7G1YQHeAAAAU0"]
[Mon Dec 01 11:12:52.259797 2025] [:error] [pid 50143:tid 50169] [client 213.21.239.4:46010] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.svn/%0Awc.db"] [unique_id "aS0HtA4ii19UTfa9gmYdbgAAABg"]
[Mon Dec 01 11:12:52.260714 2025] [:error] [pid 50236:tid 50244] [client 213.21.239.4:46014] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre/.svn/wc.db;"] [unique_id "aS0HtNFh6opCMA7G1YQHeQAAAUY"]
[Mon Dec 01 11:12:52.262253 2025] [:error] [pid 50143:tid 50147] [client 213.21.239.4:46038] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre/;/.svn/wc.db"] [unique_id "aS0HtA4ii19UTfa9gmYdbwAAAAI"]
[Mon Dec 01 11:12:52.264675 2025] [:error] [pid 50143:tid 50161] [client 213.21.239.4:46072] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/events../.svn/wc.db"] [unique_id "aS0HtA4ii19UTfa9gmYdcAAAABA"]
[Mon Dec 01 11:12:52.265621 2025] [:error] [pid 50236:tid 50248] [client 213.21.239.4:45934] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/.svn/wc.db;"] [unique_id "aS0HtNFh6opCMA7G1YQHegAAAUo"]
[Mon Dec 01 11:12:52.266607 2025] [:error] [pid 50143:tid 50149] [client 213.21.239.4:46078] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/flock/.svn/wc.db"] [unique_id "aS0HtA4ii19UTfa9gmYdcQAAAAQ"]
[Mon Dec 01 11:12:52.270094 2025] [:error] [pid 50143:tid 50145] [client 213.21.239.4:46006] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre/.svn/wc.db"] [unique_id "aS0HtA4ii19UTfa9gmYdcwAAAAA"]
[Mon Dec 01 11:12:52.271649 2025] [:error] [pid 50143:tid 50163] [client 213.21.239.4:46096] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/wc.db"] [unique_id "aS0HtA4ii19UTfa9gmYdcgAAABI"]
[Mon Dec 01 11:12:52.271663 2025] [:error] [pid 50236:tid 50243] [client 213.21.239.4:45982] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/.svn;/wc.db"] [unique_id "aS0HtNFh6opCMA7G1YQHewAAAUU"]
[Mon Dec 01 11:12:52.274533 2025] [:error] [pid 7182:tid 7201] [client 213.21.239.4:46136] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre/.svn/wc.db;.."] [unique_id "aS0HtH9TcBzcTIZoEPhTVgAAANA"]
[Mon Dec 01 11:12:52.275162 2025] [:error] [pid 50143:tid 50150] [client 213.21.239.4:46064] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/..;/.svn/wc.db"] [unique_id "aS0HtA4ii19UTfa9gmYddAAAAAU"]
[Mon Dec 01 11:12:52.277210 2025] [:error] [pid 50236:tid 50258] [client 213.21.239.4:46142] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/static../.svn/wc.db"] [unique_id "aS0HtNFh6opCMA7G1YQHfAAAAVQ"]
[Mon Dec 01 11:12:52.277357 2025] [:error] [pid 50236:tid 50261] [client 213.21.239.4:46106] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au../.svn/wc.db"] [unique_id "aS0HtNFh6opCMA7G1YQHfQAAAVc"]
[Mon Dec 01 11:12:52.278203 2025] [:error] [pid 50143:tid 50165] [client 213.21.239.4:45950] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre/wc.db"] [unique_id "aS0HtA4ii19UTfa9gmYddQAAABQ"]
[Mon Dec 01 11:12:52.278287 2025] [:error] [pid 50143:tid 50156] [client 213.21.239.4:45990] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre../.svn/wc.db"] [unique_id "aS0HtA4ii19UTfa9gmYddgAAAAs"]
[Mon Dec 01 11:12:52.280945 2025] [:error] [pid 50143:tid 50167] [client 213.21.239.4:46028] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre/.svn;/wc.db"] [unique_id "aS0HtA4ii19UTfa9gmYddwAAABY"]
[Mon Dec 01 11:12:52.281879 2025] [:error] [pid 50236:tid 50259] [client 213.21.239.4:45952] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre/.svn/%0Awc.db"] [unique_id "aS0HtNFh6opCMA7G1YQHfgAAAVU"]
[Mon Dec 01 11:12:52.283311 2025] [:error] [pid 50143:tid 50160] [client 213.21.239.4:46052] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre/static../.svn/wc.db"] [unique_id "aS0HtA4ii19UTfa9gmYdeAAAAA8"]
[Mon Dec 01 11:12:52.285002 2025] [:error] [pid 50236:tid 50239] [client 213.21.239.4:45954] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/.svn/wc.db;.."] [unique_id "aS0HtNFh6opCMA7G1YQHgAAAAUE"]
[Mon Dec 01 11:12:52.286621 2025] [:error] [pid 50236:tid 50245] [client 213.21.239.4:45992] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/;/.svn/wc.db"] [unique_id "aS0HtNFh6opCMA7G1YQHgQAAAUc"]
[Mon Dec 01 11:12:52.287442 2025] [:error] [pid 50236:tid 50240] [client 213.21.239.4:46092] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au../wc.db"] [unique_id "aS0HtNFh6opCMA7G1YQHfwAAAUI"]
[Mon Dec 01 11:12:52.289954 2025] [:error] [pid 50236:tid 50238] [client 213.21.239.4:46146] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/.svn/%0Awc.db"] [unique_id "aS0HtNFh6opCMA7G1YQHgwAAAUA"]
[Mon Dec 01 11:12:52.292195 2025] [:error] [pid 50236:tid 50252] [client 213.21.239.4:46120] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre/..;/.svn/wc.db"] [unique_id "aS0HtNFh6opCMA7G1YQHhAAAAU4"]
[Mon Dec 01 11:12:52.293278 2025] [:error] [pid 50236:tid 50256] [client 213.21.239.4:46056] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/dot.svn/wc.db"] [unique_id "aS0HtNFh6opCMA7G1YQHggAAAVI"]
[Mon Dec 01 11:12:55.245269 2025] [:error] [pid 7182:tid 7206] [client 213.21.239.4:46598] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/public/.svn/wc.db"] [unique_id "aS0Ht39TcBzcTIZoEPhTXwAAANU"]
[Mon Dec 01 11:12:55.249016 2025] [:error] [pid 50173:tid 50227] [client 213.21.239.4:46590] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/qa/.svn/wc.db"] [unique_id "aS0Ht4v3zN9A0dVx6aSK-gAAARc"]
[Mon Dec 01 11:12:55.249706 2025] [:error] [pid 50173:tid 50208] [client 213.21.239.4:46588] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/..;/.svn/wc.db"] [unique_id "aS0Ht4v3zN9A0dVx6aSK-wAAAQQ"]
[Mon Dec 01 11:12:55.250700 2025] [:error] [pid 50172:tid 50177] [client 213.21.239.4:46632] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/img../.svn/wc.db"] [unique_id "aS0Ht2A_oUkA7PwzMCfbWQAAAEA"]
[Mon Dec 01 11:12:55.251733 2025] [:error] [pid 50143:tid 50155] [client 213.21.239.4:46634] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/js../.svn/wc.db"] [unique_id "aS0Htw4ii19UTfa9gmYdgQAAAAo"]
[Mon Dec 01 11:12:55.252775 2025] [:error] [pid 7182:tid 7192] [client 213.21.239.4:46600] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au../wc.db"] [unique_id "aS0Ht39TcBzcTIZoEPhTYAAAAMc"]
[Mon Dec 01 11:12:55.253118 2025] [:error] [pid 50173:tid 50218] [client 213.21.239.4:46606] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/wc.db"] [unique_id "aS0Ht4v3zN9A0dVx6aSK_AAAAQ4"]
[Mon Dec 01 11:12:55.255738 2025] [:error] [pid 50173:tid 50212] [client 213.21.239.4:46618] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/images../.svn/wc.db"] [unique_id "aS0Ht4v3zN9A0dVx6aSK_QAAAQg"]
[Mon Dec 01 11:12:55.258482 2025] [:error] [pid 50173:tid 50206] [client 213.21.239.4:46664] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/live/.svn/wc.db"] [unique_id "aS0Ht4v3zN9A0dVx6aSK_gAAAQI"]
[Mon Dec 01 11:12:55.260759 2025] [:error] [pid 50143:tid 50152] [client 213.21.239.4:46694] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/message-api/.svn/wc.db"] [unique_id "aS0Htw4ii19UTfa9gmYdggAAAAc"]
[Mon Dec 01 11:12:55.263891 2025] [:error] [pid 7182:tid 7199] [client 213.21.239.4:46684] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/media../.svn/wc.db"] [unique_id "aS0Ht39TcBzcTIZoEPhTYQAAAM4"]
[Mon Dec 01 11:12:55.264033 2025] [:error] [pid 7182:tid 7205] [client 213.21.239.4:46702] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/svn/.svn/wc.db"] [unique_id "aS0Ht39TcBzcTIZoEPhTYgAAANQ"]
[Mon Dec 01 11:12:55.265074 2025] [:error] [pid 7182:tid 7201] [client 213.21.239.4:46650] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/lib../.svn/wc.db"] [unique_id "aS0Ht39TcBzcTIZoEPhTYwAAANA"]
[Mon Dec 01 11:12:55.267427 2025] [:error] [pid 50143:tid 50151] [client 213.21.239.4:46736] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.svn/wc.db"] [unique_id "aS0Htw4ii19UTfa9gmYdgwAAAAY"]
[Mon Dec 01 11:12:55.268468 2025] [:error] [pid 7182:tid 7190] [client 213.21.239.4:46776] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/;/.svn/wc.db"] [unique_id "aS0Ht39TcBzcTIZoEPhTZQAAAMU"]
[Mon Dec 01 11:12:55.270594 2025] [:error] [pid 7182:tid 7193] [client 213.21.239.4:46738] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/.svn;/wc.db"] [unique_id "aS0Ht39TcBzcTIZoEPhTZAAAAMg"]
[Mon Dec 01 11:12:55.270886 2025] [:error] [pid 50172:tid 50181] [client 213.21.239.4:46760] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.svn/wc.db;"] [unique_id "aS0Ht2A_oUkA7PwzMCfbWgAAAEQ"]
[Mon Dec 01 11:12:55.273028 2025] [:error] [pid 50143:tid 50146] [client 213.21.239.4:46672] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/__MACOSX/.svn/wc.db"] [unique_id "aS0Htw4ii19UTfa9gmYdhAAAAAE"]
[Mon Dec 01 11:12:55.273124 2025] [:error] [pid 50143:tid 50168] [client 213.21.239.4:46782] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/new/.svn/wc.db"] [unique_id "aS0Htw4ii19UTfa9gmYdhQAAABc"]
[Mon Dec 01 11:12:55.274760 2025] [:error] [pid 50236:tid 50243] [client 213.21.239.4:46712] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.svn/wc.db;.."] [unique_id "aS0Ht9Fh6opCMA7G1YQHigAAAUU"]
[Mon Dec 01 11:12:55.276353 2025] [:error] [pid 50143:tid 50153] [client 213.21.239.4:46764] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/prod/.svn/wc.db"] [unique_id "aS0Htw4ii19UTfa9gmYdhgAAAAg"]
[Mon Dec 01 11:12:55.276395 2025] [:error] [pid 50236:tid 50261] [client 213.21.239.4:46788] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/old-cuburn/.svn/wc.db"] [unique_id "aS0Ht9Fh6opCMA7G1YQHiwAAAVc"]
[Mon Dec 01 11:12:55.280160 2025] [:error] [pid 50236:tid 50258] [client 213.21.239.4:46756] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/m/.svn/wc.db"] [unique_id "aS0Ht9Fh6opCMA7G1YQHjAAAAVQ"]
[Mon Dec 01 11:12:55.283067 2025] [:error] [pid 50143:tid 50169] [client 213.21.239.4:46752] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/prod.svn/wc.db"] [unique_id "aS0Htw4ii19UTfa9gmYdhwAAABg"]
[Mon Dec 01 11:12:58.251754 2025] [:error] [pid 7182:tid 7196] [client 213.21.239.4:47270] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/.svn/wc.db"] [unique_id "aS0Hun9TcBzcTIZoEPhTbwAAAMs"]
[Mon Dec 01 11:12:58.255795 2025] [:error] [pid 7182:tid 7199] [client 213.21.239.4:47310] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/;/.svn/wc.db"] [unique_id "aS0Hun9TcBzcTIZoEPhTcQAAAM4"]
[Mon Dec 01 11:12:58.255990 2025] [:error] [pid 7182:tid 7203] [client 213.21.239.4:47304] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/wc.db"] [unique_id "aS0Hun9TcBzcTIZoEPhTcAAAANI"]
[Mon Dec 01 11:12:58.257996 2025] [:error] [pid 50236:tid 50245] [client 213.21.239.4:47272] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/..;/.svn/wc.db"] [unique_id "aS0HutFh6opCMA7G1YQHkQAAAUc"]
[Mon Dec 01 11:12:58.261083 2025] [:error] [pid 7182:tid 7190] [client 213.21.239.4:47400] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/static../.svn/wc.db"] [unique_id "aS0Hun9TcBzcTIZoEPhTcwAAAMU"]
[Mon Dec 01 11:12:58.262129 2025] [:error] [pid 7182:tid 7205] [client 213.21.239.4:47288] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/.svn/wc.db;"] [unique_id "aS0Hun9TcBzcTIZoEPhTdAAAANQ"]
[Mon Dec 01 11:12:58.262319 2025] [:error] [pid 7182:tid 7201] [client 213.21.239.4:47336] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.svn/wc.db"] [unique_id "aS0Hun9TcBzcTIZoEPhTdQAAANA"]
[Mon Dec 01 11:12:58.263668 2025] [:error] [pid 7182:tid 7189] [client 213.21.239.4:47368] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/;/.svn/wc.db"] [unique_id "aS0Hun9TcBzcTIZoEPhTdgAAAMQ"]
[Mon Dec 01 11:12:58.266346 2025] [:error] [pid 7182:tid 7194] [client 213.21.239.4:47372] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.svn/wc.db;"] [unique_id "aS0Hun9TcBzcTIZoEPhTdwAAAMk"]
[Mon Dec 01 11:12:58.267247 2025] [:error] [pid 50143:tid 50167] [client 213.21.239.4:47262] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au../.svn/wc.db"] [unique_id "aS0Hug4ii19UTfa9gmYdjAAAABY"]
[Mon Dec 01 11:12:58.267497 2025] [:error] [pid 50172:tid 50187] [client 213.21.239.4:47392] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/repos/.svn/wc.db"] [unique_id "aS0HumA_oUkA7PwzMCfbagAAAEo"]
[Mon Dec 01 11:12:58.270631 2025] [:error] [pid 7182:tid 7206] [client 213.21.239.4:47316] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/..;/.svn/wc.db"] [unique_id "aS0Hun9TcBzcTIZoEPhTeAAAANU"]
[Mon Dec 01 11:12:58.271566 2025] [:error] [pid 50172:tid 50199] [client 213.21.239.4:47352] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/static../.svn/wc.db"] [unique_id "aS0HumA_oUkA7PwzMCfbawAAAFY"]
[Mon Dec 01 11:12:58.271566 2025] [:error] [pid 60651:tid 60673] [client 213.21.239.4:47464] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/.svn;/wc.db"] [unique_id "aS0HumFx-k5xX1VD6QLmegAAAJM"]
[Mon Dec 01 11:12:58.272724 2025] [:error] [pid 50173:tid 50211] [client 213.21.239.4:47384] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/../.svn/wc.db"] [unique_id "aS0Huov3zN9A0dVx6aSLDwAAAQc"]
[Mon Dec 01 11:12:58.273833 2025] [core:error] [pid 50172:tid 50190] [client 213.21.239.4:47432] AH10244: invalid URI path (/../wc.db)
[Mon Dec 01 11:12:58.274651 2025] [:error] [pid 60651:tid 60678] [client 213.21.239.4:47434] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/repository/.svn/wc.db"] [unique_id "aS0HumFx-k5xX1VD6QLmewAAAJg"]
[Mon Dec 01 11:12:58.275976 2025] [:error] [pid 50172:tid 50194] [client 213.21.239.4:47412] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/.svn/%0Awc.db"] [unique_id "aS0HumA_oUkA7PwzMCfbbQAAAFE"]
[Mon Dec 01 11:12:58.279248 2025] [:error] [pid 50172:tid 50184] [client 213.21.239.4:47450] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/.svn/wc.db;.."] [unique_id "aS0HumA_oUkA7PwzMCfbbgAAAEc"]
[Mon Dec 01 11:12:58.281039 2025] [:error] [pid 7182:tid 7193] [client 213.21.239.4:47436] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.svn/%0Awc.db"] [unique_id "aS0Hun9TcBzcTIZoEPhTeQAAAMg"]
[Mon Dec 01 11:12:58.281098 2025] [:error] [pid 60651:tid 60668] [client 213.21.239.4:47472] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/s3/.svn/wc.db"] [unique_id "aS0HumFx-k5xX1VD6QLmfAAAAI4"]
[Mon Dec 01 11:12:58.284065 2025] [:error] [pid 60651:tid 60669] [client 213.21.239.4:47418] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/samples/.svn/wc.db"] [unique_id "aS0HumFx-k5xX1VD6QLmfQAAAI8"]
[Mon Dec 01 11:12:58.285195 2025] [:error] [pid 7182:tid 7209] [client 213.21.239.4:47480] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.svn/wc.db;.."] [unique_id "aS0Hun9TcBzcTIZoEPhTewAAANg"]
[Mon Dec 01 11:12:58.285436 2025] [:error] [pid 7182:tid 7200] [client 213.21.239.4:47324] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/southerncrosscentre.au/.svn;/wc.db"] [unique_id "aS0Hun9TcBzcTIZoEPhTegAAAM8"]
[Mon Dec 01 11:12:58.286008 2025] [:error] [pid 60651:tid 60659] [client 213.21.239.4:47482] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/shop/.svn/wc.db"] [unique_id "aS0HumFx-k5xX1VD6QLmfgAAAIU"]
[Mon Dec 01 11:13:01.249129 2025] [:error] [pid 50143:tid 50155] [client 213.21.239.4:48012] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/static../.svn/wc.db"] [unique_id "aS0HvQ4ii19UTfa9gmYdnwAAAAo"]
[Mon Dec 01 11:13:01.251386 2025] [:error] [pid 60651:tid 60676] [client 213.21.239.4:48038] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/store/.svn/wc.db"] [unique_id "aS0HvWFx-k5xX1VD6QLmjAAAAJY"]
[Mon Dec 01 11:13:01.252236 2025] [:error] [pid 60651:tid 60673] [client 213.21.239.4:48072] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/.svn/wc.db"] [unique_id "aS0HvWFx-k5xX1VD6QLmjQAAAJM"]
[Mon Dec 01 11:13:01.252964 2025] [:error] [pid 60651:tid 60671] [client 213.21.239.4:47984] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/.svn/wc.db"] [unique_id "aS0HvWFx-k5xX1VD6QLmjgAAAJE"]
[Mon Dec 01 11:13:01.253339 2025] [:error] [pid 60651:tid 60678] [client 213.21.239.4:48096] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/.svn/wc.db"] [unique_id "aS0HvWFx-k5xX1VD6QLmjwAAAJg"]
[Mon Dec 01 11:13:01.254431 2025] [:error] [pid 50172:tid 50197] [client 213.21.239.4:48000] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/staging/.svn/wc.db"] [unique_id "aS0HvWA_oUkA7PwzMCfbfQAAAFQ"]
[Mon Dec 01 11:13:01.257241 2025] [:error] [pid 50173:tid 50210] [client 213.21.239.4:48074] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/site/.svn/wc.db"] [unique_id "aS0HvYv3zN9A0dVx6aSLFgAAAQY"]
[Mon Dec 01 11:13:01.257325 2025] [:error] [pid 50173:tid 50208] [client 213.21.239.4:48020] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/static/.svn/wc.db"] [unique_id "aS0HvYv3zN9A0dVx6aSLFwAAAQQ"]
[Mon Dec 01 11:13:01.257998 2025] [:error] [pid 60651:tid 60656] [client 213.21.239.4:48070] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/.svn/wc.db"] [unique_id "aS0HvWFx-k5xX1VD6QLmkAAAAII"]
[Mon Dec 01 11:13:01.260561 2025] [:error] [pid 50173:tid 50228] [client 213.21.239.4:48058] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wiki/.svn/wc.db"] [unique_id "aS0HvYv3zN9A0dVx6aSLGAAAARg"]
[Mon Dec 01 11:13:01.261520 2025] [:error] [pid 60651:tid 60669] [client 213.21.239.4:48086] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/vendor/.svn/wc.db"] [unique_id "aS0HvWFx-k5xX1VD6QLmkQAAAI8"]
[Mon Dec 01 11:13:01.265043 2025] [:error] [pid 60651:tid 60668] [client 213.21.239.4:48054] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/web/.svn/wc.db"] [unique_id "aS0HvWFx-k5xX1VD6QLmkgAAAI4"]
[Mon Dec 01 11:13:01.267386 2025] [:error] [pid 50173:tid 50220] [client 213.21.239.4:48028] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/uat/.svn/wc.db"] [unique_id "aS0HvYv3zN9A0dVx6aSLGQAAARA"]
[Mon Dec 01 18:30:42.749166 2025] [autoindex:error] [pid 48897:tid 48966] [client 134.209.221.235:58401] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Dec 02 15:59:25.164699 2025] [:error] [pid 3649:tid 3727] [client 62.60.131.162:59977] [client 62.60.131.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aS6cXbwjL4uqC6YFjxFXVgAAAJA"]
[Wed Dec 03 00:33:30.560156 2025] [:error] [pid 47067:tid 47096] [client 135.181.4.161:50720] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/robots.txt"] [unique_id "aS8U2gcYJkWYuBnpVaoeMAAAABg"]
[Wed Dec 03 00:33:31.169794 2025] [:error] [pid 25475:tid 25529] [client 135.181.4.161:50728] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/robots.txt"] [unique_id "aS8U2x7VdEeEe8GnPSX8EAAAARE"]
[Wed Dec 03 01:09:28.109165 2025] [:error] [pid 47158:tid 47170] [client 104.196.166.46:43436] [client 104.196.166.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aS8dSF3-jeg4VwJRw7EJZwAAAMo"]
[Wed Dec 03 03:07:19.753680 2025] [:error] [pid 47069:tid 47129] [client 213.21.239.4:52106] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/demo/.svn/wc.db"] [unique_id "aS8453liPX01jdRNUv264AAAAII"]
[Wed Dec 03 03:07:19.757267 2025] [:error] [pid 47069:tid 47127] [client 213.21.239.4:52302] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/application/.svn/wc.db"] [unique_id "aS8453liPX01jdRNUv264gAAAIA"]
[Wed Dec 03 03:07:19.758036 2025] [:error] [pid 47069:tid 47139] [client 213.21.239.4:52236] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre../wc.db"] [unique_id "aS8453liPX01jdRNUv264QAAAIw"]
[Wed Dec 03 03:07:19.759595 2025] [:error] [pid 47069:tid 47141] [client 213.21.239.4:52060] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/common/.svn/wc.db"] [unique_id "aS8453liPX01jdRNUv265AAAAI4"]
[Wed Dec 03 03:07:19.760288 2025] [:error] [pid 47069:tid 47131] [client 213.21.239.4:52084] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/cms/.svn/wc.db"] [unique_id "aS8453liPX01jdRNUv265QAAAIQ"]
[Wed Dec 03 03:07:19.761354 2025] [:error] [pid 47069:tid 47134] [client 213.21.239.4:52262] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/aomanalyzer/.svn/wc.db"] [unique_id "aS8453liPX01jdRNUv265gAAAIc"]
[Wed Dec 03 03:07:19.762305 2025] [:error] [pid 47068:tid 47115] [client 213.21.239.4:52100] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/blog/.svn/wc.db"] [unique_id "aS845yDFatpzeF4tcYW8-gAAAE8"]
[Wed Dec 03 03:07:19.764117 2025] [:error] [pid 47069:tid 47140] [client 213.21.239.4:52166] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/database/.svn/wc.db"] [unique_id "aS8453liPX01jdRNUv265wAAAI0"]
[Wed Dec 03 03:07:19.764567 2025] [:error] [pid 47069:tid 47149] [client 213.21.239.4:52224] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/backup/.svn/wc.db"] [unique_id "aS8453liPX01jdRNUv266AAAAJY"]
[Wed Dec 03 03:07:19.766288 2025] [:error] [pid 47069:tid 47142] [client 213.21.239.4:52112] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/api/.svn/wc.db"] [unique_id "aS8453liPX01jdRNUv266QAAAI8"]
[Wed Dec 03 03:07:19.767342 2025] [:error] [pid 47069:tid 47150] [client 213.21.239.4:52182] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/data/.svn/wc.db"] [unique_id "aS8453liPX01jdRNUv266gAAAJc"]
[Wed Dec 03 03:07:19.767342 2025] [:error] [pid 47158:tid 47168] [client 213.21.239.4:52138] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/css../.svn/wc.db"] [unique_id "aS84513-jeg4VwJRw7FUsgAAAMg"]
[Wed Dec 03 03:07:19.768111 2025] [:error] [pid 47069:tid 47151] [client 213.21.239.4:52098] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/admin/.svn/wc.db"] [unique_id "aS8453liPX01jdRNUv266wAAAJg"]
[Wed Dec 03 03:07:19.768304 2025] [:error] [pid 47069:tid 47137] [client 213.21.239.4:52242] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/beta/.svn/wc.db"] [unique_id "aS8453liPX01jdRNUv267AAAAIo"]
[Wed Dec 03 03:07:19.773198 2025] [:error] [pid 47158:tid 47183] [client 213.21.239.4:52282] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/dev/.svn/wc.db"] [unique_id "aS84513-jeg4VwJRw7FUswAAANc"]
[Wed Dec 03 03:07:19.773202 2025] [:error] [pid 47068:tid 47111] [client 213.21.239.4:52286] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/app/.svn/wc.db"] [unique_id "aS845yDFatpzeF4tcYW8-wAAAEs"]
[Wed Dec 03 03:07:19.773570 2025] [:error] [pid 47067:tid 47092] [client 213.21.239.4:52074] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/blog/wp-content/themes/.svn/wc.db"] [unique_id "aS845wcYJkWYuBnpVap48AAAABQ"]
[Wed Dec 03 03:07:19.774093 2025] [:error] [pid 47158:tid 47170] [client 213.21.239.4:52078] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/content../.svn/wc.db"] [unique_id "aS84513-jeg4VwJRw7FUtAAAAMo"]
[Wed Dec 03 03:07:19.778467 2025] [:error] [pid 47069:tid 47128] [client 213.21.239.4:52124] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/developer/.svn/wc.db"] [unique_id "aS8453liPX01jdRNUv267QAAAIE"]
[Wed Dec 03 03:07:19.781150 2025] [:error] [pid 47068:tid 47114] [client 213.21.239.4:52122] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/wc.db"] [unique_id "aS845yDFatpzeF4tcYW8_AAAAE4"]
[Wed Dec 03 03:07:19.781171 2025] [:error] [pid 47069:tid 47136] [client 213.21.239.4:52184] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/build/.svn/wc.db"] [unique_id "aS8453liPX01jdRNUv267gAAAIk"]
[Wed Dec 03 03:07:19.782328 2025] [:error] [pid 47067:tid 47095] [client 213.21.239.4:52274] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/assets../.svn/wc.db"] [unique_id "aS845wcYJkWYuBnpVap48QAAABc"]
[Wed Dec 03 03:07:19.783015 2025] [:error] [pid 47158:tid 47179] [client 213.21.239.4:52248] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/a/.svn/wc.db"] [unique_id "aS84513-jeg4VwJRw7FUtQAAANM"]
[Wed Dec 03 03:07:19.783149 2025] [:error] [pid 47069:tid 47135] [client 213.21.239.4:52150] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/AWSconf.svn/wc.db"] [unique_id "aS8453liPX01jdRNUv267wAAAIg"]
[Wed Dec 03 03:07:19.784350 2025] [:error] [pid 47067:tid 47087] [client 213.21.239.4:52210] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/amphtml/.svn/wc.db"] [unique_id "aS845wcYJkWYuBnpVap48gAAAA8"]
[Wed Dec 03 03:07:23.408902 2025] [:error] [pid 25475:tid 25520] [client 213.21.239.4:57592] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/www.southerncrosscentre.au/.svn/wc.db;"] [unique_id "aS846x7VdEeEe8GnPSV6vQAAAQg"]
[Wed Dec 03 03:07:23.411870 2025] [:error] [pid 47067:tid 47091] [client 213.21.239.4:57628] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre/wc.db"] [unique_id "aS846wcYJkWYuBnpVap4_gAAABM"]
[Wed Dec 03 03:07:23.412522 2025] [:error] [pid 47067:tid 47096] [client 213.21.239.4:57654] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre/.svn/wc.db"] [unique_id "aS846wcYJkWYuBnpVap4_wAAABg"]
[Wed Dec 03 03:07:23.413652 2025] [:error] [pid 47067:tid 47073] [client 213.21.239.4:57718] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/www.southerncrosscentre.au../.svn/wc.db"] [unique_id "aS846wcYJkWYuBnpVap5AAAAAAE"]
[Wed Dec 03 03:07:23.415711 2025] [:error] [pid 47067:tid 47079] [client 213.21.239.4:57732] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre/.svn;/wc.db"] [unique_id "aS846wcYJkWYuBnpVap5AQAAAAc"]
[Wed Dec 03 03:07:23.416039 2025] [:error] [pid 47069:tid 47144] [client 213.21.239.4:57734] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre/;/.svn/wc.db"] [unique_id "aS8463liPX01jdRNUv27AAAAAJE"]
[Wed Dec 03 03:07:23.418010 2025] [:error] [pid 47067:tid 47081] [client 213.21.239.4:57768] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre../.svn/wc.db"] [unique_id "aS846wcYJkWYuBnpVap5AwAAAAk"]
[Wed Dec 03 03:07:23.418163 2025] [:error] [pid 47067:tid 47089] [client 213.21.239.4:57584] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/www.southerncrosscentre.au/..;/.svn/wc.db"] [unique_id "aS846wcYJkWYuBnpVap5AgAAABE"]
[Wed Dec 03 03:07:23.418957 2025] [:error] [pid 47069:tid 47136] [client 213.21.239.4:57590] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/www.southerncrosscentre.au/.svn/wc.db"] [unique_id "aS8463liPX01jdRNUv27AQAAAIk"]
[Wed Dec 03 03:07:23.420376 2025] [:error] [pid 47069:tid 47146] [client 213.21.239.4:57618] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre/..;/.svn/wc.db"] [unique_id "aS8463liPX01jdRNUv27AgAAAJM"]
[Wed Dec 03 03:07:23.424637 2025] [:error] [pid 47067:tid 47086] [client 213.21.239.4:57764] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/flock/.svn/wc.db"] [unique_id "aS846wcYJkWYuBnpVap5BAAAAA4"]
[Wed Dec 03 03:07:23.425086 2025] [:error] [pid 47069:tid 47137] [client 213.21.239.4:57686] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/www.southerncrosscentre.au../wc.db"] [unique_id "aS8463liPX01jdRNUv27AwAAAIo"]
[Wed Dec 03 03:07:23.427064 2025] [:error] [pid 47069:tid 47130] [client 213.21.239.4:57622] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/www.southerncrosscentre.au/.svn;/wc.db"] [unique_id "aS8463liPX01jdRNUv27BAAAAIM"]
[Wed Dec 03 03:07:23.427205 2025] [:error] [pid 47069:tid 47138] [client 213.21.239.4:57604] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/www.southerncrosscentre.au/.svn/wc.db;.."] [unique_id "aS8463liPX01jdRNUv27BQAAAIs"]
[Wed Dec 03 03:07:23.427971 2025] [:error] [pid 25475:tid 25518] [client 213.21.239.4:57708] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/www.southerncrosscentre.au/.svn/%0Awc.db"] [unique_id "aS846x7VdEeEe8GnPSV6vwAAAQY"]
[Wed Dec 03 03:07:23.428677 2025] [:error] [pid 47067:tid 47075] [client 213.21.239.4:57776] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.svn/%0Awc.db"] [unique_id "aS846wcYJkWYuBnpVap5BQAAAAM"]
[Wed Dec 03 03:07:23.430049 2025] [:error] [pid 47069:tid 47148] [client 213.21.239.4:57742] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/dot.svn/wc.db"] [unique_id "aS8463liPX01jdRNUv27BgAAAJU"]
[Wed Dec 03 03:07:23.430567 2025] [:error] [pid 47069:tid 47129] [client 213.21.239.4:57738] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre/static../.svn/wc.db"] [unique_id "aS8463liPX01jdRNUv27BwAAAII"]
[Wed Dec 03 03:07:23.431054 2025] [:error] [pid 47067:tid 47072] [client 213.21.239.4:57666] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre/.svn/wc.db;"] [unique_id "aS846wcYJkWYuBnpVap5BgAAAAA"]
[Wed Dec 03 03:07:23.435563 2025] [:error] [pid 47067:tid 47084] [client 213.21.239.4:57696] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre/.svn/wc.db;.."] [unique_id "aS846wcYJkWYuBnpVap5BwAAAAw"]
[Wed Dec 03 03:07:23.435824 2025] [:error] [pid 25475:tid 25526] [client 213.21.239.4:57638] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/events../.svn/wc.db"] [unique_id "aS846x7VdEeEe8GnPSV6wAAAAQ4"]
[Wed Dec 03 03:07:23.436066 2025] [:error] [pid 47069:tid 47131] [client 213.21.239.4:57672] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/www.southerncrosscentre.au/static../.svn/wc.db"] [unique_id "aS8463liPX01jdRNUv27CAAAAIQ"]
[Wed Dec 03 03:07:23.438133 2025] [:error] [pid 47067:tid 47080] [client 213.21.239.4:57748] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre/.svn/%0Awc.db"] [unique_id "aS846wcYJkWYuBnpVap5CAAAAAg"]
[Wed Dec 03 03:07:23.439396 2025] [:error] [pid 25475:tid 25530] [client 213.21.239.4:57784] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/www.southerncrosscentre.au/;/.svn/wc.db"] [unique_id "aS846x7VdEeEe8GnPSV6wQAAARI"]
[Wed Dec 03 03:07:23.441030 2025] [:error] [pid 47069:tid 47127] [client 213.21.239.4:57700] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/www.southerncrosscentre.au/wc.db"] [unique_id "aS8463liPX01jdRNUv27CQAAAIA"]
[Wed Dec 03 03:07:26.407222 2025] [:error] [pid 47067:tid 47080] [client 213.21.239.4:58120] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/__MACOSX/.svn/wc.db"] [unique_id "aS847gcYJkWYuBnpVap5GQAAAAg"]
[Wed Dec 03 03:07:26.416285 2025] [:error] [pid 47068:tid 47115] [client 213.21.239.4:58152] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/m/.svn/wc.db"] [unique_id "aS847iDFatpzeF4tcYW9IQAAAE8"]
[Wed Dec 03 03:07:26.418248 2025] [:error] [pid 25475:tid 25535] [client 213.21.239.4:58300] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/qa/.svn/wc.db"] [unique_id "aS847h7VdEeEe8GnPSV6yQAAARc"]
[Wed Dec 03 03:07:26.424987 2025] [:error] [pid 25475:tid 25522] [client 213.21.239.4:58192] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/prod.svn/wc.db"] [unique_id "aS847h7VdEeEe8GnPSV6ygAAAQo"]
[Wed Dec 03 03:07:26.425220 2025] [:error] [pid 25475:tid 25512] [client 213.21.239.4:58260] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.svn/wc.db;"] [unique_id "aS847h7VdEeEe8GnPSV6ywAAAQA"]
[Wed Dec 03 03:07:26.426321 2025] [:error] [pid 47158:tid 47177] [client 213.21.239.4:58108] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/new/.svn/wc.db"] [unique_id "aS847l3-jeg4VwJRw7FU4QAAANE"]
[Wed Dec 03 03:07:26.426643 2025] [:error] [pid 47069:tid 47137] [client 213.21.239.4:58168] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/old-cuburn/.svn/wc.db"] [unique_id "aS847nliPX01jdRNUv27HQAAAIo"]
[Wed Dec 03 03:07:26.430196 2025] [:error] [pid 25475:tid 25529] [client 213.21.239.4:58138] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/media../.svn/wc.db"] [unique_id "aS847h7VdEeEe8GnPSV6zQAAARE"]
[Wed Dec 03 03:07:26.430994 2025] [:error] [pid 25475:tid 25525] [client 213.21.239.4:58236] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/..;/.svn/wc.db"] [unique_id "aS847h7VdEeEe8GnPSV6zgAAAQ0"]
[Wed Dec 03 03:07:26.432388 2025] [:error] [pid 25475:tid 25528] [client 213.21.239.4:58268] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.svn/wc.db;.."] [unique_id "aS847h7VdEeEe8GnPSV6zwAAARA"]
[Wed Dec 03 03:07:26.432539 2025] [:error] [pid 25475:tid 25521] [client 213.21.239.4:58252] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.svn/wc.db"] [unique_id "aS847h7VdEeEe8GnPSV60AAAAQk"]
[Wed Dec 03 03:07:26.436053 2025] [:error] [pid 25475:tid 25515] [client 213.21.239.4:58328] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/images../.svn/wc.db"] [unique_id "aS847h7VdEeEe8GnPSV60gAAAQM"]
[Wed Dec 03 03:07:26.436657 2025] [:error] [pid 25475:tid 25534] [client 213.21.239.4:58274] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/.svn;/wc.db"] [unique_id "aS847h7VdEeEe8GnPSV60QAAARY"]
[Wed Dec 03 03:07:26.437672 2025] [:error] [pid 25475:tid 25524] [client 213.21.239.4:58314] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/public/.svn/wc.db"] [unique_id "aS847h7VdEeEe8GnPSV61AAAAQw"]
[Wed Dec 03 03:07:26.437987 2025] [:error] [pid 25475:tid 25536] [client 213.21.239.4:58354] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/message-api/.svn/wc.db"] [unique_id "aS847h7VdEeEe8GnPSV61QAAARg"]
[Wed Dec 03 03:07:26.441470 2025] [:error] [pid 47158:tid 47171] [client 213.21.239.4:58338] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/lib../.svn/wc.db"] [unique_id "aS847l3-jeg4VwJRw7FU4gAAAMs"]
[Wed Dec 03 03:07:26.441783 2025] [:error] [pid 25475:tid 25523] [client 213.21.239.4:58342] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre.au/wc.db"] [unique_id "aS847h7VdEeEe8GnPSV61gAAAQs"]
[Wed Dec 03 03:07:26.445380 2025] [:error] [pid 47158:tid 47165] [client 213.21.239.4:58388] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/js../.svn/wc.db"] [unique_id "aS847l3-jeg4VwJRw7FU4wAAAMU"]
[Wed Dec 03 03:07:26.446828 2025] [:error] [pid 47068:tid 47120] [client 213.21.239.4:58286] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre.au../wc.db"] [unique_id "aS847iDFatpzeF4tcYW9IgAAAFQ"]
[Wed Dec 03 03:07:26.448035 2025] [:error] [pid 47069:tid 47128] [client 213.21.239.4:58376] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/live/.svn/wc.db"] [unique_id "aS847nliPX01jdRNUv27HgAAAIE"]
[Wed Dec 03 03:07:26.448374 2025] [:error] [pid 47158:tid 47169] [client 213.21.239.4:58392] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/prod/.svn/wc.db"] [unique_id "aS847l3-jeg4VwJRw7FU5AAAAMk"]
[Wed Dec 03 03:07:26.448971 2025] [:error] [pid 47069:tid 47147] [client 213.21.239.4:58304] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/svn/.svn/wc.db"] [unique_id "aS847nliPX01jdRNUv27HwAAAJQ"]
[Wed Dec 03 03:07:26.449312 2025] [:error] [pid 25475:tid 25519] [client 213.21.239.4:58336] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/img../.svn/wc.db"] [unique_id "aS847h7VdEeEe8GnPSV61wAAAQc"]
[Wed Dec 03 03:07:26.452047 2025] [:error] [pid 25475:tid 25520] [client 213.21.239.4:58396] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/;/.svn/wc.db"] [unique_id "aS847h7VdEeEe8GnPSV62AAAAQg"]
[Wed Dec 03 03:07:29.406499 2025] [:error] [pid 47067:tid 47087] [client 213.21.239.4:59036] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre.au../.svn/wc.db"] [unique_id "aS848QcYJkWYuBnpVap5SwAAAA8"]
[Wed Dec 03 03:07:29.407652 2025] [:error] [pid 25475:tid 25530] [client 213.21.239.4:59056] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre.au/..;/.svn/wc.db"] [unique_id "aS848R7VdEeEe8GnPSV66AAAARI"]
[Wed Dec 03 03:07:29.410196 2025] [:error] [pid 47158:tid 47167] [client 213.21.239.4:59060] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/www/static../.svn/wc.db"] [unique_id "aS848V3-jeg4VwJRw7FU9QAAAMc"]
[Wed Dec 03 03:07:29.410563 2025] [:error] [pid 47068:tid 47108] [client 213.21.239.4:59098] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre.au/;/.svn/wc.db"] [unique_id "aS848SDFatpzeF4tcYW9LgAAAEg"]
[Wed Dec 03 03:07:29.417597 2025] [:error] [pid 47069:tid 47128] [client 213.21.239.4:59126] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/repos/.svn/wc.db"] [unique_id "aS848XliPX01jdRNUv27OgAAAIE"]
[Wed Dec 03 03:07:29.419491 2025] [:error] [pid 47158:tid 47160] [client 213.21.239.4:59156] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/www/.svn/%0Awc.db"] [unique_id "aS848V3-jeg4VwJRw7FU9gAAAMA"]
[Wed Dec 03 03:07:29.421930 2025] [:error] [pid 47067:tid 47077] [client 213.21.239.4:59088] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre.au/.svn;/wc.db"] [unique_id "aS848QcYJkWYuBnpVap5TAAAAAU"]
[Wed Dec 03 03:07:29.422143 2025] [:error] [pid 47158:tid 47175] [client 213.21.239.4:59158] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/www../.svn/wc.db"] [unique_id "aS848V3-jeg4VwJRw7FU9wAAAM8"]
[Wed Dec 03 03:07:29.427252 2025] [:error] [pid 25475:tid 25536] [client 213.21.239.4:59076] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre.au/.svn/wc.db;"] [unique_id "aS848R7VdEeEe8GnPSV66wAAARg"]
[Wed Dec 03 03:07:29.429881 2025] [:error] [pid 47068:tid 47116] [client 213.21.239.4:59260] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/www../wc.db"] [unique_id "aS848SDFatpzeF4tcYW9MAAAAFA"]
[Wed Dec 03 03:07:29.430864 2025] [:error] [pid 47158:tid 47161] [client 213.21.239.4:59220] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/www/.svn;/wc.db"] [unique_id "aS848V3-jeg4VwJRw7FU-AAAAME"]
[Wed Dec 03 03:07:29.435031 2025] [:error] [pid 47158:tid 47178] [client 213.21.239.4:59166] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/www/..;/.svn/wc.db"] [unique_id "aS848V3-jeg4VwJRw7FU-wAAANI"]
[Wed Dec 03 03:07:29.435036 2025] [:error] [pid 47158:tid 47182] [client 213.21.239.4:59132] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/repository/.svn/wc.db"] [unique_id "aS848V3-jeg4VwJRw7FU-gAAANY"]
[Wed Dec 03 03:07:29.436508 2025] [:error] [pid 47158:tid 47183] [client 213.21.239.4:59020] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre.au/.svn/%0Awc.db"] [unique_id "aS848V3-jeg4VwJRw7FU_AAAANc"]
[Wed Dec 03 03:07:29.437478 2025] [:error] [pid 47068:tid 47124] [client 213.21.239.4:59112] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre.au/.svn/wc.db"] [unique_id "aS848SDFatpzeF4tcYW9MQAAAFg"]
[Wed Dec 03 03:07:29.437945 2025] [:error] [pid 47158:tid 47176] [client 213.21.239.4:59184] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/www/.svn/wc.db;"] [unique_id "aS848V3-jeg4VwJRw7FU_QAAANA"]
[Wed Dec 03 03:07:29.441124 2025] [:error] [pid 47158:tid 47174] [client 213.21.239.4:59084] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre.au/.svn/wc.db;.."] [unique_id "aS848V3-jeg4VwJRw7FU_gAAAM4"]
[Wed Dec 03 03:07:29.444120 2025] [:error] [pid 47067:tid 47083] [client 213.21.239.4:59174] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/www/.svn/wc.db"] [unique_id "aS848QcYJkWYuBnpVap5TgAAAAs"]
[Wed Dec 03 03:07:29.444924 2025] [:error] [pid 47158:tid 47171] [client 213.21.239.4:59264] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/www/;/.svn/wc.db"] [unique_id "aS848V3-jeg4VwJRw7FVAAAAAMs"]
[Wed Dec 03 03:07:29.447600 2025] [:error] [pid 47067:tid 47091] [client 213.21.239.4:59236] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/samples/.svn/wc.db"] [unique_id "aS848QcYJkWYuBnpVap5TwAAABM"]
[Wed Dec 03 03:07:29.448499 2025] [:error] [pid 47158:tid 47162] [client 213.21.239.4:59266] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/southerncrosscentre.au/static../.svn/wc.db"] [unique_id "aS848V3-jeg4VwJRw7FVAgAAAMI"]
[Wed Dec 03 03:07:29.450888 2025] [:error] [pid 47067:tid 47096] [client 213.21.239.4:59212] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/s3/.svn/wc.db"] [unique_id "aS848QcYJkWYuBnpVap5UAAAABg"]
[Wed Dec 03 03:07:29.454409 2025] [:error] [pid 25475:tid 25526] [client 213.21.239.4:59280] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/shop/.svn/wc.db"] [unique_id "aS848R7VdEeEe8GnPSV67QAAAQ4"]
[Wed Dec 03 03:07:29.455742 2025] [:error] [pid 47067:tid 47095] [client 213.21.239.4:59200] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/www/.svn/wc.db;.."] [unique_id "aS848QcYJkWYuBnpVap5UQAAABc"]
[Wed Dec 03 03:07:29.461242 2025] [:error] [pid 47068:tid 47111] [client 213.21.239.4:59292] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/www/wc.db"] [unique_id "aS848SDFatpzeF4tcYW9MgAAAEs"]
[Wed Dec 03 03:07:32.412487 2025] [:error] [pid 47067:tid 47096] [client 213.21.239.4:35272] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/wiki/.svn/wc.db"] [unique_id "aS849AcYJkWYuBnpVap5aQAAABg"]
[Wed Dec 03 03:07:32.414749 2025] [:error] [pid 25475:tid 25517] [client 213.21.239.4:35276] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/.svn/wc.db"] [unique_id "aS849B7VdEeEe8GnPSV7AgAAAQU"]
[Wed Dec 03 03:07:32.415414 2025] [:error] [pid 47069:tid 47133] [client 213.21.239.4:35278] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/themes/.svn/wc.db"] [unique_id "aS849HliPX01jdRNUv27YQAAAIY"]
[Wed Dec 03 03:07:32.418146 2025] [:error] [pid 25475:tid 25525] [client 213.21.239.4:35234] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/store/.svn/wc.db"] [unique_id "aS849B7VdEeEe8GnPSV7AwAAAQ0"]
[Wed Dec 03 03:07:32.420082 2025] [:error] [pid 47158:tid 47175] [client 213.21.239.4:35218] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/staging/.svn/wc.db"] [unique_id "aS849F3-jeg4VwJRw7FVFgAAAM8"]
[Wed Dec 03 03:07:32.421798 2025] [:error] [pid 47067:tid 47074] [client 213.21.239.4:35298] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/static../.svn/wc.db"] [unique_id "aS849AcYJkWYuBnpVap5agAAAAI"]
[Wed Dec 03 03:07:32.422231 2025] [:error] [pid 47067:tid 47088] [client 213.21.239.4:35244] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/vendor/.svn/wc.db"] [unique_id "aS849AcYJkWYuBnpVap5awAAABA"]
[Wed Dec 03 03:07:32.422333 2025] [:error] [pid 47067:tid 47075] [client 213.21.239.4:35266] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/web/.svn/wc.db"] [unique_id "aS849AcYJkWYuBnpVap5bAAAAAM"]
[Wed Dec 03 03:07:32.422901 2025] [:error] [pid 47067:tid 47081] [client 213.21.239.4:35300] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/.svn/wc.db"] [unique_id "aS849AcYJkWYuBnpVap5bQAAAAk"]
[Wed Dec 03 03:07:32.429059 2025] [:error] [pid 47067:tid 47084] [client 213.21.239.4:35228] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/static/.svn/wc.db"] [unique_id "aS849AcYJkWYuBnpVap5bgAAAAw"]
[Wed Dec 03 03:07:32.431389 2025] [:error] [pid 25475:tid 25532] [client 213.21.239.4:35254] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/uat/.svn/wc.db"] [unique_id "aS849B7VdEeEe8GnPSV7BAAAARQ"]
[Wed Dec 03 03:07:32.431991 2025] [:error] [pid 47067:tid 47078] [client 213.21.239.4:35292] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/js/.svn/wc.db"] [unique_id "aS849AcYJkWYuBnpVap5bwAAAAY"]
[Wed Dec 03 03:07:32.433406 2025] [:error] [pid 47067:tid 47079] [client 213.21.239.4:35308] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/site/.svn/wc.db"] [unique_id "aS849AcYJkWYuBnpVap5cAAAAAc"]
[Fri Dec 05 16:47:23.821862 2025] [:error] [pid 53839:tid 53917] [client 192.81.217.135:59590] [client 192.81.217.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.81.217.135, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aTKcG6QOuERg_RN7bn-RpAAAAJU"]
[Fri Dec 05 16:47:25.140593 2025] [:error] [pid 62720:tid 62746] [client 192.81.217.135:61119] [client 192.81.217.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.81.217.135, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aTKcHWDTJuF6xQ5UsIP25gAAAZg"]
[Fri Dec 05 18:47:39.831032 2025] [:error] [pid 18520:tid 18536] [client 192.81.217.135:52142] [client 192.81.217.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.81.217.135, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aTK4S4OC8XSo46ZrIeO5KQAAAIw"]
[Fri Dec 05 18:49:36.593191 2025] [:error] [pid 18579:tid 18604] [client 176.65.132.18:46148] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aTK4wMAUSulJty2JiBpw4gAAABM"]
[Fri Dec 05 18:54:16.437755 2025] [:error] [pid 18520:tid 18534] [client 192.81.217.135:63277] [client 192.81.217.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.81.217.135, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aTK52IOC8XSo46ZrIeO79wAAAIo"]
[Fri Dec 05 19:01:05.774736 2025] [:error] [pid 18579:tid 18594] [client 192.81.217.135:58105] [client 192.81.217.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.81.217.135, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aTK7ccAUSulJty2JiBp3dwAAAAk"]
[Fri Dec 05 19:09:14.471490 2025] [:error] [pid 18579:tid 18594] [client 192.81.217.135:53068] [client 192.81.217.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.81.217.135, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aTK9WsAUSulJty2JiBp77QAAAAk"]
[Fri Dec 05 19:19:44.097048 2025] [:error] [pid 18579:tid 18591] [client 192.81.217.135:61238] [client 192.81.217.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.81.217.135, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aTK_0MAUSulJty2JiBqCSwAAAAY"]
[Fri Dec 05 22:20:17.312828 2025] [:error] [pid 18579:tid 18594] [client 13.203.158.221:57714] [client 13.203.158.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aTLqIcAUSulJty2JiBq9BQAAAAk"]
[Sat Dec 06 10:59:11.946736 2025] [:error] [pid 1838:tid 1867] [client 3.108.238.98:43332] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aTOb_y5zgnu67Yo7vraBCQAAApU"]
[Sat Dec 06 10:59:13.298208 2025] [:error] [pid 1838:tid 1857] [client 3.108.238.98:43338] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/error.log"] [unique_id "aTOcAS5zgnu67Yo7vraBCwAAAos"]
[Sat Dec 06 10:59:15.206159 2025] [:error] [pid 1838:tid 1859] [client 3.108.238.98:35918] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/storage/logs/laravel.log"] [unique_id "aTOcAy5zgnu67Yo7vraBEQAAAo0"]
[Sat Dec 06 10:59:15.494558 2025] [:error] [pid 1838:tid 1854] [client 3.108.238.98:35918] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/database.sql"] [unique_id "aTOcAy5zgnu67Yo7vraBEwAAAog"]
[Sat Dec 06 10:59:15.779525 2025] [:error] [pid 1838:tid 1851] [client 3.108.238.98:35918] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/backup.sql"] [unique_id "aTOcAy5zgnu67Yo7vraBFAAAAoU"]
[Sat Dec 06 10:59:16.178845 2025] [:error] [pid 1838:tid 1863] [client 3.108.238.98:35918] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/debug.log"] [unique_id "aTOcBC5zgnu67Yo7vraBFgAAApE"]
[Sat Dec 06 10:59:18.044534 2025] [:error] [pid 61303:tid 61308] [client 3.108.238.98:35926] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/dump.sql"] [unique_id "aTOcBtwK_fe00OH7zy43jwAAAMI"]
[Sat Dec 06 10:59:18.323647 2025] [:error] [pid 61303:tid 61317] [client 3.108.238.98:35926] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.production"] [unique_id "aTOcBtwK_fe00OH7zy43kAAAAMs"]
[Sat Dec 06 10:59:22.977156 2025] [:error] [pid 52809:tid 52823] [client 3.108.238.98:35974] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.local"] [unique_id "aTOcCurRwgsmpIJQ2qYojAAAAgw"]
[Sat Dec 06 10:59:25.900270 2025] [:error] [pid 61215:tid 61219] [client 3.108.238.98:58228] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.save"] [unique_id "aTOcDeOOZ8nTCBYuI-wE3gAAAAA"]
[Sat Dec 06 10:59:27.084274 2025] [:error] [pid 1838:tid 1859] [client 3.108.238.98:58238] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/db_backup.sql"] [unique_id "aTOcDy5zgnu67Yo7vraBNQAAAo0"]
[Sat Dec 06 10:59:32.623034 2025] [:error] [pid 1838:tid 1862] [client 3.108.238.98:58264] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.old"] [unique_id "aTOcFC5zgnu67Yo7vraBPQAAApA"]
[Sat Dec 06 10:59:34.032447 2025] [:error] [pid 48399:tid 48405] [client 3.108.238.98:58274] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.sample"] [unique_id "aTOcFujNPOrIshd8Ewd3KwAAAcQ"]
[Sat Dec 06 11:00:46.147240 2025] [:error] [pid 52809:tid 52820] [client 3.108.238.98:35184] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.dev.local"] [unique_id "aTOcXurRwgsmpIJQ2qYotQAAAgk"]
[Sat Dec 06 11:00:47.306893 2025] [:error] [pid 52809:tid 52835] [client 3.108.238.98:35192] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.prod.local"] [unique_id "aTOcX-rRwgsmpIJQ2qYotgAAAhg"]
[Sat Dec 06 11:00:48.549675 2025] [:error] [pid 1727:tid 1738] [client 3.108.238.98:35202] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.1"] [unique_id "aTOcYMD83luYT37-ZaW_iQAAAkk"]
[Sat Dec 06 11:00:49.883379 2025] [:error] [pid 61215:tid 61232] [client 3.108.238.98:35206] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.backup"] [unique_id "aTOcYeOOZ8nTCBYuI-wE-QAAAA0"]
[Sat Dec 06 11:00:51.228243 2025] [:error] [pid 1838:tid 1866] [client 3.108.238.98:35208] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.test"] [unique_id "aTOcYy5zgnu67Yo7vraBcgAAApQ"]
[Sat Dec 06 11:00:55.797678 2025] [:error] [pid 61216:tid 61258] [client 3.108.238.98:46758] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/php_error.log"] [unique_id "aTOcZzHlXXVdP5ewviW19AAAAEw"]
[Sat Dec 06 11:00:56.059042 2025] [:error] [pid 61216:tid 61267] [client 3.108.238.98:46758] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/app/etc/local.xml"] [unique_id "aTOcaDHlXXVdP5ewviW19QAAAFU"]
[Sat Dec 06 11:00:59.390025 2025] [:error] [pid 61216:tid 61255] [client 3.108.238.98:46768] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sites/default/settings.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/sites/default/settings.php"] [unique_id "aTOcazHlXXVdP5ewviW19wAAAEk"]
[Sat Dec 06 11:01:09.367004 2025] [:error] [pid 35591:tid 35596] [client 3.108.238.98:36106] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "aTOcdYbmw-7bFvTxc9PNMAAAAQM"]
[Sat Dec 06 11:01:13.252920 2025] [:error] [pid 52809:tid 52821] [client 3.108.238.98:36122] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/errors.log"] [unique_id "aTOceerRwgsmpIJQ2qYoxgAAAgo"]
[Sat Dec 06 11:01:14.989502 2025] [:error] [pid 61217:tid 61274] [client 3.108.238.98:53204] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/logs/application.log"] [unique_id "aTOceldSKQYfLI3fYo5CaAAAAIE"]
[Sat Dec 06 11:01:15.229822 2025] [:error] [pid 61217:tid 61294] [client 3.108.238.98:53204] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/app/logs/dev.log"] [unique_id "aTOce1dSKQYfLI3fYo5CaQAAAJU"]
[Sat Dec 06 11:01:15.472069 2025] [:error] [pid 61217:tid 61293] [client 3.108.238.98:53204] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/app/logs/prod.log"] [unique_id "aTOce1dSKQYfLI3fYo5CagAAAJQ"]
[Sat Dec 06 11:01:15.712564 2025] [:error] [pid 61217:tid 61297] [client 3.108.238.98:53204] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/Thumbs.db"] [unique_id "aTOce1dSKQYfLI3fYo5CawAAAJg"]
[Sat Dec 06 11:02:05.623338 2025] [:error] [pid 61303:tid 61322] [client 3.108.238.98:47924] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.2"] [unique_id "aTOcrdwK_fe00OH7zy44IgAAAM8"]
[Sat Dec 06 11:02:07.081639 2025] [:error] [pid 1727:tid 1739] [client 3.108.238.98:47934] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.staging"] [unique_id "aTOcr8D83luYT37-ZaW_qgAAAko"]
[Sat Dec 06 11:02:08.877398 2025] [:error] [pid 35591:tid 35612] [client 3.108.238.98:47946] [client 3.108.238.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.remote"] [unique_id "aTOcsIbmw-7bFvTxc9PNSwAAARM"]
[Sat Dec 06 19:18:22.312486 2025] [:error] [pid 35622:tid 35653] [client 45.86.202.196:26505] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.example"] [unique_id "aTQQ_iOSP_9DVLgFwI64-wAAAYI"]
[Sat Dec 06 19:18:22.917138 2025] [:error] [pid 52809:tid 52820] [client 45.86.202.194:27255] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.local"] [unique_id "aTQQ_urRwgsmpIJQ2qZyyQAAAgk"]
[Sat Dec 06 19:18:33.518672 2025] [:error] [pid 61216:tid 61257] [client 45.86.202.185:56039] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/config/.env"] [unique_id "aTQRCTHlXXVdP5ewviUVXwAAAEs"]
[Sun Dec 07 05:51:14.350263 2025] [:error] [pid 7273:tid 7296] [client 136.144.43.228:22317] [client 136.144.43.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.228, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aTSlUvpR7YTD7JcHjhG7UgAAAVU"]
[Sun Dec 07 05:51:14.350385 2025] [:error] [pid 7273:tid 7296] [client 136.144.43.228:22317] [client 136.144.43.228] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 136.144.43.228 on wp-login.php, counter = 12"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aTSlUvpR7YTD7JcHjhG7UgAAAVU"]
[Sun Dec 07 09:28:33.944678 2025] [:error] [pid 25600:tid 25620] [client 5.252.55.178:60050] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aTTYQYX3SVrXRURpt5L3FQAAAE0"]
[Sun Dec 07 09:28:35.220617 2025] [:error] [pid 25694:tid 25712] [client 5.252.55.178:59516] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aTTYQ0f7996cewJ5N2-3AQAAARA"]
[Sun Dec 07 09:28:36.459106 2025] [:error] [pid 25602:tid 25664] [client 5.252.55.178:59457] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aTTYRBMayYLriq9gRdeH9gAAAMI"]
[Sun Dec 07 09:28:37.556199 2025] [:error] [pid 25602:tid 25662] [client 5.252.55.178:58496] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aTTYRRMayYLriq9gRdeIFAAAAMA"]
[Sun Dec 07 09:28:38.826635 2025] [:error] [pid 25601:tid 25641] [client 5.252.55.178:50690] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aTTYRqtsSIqGPs4YVxHxlwAAAIY"]
[Sun Dec 07 13:59:34.500348 2025] [:error] [pid 25602:tid 25664] [client 85.209.135.111:55012] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aTUXxhMayYLriq9gRdfINgAAAMI"]
[Sun Dec 07 14:13:06.181018 2025] [:error] [pid 25601:tid 25638] [client 85.209.135.111:45712] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aTUa8qtsSIqGPs4YVxEsNwAAAIM"]
[Sun Dec 07 23:11:07.767024 2025] [:error] [pid 5224:tid 5281] [client 136.144.35.239:39281] [client 136.144.35.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.example"] [unique_id "aTWZC_AAkbWt7RJBoF8AnwAAAMA"]
[Sun Dec 07 23:11:18.427180 2025] [:error] [pid 5224:tid 5297] [client 136.144.35.238:26115] [client 136.144.35.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.backup"] [unique_id "aTWZFvAAkbWt7RJBoF8AtAAAANA"]
[Sun Dec 07 23:11:19.096887 2025] [:error] [pid 5223:tid 5264] [client 136.144.35.222:49639] [client 136.144.35.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/config/.env"] [unique_id "aTWZF_oRJa-T0FB0DNoCBQAAAIo"]
[Mon Dec 08 07:55:44.956047 2025] [:error] [pid 39261:tid 39276] [client 3.101.129.15:34660] [client 3.101.129.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aTYUAHijlEqKrwMitDGr2wAAAMs"]
[Mon Dec 08 11:46:39.829143 2025] [:error] [pid 39161:tid 39241] [client 45.88.186.148:52732] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aTZKH-QBy-JdpUuZzWf4GwAAAJU"]
[Mon Dec 08 11:46:40.239814 2025] [:error] [pid 39159:tid 39168] [client 45.88.186.148:52897] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aTZKIE48HaQt8jqjSbqC1QAAAAM"]
[Mon Dec 08 11:46:40.648687 2025] [:error] [pid 53927:tid 53953] [client 45.88.186.148:53054] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aTZKILTtIvPZ1Cm2r06biwAAARg"]
[Mon Dec 08 11:46:41.053386 2025] [:error] [pid 43362:tid 43402] [client 45.88.186.148:53224] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aTZKIToamfxHn2vcwqy4eAAAAcs"]
[Mon Dec 08 11:46:41.458216 2025] [:error] [pid 43362:tid 43401] [client 45.88.186.148:53359] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aTZKIToamfxHn2vcwqy4hQAAAco"]
[Mon Dec 08 19:03:13.044060 2025] [autoindex:error] [pid 37840:tid 37847] [client 209.97.156.74:52978] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Dec 09 05:21:41.491758 2025] [:error] [pid 26689:tid 26745] [client 45.86.202.163:58011] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aTdBZdkbfj8nyBvIyRAnZwAAAQo"]
[Tue Dec 09 05:21:42.092481 2025] [:error] [pid 26689:tid 26740] [client 45.86.202.198:34387] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.example"] [unique_id "aTdBZtkbfj8nyBvIyRAnaAAAAQU"]
[Tue Dec 09 05:21:42.699367 2025] [:error] [pid 34783:tid 34793] [client 45.86.202.189:64913] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.local"] [unique_id "aTdBZq17odLapL7SFcwnSwAAAUg"]
[Tue Dec 09 18:09:49.791642 2025] [:error] [pid 30499:tid 30540] [client 172.192.58.229:24920] [client 172.192.58.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aTf1bU0x3OqZTOPp7cnDFQAAAUo"]
[Tue Dec 09 18:09:50.642405 2025] [:error] [pid 36456:tid 36458] [client 172.192.58.229:20672] [client 172.192.58.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aTf1bh0pAnOyfXl_v435BgAAAIA"]
[Tue Dec 09 19:53:50.321022 2025] [:error] [pid 5276:tid 5278] [client 35.192.77.233:55515] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aTgNzktSXwbewdwyu-1jFQAAAMA"]
[Tue Dec 09 19:53:50.768225 2025] [:error] [pid 30500:tid 30567] [client 35.192.77.233:60202] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aTgNzq2eIIK3JPWHCXXMaQAAAYo"]
[Tue Dec 09 19:53:51.229987 2025] [:error] [pid 30591:tid 30594] [client 35.192.77.233:60922] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aTgNzxG-g76drVdWQUVtagAAAEA"]
[Tue Dec 09 21:52:22.757926 2025] [:error] [pid 30498:tid 30524] [client 4.197.92.48:44278] [client 4.197.92.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "aTgplh2mcZJQ5qP_RC1OjgAAABY"]
[Tue Dec 09 21:52:33.399501 2025] [:error] [pid 36456:tid 36463] [client 4.197.92.48:62742] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ahax.php"] [unique_id "aTgpoR0pAnOyfXl_v41PkAAAAIU"]
[Tue Dec 09 21:52:34.167077 2025] [:error] [pid 30500:tid 30579] [client 4.197.92.48:54852] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ahax.php"] [unique_id "aTgpoq2eIIK3JPWHCXUJEwAAAZY"]
[Tue Dec 09 21:52:34.312215 2025] [:error] [pid 30500:tid 30558] [client 4.197.92.48:54850] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ahax.php"] [unique_id "aTgpoq2eIIK3JPWHCXUJFgAAAYE"]
[Tue Dec 09 21:52:34.624833 2025] [:error] [pid 30498:tid 30517] [client 4.197.92.48:8326] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ahax.php"] [unique_id "aTgpoh2mcZJQ5qP_RC1OpAAAAA8"]
[Tue Dec 09 21:52:34.762196 2025] [:error] [pid 30500:tid 30578] [client 4.197.92.48:54877] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bless.php"] [unique_id "aTgpoq2eIIK3JPWHCXUJGwAAAZU"]
[Tue Dec 09 21:52:34.960759 2025] [:error] [pid 30500:tid 30577] [client 4.197.92.48:58712] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bless.php"] [unique_id "aTgpoq2eIIK3JPWHCXUJHwAAAZQ"]
[Tue Dec 09 21:52:35.238848 2025] [:error] [pid 36456:tid 36472] [client 4.197.92.48:52003] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bless.php"] [unique_id "aTgpox0pAnOyfXl_v41PnQAAAI4"]
[Tue Dec 09 21:52:35.818704 2025] [:error] [pid 30498:tid 30508] [client 4.197.92.48:60252] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bless.php"] [unique_id "aTgpox2mcZJQ5qP_RC1OsAAAAAY"]
[Tue Dec 09 21:52:36.593425 2025] [:error] [pid 30500:tid 30579] [client 4.197.92.48:51991] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "aTgppK2eIIK3JPWHCXUJJwAAAZY"]
[Tue Dec 09 21:52:36.915654 2025] [:error] [pid 36456:tid 36458] [client 4.197.92.48:9107] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "aTgppB0pAnOyfXl_v41PtQAAAIA"]
[Tue Dec 09 21:52:37.730744 2025] [:error] [pid 30500:tid 30577] [client 4.197.92.48:55777] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "aTgppa2eIIK3JPWHCXUJNAAAAZQ"]
[Tue Dec 09 21:52:38.498774 2025] [:error] [pid 5276:tid 5300] [client 4.197.92.48:54881] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "aTgppktSXwbewdwyu-2I_gAAANY"]
[Tue Dec 09 21:52:39.094122 2025] [:error] [pid 36456:tid 36467] [client 4.197.92.48:9140] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/contact.php"] [unique_id "aTgppx0pAnOyfXl_v41PwgAAAIk"]
[Tue Dec 09 21:52:39.567540 2025] [:error] [pid 30591:tid 30614] [client 4.197.92.48:8379] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/contact.php"] [unique_id "aTgppxG-g76drVdWQUWXMwAAAFQ"]
[Tue Dec 09 21:52:39.729058 2025] [:error] [pid 30500:tid 30579] [client 4.197.92.48:54884] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/contact.php"] [unique_id "aTgpp62eIIK3JPWHCXUJOwAAAZY"]
[Tue Dec 09 21:52:39.842056 2025] [:error] [pid 36456:tid 36480] [client 4.197.92.48:49851] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/contact.php"] [unique_id "aTgppx0pAnOyfXl_v41PyAAAAJY"]
[Tue Dec 09 21:52:39.897712 2025] [:error] [pid 30591:tid 30597] [client 4.197.92.48:51992] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/item.php"] [unique_id "aTgppxG-g76drVdWQUWXNAAAAEM"]
[Tue Dec 09 21:52:40.140359 2025] [:error] [pid 30500:tid 30564] [client 4.197.92.48:51975] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/item.php"] [unique_id "aTgpqK2eIIK3JPWHCXUJPAAAAYc"]
[Tue Dec 09 21:52:40.679008 2025] [:error] [pid 30500:tid 30562] [client 4.197.92.48:51981] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/item.php"] [unique_id "aTgpqK2eIIK3JPWHCXUJPQAAAYU"]
[Tue Dec 09 21:52:41.246939 2025] [:error] [pid 5276:tid 5287] [client 4.197.92.48:49835] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/item.php"] [unique_id "aTgpqUtSXwbewdwyu-2JAAAAAMk"]
[Tue Dec 09 21:52:41.588673 2025] [:error] [pid 36456:tid 36482] [client 4.197.92.48:55307] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lufix.php"] [unique_id "aTgpqR0pAnOyfXl_v41PzAAAAJg"]
[Tue Dec 09 21:52:41.932892 2025] [:error] [pid 36456:tid 36470] [client 4.197.92.48:58689] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lufix.php"] [unique_id "aTgpqR0pAnOyfXl_v41PzQAAAIw"]
[Tue Dec 09 21:52:42.218825 2025] [:error] [pid 36456:tid 36477] [client 4.197.92.48:58698] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lufix.php"] [unique_id "aTgpqh0pAnOyfXl_v41PzwAAAJM"]
[Tue Dec 09 21:52:42.462891 2025] [:error] [pid 36456:tid 36469] [client 4.197.92.48:9137] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lufix.php"] [unique_id "aTgpqh0pAnOyfXl_v41P0QAAAIs"]
[Tue Dec 09 21:52:42.679852 2025] [:error] [pid 36456:tid 36464] [client 4.197.92.48:62521] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/buy.php"] [unique_id "aTgpqh0pAnOyfXl_v41P0gAAAIY"]
[Tue Dec 09 21:52:42.894362 2025] [:error] [pid 36456:tid 36471] [client 4.197.92.48:58733] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/buy.php"] [unique_id "aTgpqh0pAnOyfXl_v41P1AAAAI0"]
[Tue Dec 09 21:52:43.278808 2025] [:error] [pid 36456:tid 36468] [client 4.197.92.48:49801] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/buy.php"] [unique_id "aTgpqx0pAnOyfXl_v41P2AAAAIo"]
[Tue Dec 09 21:52:43.527347 2025] [:error] [pid 30499:tid 30541] [client 4.197.92.48:58728] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/buy.php"] [unique_id "aTgpq00x3OqZTOPp7ckT0AAAAUs"]
[Tue Dec 09 21:52:43.845937 2025] [:error] [pid 30499:tid 30532] [client 4.197.92.48:55304] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cloud.php"] [unique_id "aTgpq00x3OqZTOPp7ckT0QAAAUI"]
[Tue Dec 09 21:52:44.111203 2025] [:error] [pid 36456:tid 36458] [client 4.197.92.48:49846] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cloud.php"] [unique_id "aTgprB0pAnOyfXl_v41P2wAAAIA"]
[Tue Dec 09 21:52:44.239692 2025] [:error] [pid 30591:tid 30613] [client 4.197.92.48:8362] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cloud.php"] [unique_id "aTgprBG-g76drVdWQUWXNwAAAFM"]
[Tue Dec 09 21:52:44.553200 2025] [:error] [pid 30500:tid 30558] [client 4.197.92.48:8346] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cloud.php"] [unique_id "aTgprK2eIIK3JPWHCXUJPgAAAYE"]
[Tue Dec 09 21:52:44.830999 2025] [:error] [pid 36456:tid 36479] [client 4.197.92.48:62472] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shell20211028.php"] [unique_id "aTgprB0pAnOyfXl_v41P3gAAAJU"]
[Tue Dec 09 21:52:45.124807 2025] [:error] [pid 36456:tid 36470] [client 4.197.92.48:55303] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shell20211028.php"] [unique_id "aTgprR0pAnOyfXl_v41P4AAAAIw"]
[Tue Dec 09 21:52:45.524634 2025] [:error] [pid 30500:tid 30561] [client 4.197.92.48:58748] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shell20211028.php"] [unique_id "aTgpra2eIIK3JPWHCXUJQAAAAYQ"]
[Tue Dec 09 21:52:46.157162 2025] [:error] [pid 30499:tid 30547] [client 4.197.92.48:60280] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shell20211028.php"] [unique_id "aTgprk0x3OqZTOPp7ckT0gAAAVE"]
[Tue Dec 09 21:52:46.483265 2025] [:error] [pid 30500:tid 30565] [client 4.197.92.48:9208] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lock.php"] [unique_id "aTgprq2eIIK3JPWHCXUJQgAAAYg"]
[Tue Dec 09 21:52:46.816636 2025] [:error] [pid 30500:tid 30570] [client 4.197.92.48:60249] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lock.php"] [unique_id "aTgprq2eIIK3JPWHCXUJQwAAAY0"]
[Tue Dec 09 21:52:46.992255 2025] [:error] [pid 5276:tid 5293] [client 4.197.92.48:8320] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lock.php"] [unique_id "aTgprktSXwbewdwyu-2JDAAAAM8"]
[Tue Dec 09 21:52:47.259910 2025] [:error] [pid 30500:tid 30560] [client 4.197.92.48:55298] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lock.php"] [unique_id "aTgpr62eIIK3JPWHCXUJRAAAAYM"]
[Tue Dec 09 21:52:47.676041 2025] [:error] [pid 30500:tid 30563] [client 4.197.92.48:9126] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/manager.php"] [unique_id "aTgpr62eIIK3JPWHCXUJRgAAAYY"]
[Tue Dec 09 21:52:48.231919 2025] [:error] [pid 30499:tid 30531] [client 4.197.92.48:9171] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/manager.php"] [unique_id "aTgpsE0x3OqZTOPp7ckT1QAAAUE"]
[Tue Dec 09 21:52:48.468146 2025] [:error] [pid 30500:tid 30579] [client 4.197.92.48:58735] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/manager.php"] [unique_id "aTgpsK2eIIK3JPWHCXUJSgAAAZY"]
[Tue Dec 09 21:52:48.536652 2025] [:error] [pid 30498:tid 30526] [client 4.197.92.48:49836] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/manager.php"] [unique_id "aTgpsB2mcZJQ5qP_RC1O1AAAABg"]
[Tue Dec 09 21:52:48.633000 2025] [:error] [pid 5276:tid 5284] [client 4.197.92.48:62471] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ws.php"] [unique_id "aTgpsEtSXwbewdwyu-2JFQAAAMY"]
[Tue Dec 09 21:52:49.118772 2025] [:error] [pid 30498:tid 30521] [client 4.197.92.48:9147] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ws.php"] [unique_id "aTgpsR2mcZJQ5qP_RC1O1wAAABM"]
[Tue Dec 09 21:52:49.604670 2025] [:error] [pid 30499:tid 30535] [client 4.197.92.48:9099] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ws.php"] [unique_id "aTgpsU0x3OqZTOPp7ckT1gAAAUU"]
[Tue Dec 09 21:52:50.397838 2025] [:error] [pid 30498:tid 30503] [client 4.197.92.48:9091] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ws.php"] [unique_id "aTgpsh2mcZJQ5qP_RC1O2QAAAAE"]
[Tue Dec 09 21:52:50.708981 2025] [:error] [pid 30500:tid 30562] [client 4.197.92.48:60246] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gmo.php"] [unique_id "aTgpsq2eIIK3JPWHCXUJTAAAAYU"]
[Tue Dec 09 21:52:51.325587 2025] [:error] [pid 30500:tid 30571] [client 4.197.92.48:62505] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gmo.php"] [unique_id "aTgps62eIIK3JPWHCXUJTQAAAY4"]
[Tue Dec 09 21:52:51.800091 2025] [:error] [pid 30500:tid 30576] [client 4.197.92.48:49814] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gmo.php"] [unique_id "aTgps62eIIK3JPWHCXUJTwAAAZM"]
[Tue Dec 09 21:52:52.320241 2025] [:error] [pid 5276:tid 5301] [client 4.197.92.48:58688] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gmo.php"] [unique_id "aTgptEtSXwbewdwyu-2JIAAAANc"]
[Tue Dec 09 21:52:52.779053 2025] [:error] [pid 5276:tid 5279] [client 4.197.92.48:9166] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gel4y.php"] [unique_id "aTgptEtSXwbewdwyu-2JIgAAAME"]
[Tue Dec 09 21:52:53.231783 2025] [:error] [pid 30498:tid 30514] [client 4.197.92.48:62765] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gel4y.php"] [unique_id "aTgptR2mcZJQ5qP_RC1O3AAAAAw"]
[Tue Dec 09 21:52:53.414450 2025] [:error] [pid 30500:tid 30565] [client 4.197.92.48:9129] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gel4y.php"] [unique_id "aTgpta2eIIK3JPWHCXUJUQAAAYg"]
[Tue Dec 09 21:52:53.530504 2025] [:error] [pid 30499:tid 30530] [client 4.197.92.48:50381] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gel4y.php"] [unique_id "aTgptU0x3OqZTOPp7ckT2wAAAUA"]
[Tue Dec 09 21:52:53.650951 2025] [:error] [pid 30499:tid 30552] [client 4.197.92.48:9128] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aTgptU0x3OqZTOPp7ckT3AAAAVY"]
[Tue Dec 09 21:52:54.234058 2025] [:error] [pid 30499:tid 30538] [client 4.197.92.48:60268] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aTgptk0x3OqZTOPp7ckT3QAAAUg"]
[Tue Dec 09 21:52:54.931326 2025] [:error] [pid 30498:tid 30510] [client 4.197.92.48:58718] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aTgpth2mcZJQ5qP_RC1O4gAAAAg"]
[Tue Dec 09 21:52:55.764144 2025] [:error] [pid 5276:tid 5302] [client 4.197.92.48:44250] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aTgpt0tSXwbewdwyu-2JKwAAANg"]
[Tue Dec 09 21:52:56.174182 2025] [:error] [pid 30499:tid 30551] [client 4.197.92.48:9185] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/install.php"] [unique_id "aTgpuE0x3OqZTOPp7ckT3gAAAVU"]
[Tue Dec 09 21:52:56.255840 2025] [:error] [pid 30499:tid 30539] [client 4.197.92.48:9120] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/install.php"] [unique_id "aTgpuE0x3OqZTOPp7ckT3wAAAUk"]
[Tue Dec 09 21:52:56.371826 2025] [:error] [pid 36456:tid 36481] [client 4.197.92.48:51994] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/install.php"] [unique_id "aTgpuB0pAnOyfXl_v41P8wAAAJc"]
[Tue Dec 09 21:52:56.750741 2025] [:error] [pid 30498:tid 30521] [client 4.197.92.48:62508] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/install.php"] [unique_id "aTgpuB2mcZJQ5qP_RC1O5gAAABM"]
[Tue Dec 09 21:52:57.536904 2025] [:error] [pid 5276:tid 5287] [client 4.197.92.48:8356] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/config.php"] [unique_id "aTgpuUtSXwbewdwyu-2JMQAAAMk"]
[Tue Dec 09 21:52:58.274352 2025] [:error] [pid 30499:tid 30545] [client 4.197.92.48:52012] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/config.php"] [unique_id "aTgpuk0x3OqZTOPp7ckT4QAAAU8"]
[Tue Dec 09 21:52:58.618245 2025] [:error] [pid 5276:tid 5300] [client 4.197.92.48:50416] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/config.php"] [unique_id "aTgpuktSXwbewdwyu-2JNAAAANY"]
[Tue Dec 09 21:52:58.696063 2025] [:error] [pid 36456:tid 36472] [client 4.197.92.48:9145] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/config.php"] [unique_id "aTgpuh0pAnOyfXl_v41P-wAAAI4"]
[Tue Dec 09 21:52:58.820580 2025] [:error] [pid 30591:tid 30601] [client 4.197.92.48:60254] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/k.php"] [unique_id "aTgpuhG-g76drVdWQUWXPwAAAEc"]
[Tue Dec 09 21:52:59.044269 2025] [:error] [pid 30499:tid 30549] [client 4.197.92.48:49798] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/k.php"] [unique_id "aTgpu00x3OqZTOPp7ckT4gAAAVM"]
[Tue Dec 09 21:52:59.340294 2025] [:error] [pid 36456:tid 36465] [client 4.197.92.48:54849] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/k.php"] [unique_id "aTgpux0pAnOyfXl_v41P_gAAAIc"]
[Tue Dec 09 21:52:59.685287 2025] [:error] [pid 30591:tid 30605] [client 4.197.92.48:62466] [client 4.197.92.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/k.php"] [unique_id "aTgpuxG-g76drVdWQUWXQQAAAEs"]
[Wed Dec 10 01:07:44.902092 2025] [autoindex:error] [pid 2366:tid 2382] [client 4.194.127.155:22186] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 01:08:02.357118 2025] [:error] [pid 2280:tid 2349] [client 4.194.127.155:22253] [client 4.194.127.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aThXcncqIB-8ALgw4ZpHuAAAAIw"]
[Wed Dec 10 01:08:26.208248 2025] [:error] [pid 2366:tid 2371] [client 4.194.127.155:22146] [client 4.194.127.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aThXikAeBjkmsNRkd1NVhAAAAMM"]
[Wed Dec 10 01:08:27.308322 2025] [:error] [pid 2366:tid 2376] [client 4.194.127.155:22174] [client 4.194.127.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aThXi0AeBjkmsNRkd1NVigAAAMg"]
[Wed Dec 10 01:08:28.945698 2025] [autoindex:error] [pid 2279:tid 2330] [client 4.194.127.155:22270] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 01:08:29.034462 2025] [:error] [pid 2279:tid 2326] [client 4.194.127.155:22270] [client 4.194.127.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aThXjVmpdQscMcJOElWm8wAAAVA"]
[Wed Dec 10 01:08:30.396159 2025] [:error] [pid 2279:tid 2316] [client 4.194.127.155:22231] [client 4.194.127.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aThXjlmpdQscMcJOElWm9gAAAUY"]
[Wed Dec 10 01:08:32.105431 2025] [proxy_fcgi:error] [pid 2366:tid 2392] [client 4.194.127.155:22184] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 01:08:35.953095 2025] [autoindex:error] [pid 2279:tid 2330] [client 4.194.127.155:22222] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 01:08:36.608386 2025] [:error] [pid 2279:tid 2319] [client 4.194.127.155:22244] [client 4.194.127.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aThXlFmpdQscMcJOElWnDAAAAUk"]
[Wed Dec 10 01:08:37.699728 2025] [autoindex:error] [pid 2279:tid 2317] [client 4.194.127.155:22232] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 01:08:42.030725 2025] [:error] [pid 37041:tid 37047] [client 4.194.127.155:18380] [client 4.194.127.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aThXmruffDW8UzBwa1alcQAAAEQ"]
[Wed Dec 10 01:08:42.227187 2025] [:error] [pid 2280:tid 2358] [client 4.194.127.155:22179] [client 4.194.127.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aThXmncqIB-8ALgw4ZpIQQAAAJU"]
[Wed Dec 10 04:30:56.776564 2025] [:error] [pid 11268:tid 11329] [client 4.189.144.112:1324] [client 4.189.144.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "aTiHALbpLcj9WqyQndzoIgAAAIU"]
[Wed Dec 10 04:32:21.385209 2025] [:error] [pid 11268:tid 11344] [client 4.189.144.112:21761] [client 4.189.144.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "aTiHVbbpLcj9WqyQndzpCQAAAJQ"]
[Wed Dec 10 04:32:30.117345 2025] [:error] [pid 11267:tid 11313] [client 4.189.144.112:41473] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/manager.php"] [unique_id "aTiHXoY2npWNIVl2IDx1nAAAAFA"]
[Wed Dec 10 04:32:40.704350 2025] [:error] [pid 11268:tid 11341] [client 4.189.144.112:16286] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/k.php"] [unique_id "aTiHaLbpLcj9WqyQndzpOgAAAJE"]
[Wed Dec 10 04:32:44.324122 2025] [:error] [pid 11267:tid 11301] [client 4.189.144.112:21804] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/k.php"] [unique_id "aTiHbIY2npWNIVl2IDx1qwAAAEQ"]
[Wed Dec 10 04:32:46.809777 2025] [:error] [pid 11268:tid 11325] [client 4.189.144.112:16290] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/k.php"] [unique_id "aTiHbrbpLcj9WqyQndzpPgAAAIE"]
[Wed Dec 10 04:33:04.355207 2025] [:error] [pid 11354:tid 11361] [client 4.189.144.112:16275] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ss.php"] [unique_id "aTiHgO2TFO6mVSqWP8Tm5QAAAMQ"]
[Wed Dec 10 04:33:12.753876 2025] [:error] [pid 11266:tid 11275] [client 4.189.144.112:1815] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ss.php"] [unique_id "aTiHiCXL_Qb0Ip3FW3lyUgAAAAU"]
[Wed Dec 10 04:33:14.754913 2025] [:error] [pid 11268:tid 11344] [client 4.189.144.112:1848] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ss.php"] [unique_id "aTiHirbpLcj9WqyQndzpXwAAAJQ"]
[Wed Dec 10 04:34:00.421236 2025] [:error] [pid 11268:tid 11331] [client 4.189.144.112:1904] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/re.php"] [unique_id "aTiHuLbpLcj9WqyQndzpzQAAAIc"]
[Wed Dec 10 04:34:02.698041 2025] [:error] [pid 11354:tid 11377] [client 4.189.144.112:16306] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/re.php"] [unique_id "aTiHuu2TFO6mVSqWP8TnfwAAANQ"]
[Wed Dec 10 04:34:03.625165 2025] [:error] [pid 11354:tid 11367] [client 4.189.144.112:19661] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/re.php"] [unique_id "aTiHu-2TFO6mVSqWP8TnhQAAAMo"]
[Wed Dec 10 04:34:11.227839 2025] [:error] [pid 11266:tid 11273] [client 4.189.144.112:19610] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "aTiHwyXL_Qb0Ip3FW3lyugAAAAM"]
[Wed Dec 10 04:34:16.474351 2025] [:error] [pid 11267:tid 11316] [client 4.189.144.112:19705] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "aTiHyIY2npWNIVl2IDx2RgAAAFM"]
[Wed Dec 10 04:34:23.762345 2025] [:error] [pid 11267:tid 11315] [client 4.189.144.112:19625] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/v3.php"] [unique_id "aTiHz4Y2npWNIVl2IDx2VwAAAFI"]
[Wed Dec 10 04:34:35.601202 2025] [:error] [pid 11354:tid 11361] [client 4.189.144.112:16284] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lib.php"] [unique_id "aTiH2-2TFO6mVSqWP8Tn2AAAAMQ"]
[Wed Dec 10 04:34:38.989073 2025] [:error] [pid 11267:tid 11313] [client 4.189.144.112:25711] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lib.php"] [unique_id "aTiH3oY2npWNIVl2IDx2bAAAAFA"]
[Wed Dec 10 04:34:43.384565 2025] [:error] [pid 11267:tid 11318] [client 4.189.144.112:22056] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lib.php"] [unique_id "aTiH44Y2npWNIVl2IDx2cQAAAFU"]
[Wed Dec 10 04:34:46.047507 2025] [:error] [pid 11268:tid 11328] [client 4.189.144.112:1157] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lib.php"] [unique_id "aTiH5rbpLcj9WqyQndzqPwAAAIQ"]
[Wed Dec 10 04:35:24.179828 2025] [:error] [pid 11268:tid 11338] [client 4.189.144.112:35142] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gm.php"] [unique_id "aTiIDLbpLcj9WqyQndzqeAAAAI4"]
[Wed Dec 10 04:35:25.223063 2025] [:error] [pid 11354:tid 11378] [client 4.189.144.112:38989] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gm.php"] [unique_id "aTiIDe2TFO6mVSqWP8ToMQAAANU"]
[Wed Dec 10 04:35:26.391037 2025] [:error] [pid 11354:tid 11361] [client 4.189.144.112:35141] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gm.php"] [unique_id "aTiIDu2TFO6mVSqWP8ToNAAAAMQ"]
[Wed Dec 10 04:35:28.305161 2025] [:error] [pid 11267:tid 11313] [client 4.189.144.112:25629] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gm.php"] [unique_id "aTiIEIY2npWNIVl2IDx2zgAAAFA"]
[Wed Dec 10 04:35:30.517019 2025] [:error] [pid 11354:tid 11376] [client 4.189.144.112:38976] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/autoload_classmap.php"] [unique_id "aTiIEu2TFO6mVSqWP8ToQQAAANM"]
[Wed Dec 10 04:35:33.170128 2025] [:error] [pid 11266:tid 11273] [client 4.189.144.112:39011] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/autoload_classmap.php"] [unique_id "aTiIFSXL_Qb0Ip3FW3lzMAAAAAM"]
[Wed Dec 10 04:35:45.783731 2025] [:error] [pid 11354:tid 11372] [client 4.189.144.112:1544] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/abc.php"] [unique_id "aTiIIe2TFO6mVSqWP8ToYgAAAM8"]
[Wed Dec 10 04:35:50.087802 2025] [:error] [pid 11268:tid 11328] [client 4.189.144.112:1077] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/abc.php"] [unique_id "aTiIJrbpLcj9WqyQndzqoQAAAIQ"]
[Wed Dec 10 04:35:57.760294 2025] [:error] [pid 11267:tid 11303] [client 4.189.144.112:1094] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/abc.php"] [unique_id "aTiILYY2npWNIVl2IDx3AAAAAEY"]
[Wed Dec 10 04:36:00.126885 2025] [:error] [pid 11267:tid 11315] [client 4.189.144.112:1681] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/an.php"] [unique_id "aTiIMIY2npWNIVl2IDx3BwAAAFI"]
[Wed Dec 10 04:36:02.338918 2025] [:error] [pid 11268:tid 11336] [client 4.189.144.112:1673] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/an.php"] [unique_id "aTiIMrbpLcj9WqyQndzqtgAAAIw"]
[Wed Dec 10 04:36:04.328484 2025] [:error] [pid 11354:tid 11360] [client 4.189.144.112:33759] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/an.php"] [unique_id "aTiINO2TFO6mVSqWP8ToigAAAMM"]
[Wed Dec 10 04:36:09.371357 2025] [:error] [pid 11354:tid 11361] [client 4.189.144.112:22332] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/an.php"] [unique_id "aTiIOe2TFO6mVSqWP8TonAAAAMQ"]
[Wed Dec 10 04:36:15.771774 2025] [:error] [pid 11354:tid 11359] [client 4.189.144.112:33760] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/blox.php"] [unique_id "aTiIP-2TFO6mVSqWP8TosAAAAMI"]
[Wed Dec 10 04:37:19.281456 2025] [:error] [pid 11267:tid 11321] [client 4.189.144.112:1510] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/moon.php"] [unique_id "aTiIf4Y2npWNIVl2IDx3dwAAAFg"]
[Wed Dec 10 04:37:20.845854 2025] [:error] [pid 11266:tid 11278] [client 4.189.144.112:33672] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/moon.php"] [unique_id "aTiIgCXL_Qb0Ip3FW3lzzQAAAAg"]
[Wed Dec 10 04:37:21.778039 2025] [:error] [pid 11266:tid 11281] [client 4.189.144.112:1760] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/moon.php"] [unique_id "aTiIgSXL_Qb0Ip3FW3lz0QAAAAs"]
[Wed Dec 10 04:37:26.105507 2025] [:error] [pid 11354:tid 11377] [client 4.189.144.112:37623] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shoha.php"] [unique_id "aTiIhu2TFO6mVSqWP8TpLQAAANQ"]
[Wed Dec 10 04:37:27.203499 2025] [:error] [pid 11266:tid 11276] [client 4.189.144.112:29566] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shoha.php"] [unique_id "aTiIhyXL_Qb0Ip3FW3lz2AAAAAY"]
[Wed Dec 10 04:37:30.304146 2025] [:error] [pid 11268:tid 11335] [client 4.189.144.112:33706] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shoha.php"] [unique_id "aTiIirbpLcj9WqyQndzrKQAAAIs"]
[Wed Dec 10 04:37:32.093724 2025] [:error] [pid 11354:tid 11365] [client 4.189.144.112:33676] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shoha.php"] [unique_id "aTiIjO2TFO6mVSqWP8TpNgAAAMg"]
[Wed Dec 10 04:37:35.017251 2025] [:error] [pid 11354:tid 11363] [client 4.189.144.112:1476] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wso.php"] [unique_id "aTiIj-2TFO6mVSqWP8TpPAAAAMY"]
[Wed Dec 10 04:37:36.573444 2025] [:error] [pid 11266:tid 11287] [client 4.189.144.112:33067] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wso.php"] [unique_id "aTiIkCXL_Qb0Ip3FW3lz5AAAABE"]
[Wed Dec 10 04:37:41.741287 2025] [:error] [pid 11266:tid 11290] [client 4.189.144.112:33086] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wso.php"] [unique_id "aTiIlSXL_Qb0Ip3FW3lz6wAAABQ"]
[Wed Dec 10 04:37:49.069451 2025] [:error] [pid 11268:tid 11332] [client 4.189.144.112:21251] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sallu.php"] [unique_id "aTiInbbpLcj9WqyQndzrTQAAAIg"]
[Wed Dec 10 04:37:52.898690 2025] [:error] [pid 11268:tid 11333] [client 4.189.144.112:2010] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sallu.php"] [unique_id "aTiIoLbpLcj9WqyQndzrXgAAAIk"]
[Wed Dec 10 04:37:54.489687 2025] [:error] [pid 11266:tid 11279] [client 4.189.144.112:21254] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sallu.php"] [unique_id "aTiIoiXL_Qb0Ip3FW3lz-wAAAAk"]
[Wed Dec 10 21:29:57.346344 2025] [:error] [pid 49095:tid 49100] [client 68.218.105.189:20227] [client 68.218.105.189] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "45.131.194.187_82aa6a482bd276cff149740478a603a5fe834840"): Internal error (specific information not available) [hostname "southerncrosscentre.au"] [uri "/index.php"] [unique_id "aTl108orr4Jt2Tfx_EYDpwAAAUM"]
[Mon Dec 15 16:11:21.105172 2025] [autoindex:error] [pid 44555:tid 44576] [client 4.196.84.169:19286] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 16:11:33.434478 2025] [:error] [pid 44555:tid 44575] [client 4.196.84.169:19220] [client 4.196.84.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aT_CtWDHW0g-e9AKPr4xSQAAAFI"]
[Mon Dec 15 16:11:52.099778 2025] [:error] [pid 39828:tid 39862] [client 4.196.84.169:19206] [client 4.196.84.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aT_CyO0Kj9XWFkRmVbQq6AAAAMQ"]
[Mon Dec 15 16:11:52.888871 2025] [:error] [pid 39829:tid 39904] [client 4.196.84.169:19305] [client 4.196.84.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aT_CyGegGfxg5ldkNeiuWAAAAZM"]
[Mon Dec 15 16:11:54.022001 2025] [autoindex:error] [pid 39828:tid 39859] [client 4.196.84.169:19257] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 16:11:54.039054 2025] [:error] [pid 39828:tid 39861] [client 4.196.84.169:19257] [client 4.196.84.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aT_Cyu0Kj9XWFkRmVbQq7gAAAMM"]
[Mon Dec 15 16:11:54.990952 2025] [:error] [pid 39914:tid 39938] [client 4.196.84.169:19249] [client 4.196.84.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aT_Cyl247O4ulGRu1dOLVQAAABU"]
[Mon Dec 15 16:11:56.290148 2025] [proxy_fcgi:error] [pid 17595:tid 17613] [client 4.196.84.169:10199] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 16:11:59.229010 2025] [autoindex:error] [pid 39914:tid 39931] [client 4.196.84.169:10218] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 16:11:59.636647 2025] [:error] [pid 39914:tid 39929] [client 4.196.84.169:10139] [client 4.196.84.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aT_Cz1247O4ulGRu1dOLZAAAAAw"]
[Mon Dec 15 16:12:00.495115 2025] [autoindex:error] [pid 39826:tid 39851] [client 4.196.84.169:10230] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 16:12:03.493744 2025] [:error] [pid 39829:tid 39908] [client 4.196.84.169:19268] [client 4.196.84.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aT_C02egGfxg5ldkNeiuYgAAAZc"]
[Mon Dec 15 16:12:03.559150 2025] [:error] [pid 17595:tid 17612] [client 4.196.84.169:19240] [client 4.196.84.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aT_C0yEZ31fZFzV3Us_43QAAAQ8"]
[Mon Dec 15 16:12:16.472638 2025] [:error] [pid 39826:tid 39850] [client 4.196.84.169:10196] [client 4.196.84.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.196.84.169, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aT_C4IdXWIOU_2oL0XaLrwAAAJM"]
[Mon Dec 15 16:12:16.477506 2025] [proxy_fcgi:error] [pid 39826:tid 39850] [client 4.196.84.169:10196] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 16:12:17.354264 2025] [:error] [pid 44555:tid 44567] [client 4.196.84.169:19255] [client 4.196.84.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/sx.php"] [unique_id "aT_C4WDHW0g-e9AKPr4xpwAAAEo"]
[Mon Dec 15 16:12:17.415784 2025] [:error] [pid 39914:tid 39928] [client 4.196.84.169:10122] [client 4.196.84.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aT_C4V247O4ulGRu1dOLcgAAAAs"]
[Mon Dec 15 16:12:17.460283 2025] [:error] [pid 39829:tid 39894] [client 4.196.84.169:10221] [client 4.196.84.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.196.84.169, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aT_C4WegGfxg5ldkNeiubwAAAYk"]
[Mon Dec 15 16:12:18.364730 2025] [autoindex:error] [pid 39914:tid 39921] [client 4.196.84.169:10119] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 16:12:18.384424 2025] [:error] [pid 39914:tid 39922] [client 4.196.84.169:10119] [client 4.196.84.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/index.php"] [unique_id "aT_C4l247O4ulGRu1dOLdQAAAAU"]
[Mon Dec 15 16:12:18.881934 2025] [:error] [pid 17595:tid 17619] [client 4.196.84.169:19250] [client 4.196.84.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aT_C4iEZ31fZFzV3Us_46wAAARY"]
[Mon Dec 15 16:12:22.371149 2025] [:error] [pid 44555:tid 44576] [client 4.196.84.169:10127] [client 4.196.84.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aT_C5mDHW0g-e9AKPr4xrgAAAFM"]
[Mon Dec 15 16:12:22.493588 2025] [:error] [pid 44555:tid 44570] [client 4.196.84.169:10226] [client 4.196.84.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/index.php"] [unique_id "aT_C5mDHW0g-e9AKPr4xrwAAAE0"]
[Mon Dec 15 16:12:22.539255 2025] [:error] [pid 39914:tid 39917] [client 4.196.84.169:19218] [client 4.196.84.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.196.84.169, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/img/wp-login.php"] [unique_id "aT_C5l247O4ulGRu1dOLdwAAAAA"]
[Mon Dec 15 18:50:20.773127 2025] [autoindex:error] [pid 31373:tid 31424] [client 89.251.0.39:45651] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 18:50:21.042023 2025] [autoindex:error] [pid 31373:tid 31414] [client 89.251.0.39:45651] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 18:50:21.301820 2025] [autoindex:error] [pid 31373:tid 31417] [client 89.251.0.39:45651] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 18:50:21.547028 2025] [autoindex:error] [pid 31373:tid 31413] [client 89.251.0.39:45651] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 18:50:23.492869 2025] [autoindex:error] [pid 31372:tid 31390] [client 89.251.0.70:59123] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 18:50:23.766227 2025] [autoindex:error] [pid 31372:tid 31393] [client 89.251.0.70:59123] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 18:50:24.056125 2025] [autoindex:error] [pid 31372:tid 31397] [client 89.251.0.70:59123] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 18:50:24.324881 2025] [autoindex:error] [pid 31372:tid 31399] [client 89.251.0.70:59123] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 18:50:25.697425 2025] [autoindex:error] [pid 52155:tid 52164] [client 89.251.0.74:31109] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 18:50:26.671146 2025] [autoindex:error] [pid 52155:tid 52165] [client 89.251.0.74:31109] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 18:50:26.974201 2025] [autoindex:error] [pid 52155:tid 52159] [client 89.251.0.74:31109] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 18:50:28.964164 2025] [autoindex:error] [pid 52155:tid 52178] [client 89.251.0.47:44751] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 18:50:29.216242 2025] [autoindex:error] [pid 52155:tid 52170] [client 89.251.0.47:44751] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 18:50:29.479049 2025] [autoindex:error] [pid 52155:tid 52163] [client 89.251.0.47:44751] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 18:50:29.738393 2025] [autoindex:error] [pid 52155:tid 52162] [client 89.251.0.47:44751] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:07:28.736324 2025] [autoindex:error] [pid 58449:tid 58467] [client 45.154.138.50:23989] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:07:29.160224 2025] [autoindex:error] [pid 58449:tid 58457] [client 45.154.138.50:23989] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:07:29.599984 2025] [autoindex:error] [pid 58449:tid 58472] [client 45.154.138.50:23989] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:07:30.028020 2025] [autoindex:error] [pid 58449:tid 58474] [client 45.154.138.50:23989] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:07:36.202952 2025] [autoindex:error] [pid 58449:tid 58452] [client 45.154.138.12:26137] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:07:36.619043 2025] [autoindex:error] [pid 58449:tid 58476] [client 45.154.138.12:26137] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:07:37.099343 2025] [autoindex:error] [pid 58449:tid 58471] [client 45.154.138.12:26137] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:07:37.516592 2025] [autoindex:error] [pid 58449:tid 58475] [client 45.154.138.12:26137] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:07:42.178047 2025] [autoindex:error] [pid 33915:tid 33936] [client 45.154.138.35:45163] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:07:46.313920 2025] [autoindex:error] [pid 33915:tid 33941] [client 45.154.138.35:45163] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:07:46.658018 2025] [autoindex:error] [pid 33915:tid 33932] [client 45.154.138.35:45163] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:07:53.129020 2025] [autoindex:error] [pid 34008:tid 34028] [client 45.154.138.16:38505] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:07:53.563784 2025] [autoindex:error] [pid 34008:tid 34019] [client 45.154.138.16:38505] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:07:53.967826 2025] [autoindex:error] [pid 34008:tid 34011] [client 45.154.138.16:38505] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:07:54.422235 2025] [autoindex:error] [pid 34008:tid 34019] [client 45.154.138.16:38505] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:08:05.074799 2025] [autoindex:error] [pid 33916:tid 33950] [client 45.154.138.14:26911] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 06:20:31.396390 2025] [:error] [pid 18322:tid 18339] [client 136.144.19.193:35437] [client 136.144.19.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.193, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUCJr5sCeWBjrw28XtwV1QAAAA0"]
[Tue Dec 16 06:20:32.862543 2025] [:error] [pid 51991:tid 52010] [client 216.24.219.174:46239] [client 216.24.219.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.174, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUCJsK7zKCVJSuwV1xZNfgAAARE"]
[Tue Dec 16 11:59:47.483924 2025] [:error] [pid 18408:tid 18429] [client 46.101.111.185:48714] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUDZMzi2Gr8pDzjrVBB-AwAAANM"]
[Tue Dec 16 11:59:56.514939 2025] [authz_core:error] [pid 18324:tid 18401] [client 46.101.111.185:48774] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Tue Dec 16 12:00:00.722587 2025] [:error] [pid 18408:tid 18431] [client 46.101.111.185:44260] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aUDZQDi2Gr8pDzjrVBB-CQAAANU"]
[Tue Dec 16 12:00:02.792372 2025] [:error] [pid 12330:tid 12353] [client 46.101.111.185:44266] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aUDZQl6iIQEVCIh8V1n4qAAAAZM"]
[Tue Dec 16 15:15:05.250777 2025] [:error] [pid 51991:tid 52011] [client 206.189.233.36:44604] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUEG-a7zKCVJSuwV1xZCbwAAARI"]
[Tue Dec 16 15:15:13.457115 2025] [authz_core:error] [pid 18408:tid 18412] [client 206.189.233.36:56734] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Tue Dec 16 15:15:17.257081 2025] [:error] [pid 51991:tid 51993] [client 206.189.233.36:40116] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aUEHBa7zKCVJSuwV1xZCwgAAAQA"]
[Tue Dec 16 15:15:19.258072 2025] [:error] [pid 18408:tid 18422] [client 206.189.233.36:40132] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aUEHBzi2Gr8pDzjrVBDIzgAAAMw"]
[Tue Dec 16 19:22:45.509775 2025] [:error] [pid 18323:tid 18374] [client 159.89.174.87:36092] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUFBBTJB6UFxIutsA8YpXQAAAFU"]
[Tue Dec 16 19:22:53.716013 2025] [authz_core:error] [pid 51991:tid 52002] [client 159.89.174.87:55090] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Tue Dec 16 19:22:57.503021 2025] [:error] [pid 18408:tid 18428] [client 159.89.174.87:55134] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aUFBETi2Gr8pDzjrVBAWRwAAANI"]
[Tue Dec 16 19:22:59.529513 2025] [:error] [pid 18323:tid 18361] [client 159.89.174.87:34402] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aUFBEzJB6UFxIutsA8YpdQAAAEg"]
[Tue Dec 16 23:43:00.925210 2025] [:error] [pid 53940:tid 53944] [client 157.245.105.107:57242] [client 157.245.105.107] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUF-BF91PNbcXLVkpR4i1wAAAcE"]
[Tue Dec 16 23:43:09.135220 2025] [authz_core:error] [pid 53940:tid 53950] [client 157.245.105.107:34858] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Tue Dec 16 23:43:12.916489 2025] [:error] [pid 18323:tid 18360] [client 157.245.105.107:59216] [client 157.245.105.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aUF-EDJB6UFxIutsA8Zg3wAAAEc"]
[Tue Dec 16 23:43:14.911317 2025] [:error] [pid 18323:tid 18367] [client 157.245.105.107:59228] [client 157.245.105.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aUF-EjJB6UFxIutsA8Zg5wAAAE4"]
[Thu Dec 18 06:53:07.389637 2025] [:error] [pid 24542:tid 24567] [client 193.19.109.207:58245] [client 193.19.109.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUM0U0tQz4H2oS3NrDYamgAAAVc"]
[Thu Dec 18 06:53:17.302241 2025] [:error] [pid 25357:tid 25365] [client 193.19.109.210:47911] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUM0XYaT7bsEXnJVfJdSJgAAAcY"]
[Thu Dec 18 06:53:33.086936 2025] [:error] [pid 23557:tid 23603] [client 193.37.33.229:32627] [client 193.37.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tinyfilemanager.php"] [unique_id "aUM0bRYcs6rFVxbdP_k7YwAAAE8"]
[Thu Dec 18 06:53:42.169013 2025] [:error] [pid 24958:tid 24981] [client 193.19.109.178:49601] [client 193.19.109.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUM0dskDOrUkd0wNm2ETuAAAAZQ"]
[Thu Dec 18 06:53:59.282212 2025] [:error] [pid 23645:tid 23648] [client 193.19.109.171:43973] [client 193.19.109.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUM0hzf_Rx0Y0ao_QJiTZAAAAIE"]
[Thu Dec 18 06:54:02.374744 2025] [:error] [pid 23557:tid 23608] [client 193.19.109.161:57211] [client 193.19.109.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUM0ihYcs6rFVxbdP_k8EQAAAFQ"]
[Thu Dec 18 06:54:03.078190 2025] [:error] [pid 23557:tid 23593] [client 193.19.109.168:27483] [client 193.19.109.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUM0ixYcs6rFVxbdP_k8FgAAAEU"]
[Thu Dec 18 06:54:04.860172 2025] [:error] [pid 23557:tid 23596] [client 193.19.109.208:50957] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUM0jBYcs6rFVxbdP_k8KwAAAEg"]
[Thu Dec 18 06:54:05.660851 2025] [:error] [pid 23557:tid 23611] [client 193.19.109.209:41031] [client 193.19.109.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUM0jRYcs6rFVxbdP_k8OAAAAFc"]
[Thu Dec 18 06:54:06.445564 2025] [:error] [pid 25357:tid 25365] [client 193.19.109.208:43595] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUM0joaT7bsEXnJVfJdUGQAAAcY"]
[Thu Dec 18 06:54:08.581499 2025] [:error] [pid 23556:tid 23579] [client 193.19.109.172:43595] [client 193.19.109.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUM0kBnmLlk3u5yt9kEPkAAAABM"]
[Thu Dec 18 06:54:12.063241 2025] [:error] [pid 24542:tid 24563] [client 193.19.109.192:46525] [client 193.19.109.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "aUM0lEtQz4H2oS3NrDYdCAAAAVM"]
[Thu Dec 18 06:54:18.575743 2025] [:error] [pid 23556:tid 23572] [client 193.19.109.193:44971] [client 193.19.109.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUM0mhnmLlk3u5yt9kEP6AAAAAw"]
[Thu Dec 18 06:54:21.272341 2025] [:error] [pid 23556:tid 23576] [client 193.19.109.183:25833] [client 193.19.109.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUM0nRnmLlk3u5yt9kEQFAAAABA"]
[Thu Dec 18 06:54:24.257774 2025] [:error] [pid 23645:tid 23665] [client 193.19.109.186:49963] [client 193.19.109.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUM0oDf_Rx0Y0ao_QJiT9wAAAJI"]
[Thu Dec 18 06:54:38.463838 2025] [:error] [pid 24433:tid 24442] [client 193.19.109.196:35661] [client 193.19.109.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUM0rp4pN9ycmipm8Tgp5QAAAQY"]
[Thu Dec 18 06:54:41.366605 2025] [:error] [pid 24542:tid 24549] [client 193.19.109.174:60945] [client 193.19.109.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUM0sUtQz4H2oS3NrDYdogAAAUU"]
[Thu Dec 18 06:54:46.251867 2025] [:error] [pid 23557:tid 23609] [client 193.19.109.170:42865] [client 193.19.109.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUM0thYcs6rFVxbdP_k9RAAAAFU"]
[Thu Dec 18 06:54:48.889044 2025] [:error] [pid 23645:tid 23671] [client 193.19.109.193:21441] [client 193.19.109.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUM0uDf_Rx0Y0ao_QJiUhgAAAJg"]
[Thu Dec 18 06:54:56.967925 2025] [:error] [pid 24958:tid 24985] [client 193.19.109.181:46941] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUM0wMkDOrUkd0wNm2EWVwAAAZg"]
[Thu Dec 18 06:55:00.066179 2025] [:error] [pid 23558:tid 23620] [client 193.19.109.177:27101] [client 193.19.109.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUM0xOHam9NbgPQa9uZAhQAAAMU"]
[Thu Dec 18 06:55:02.798958 2025] [:error] [pid 23556:tid 23572] [client 193.19.109.163:55235] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUM0xhnmLlk3u5yt9kERCgAAAAw"]
[Thu Dec 18 06:55:03.607813 2025] [:error] [pid 25357:tid 25381] [client 193.19.109.183:41915] [client 193.19.109.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUM0x4aT7bsEXnJVfJdWYAAAAdY"]
[Thu Dec 18 06:55:04.353124 2025] [:error] [pid 25357:tid 25378] [client 193.19.109.162:46207] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUM0yIaT7bsEXnJVfJdWaQAAAdM"]
[Thu Dec 18 06:55:12.088622 2025] [:error] [pid 23557:tid 23593] [client 193.19.109.206:36869] [client 193.19.109.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aUM00BYcs6rFVxbdP_k99gAAAEU"]
[Thu Dec 18 06:55:13.867796 2025] [:error] [pid 23558:tid 23622] [client 193.19.109.186:50029] [client 193.19.109.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class.api.php"] [unique_id "aUM00eHam9NbgPQa9uZA3AAAAMc"]
[Thu Dec 18 06:55:14.602009 2025] [:error] [pid 24433:tid 24444] [client 193.19.109.198:36563] [client 193.19.109.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUM00p4pN9ycmipm8Tgq8AAAAQg"]
[Thu Dec 18 06:55:30.192270 2025] [:error] [pid 24542:tid 24563] [client 193.19.109.186:65083] [client 193.19.109.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/admin.php"] [unique_id "aUM04ktQz4H2oS3NrDYewQAAAVM"]
[Thu Dec 18 06:55:37.093275 2025] [:error] [pid 23556:tid 23579] [client 193.19.109.195:44929] [client 193.19.109.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.195, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aUM06RnmLlk3u5yt9kER6wAAABM"]
[Thu Dec 18 06:56:01.788742 2025] [:error] [pid 24433:tid 24444] [client 193.19.109.177:51575] [client 193.19.109.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUM1AZ4pN9ycmipm8TgsVQAAAQg"]
[Thu Dec 18 06:56:06.859642 2025] [:error] [pid 23558:tid 23617] [client 193.19.109.194:29625] [client 193.19.109.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.194, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aUM1BuHam9NbgPQa9uZCEwAAAMI"]
[Thu Dec 18 06:56:10.482851 2025] [:error] [pid 24542:tid 24560] [client 193.19.109.197:38285] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/item.php"] [unique_id "aUM1CktQz4H2oS3NrDYf7gAAAVA"]
[Thu Dec 18 06:56:22.865126 2025] [:error] [pid 23645:tid 23668] [client 193.19.109.202:35491] [client 193.19.109.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aUM1Fjf_Rx0Y0ao_QJiW3AAAAJU"]
[Thu Dec 18 06:56:35.062235 2025] [:error] [pid 23557:tid 23589] [client 193.19.109.181:50185] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUM1IxYcs6rFVxbdP_k_9AAAAEE"]
[Thu Dec 18 06:56:38.279352 2025] [:error] [pid 25357:tid 25368] [client 193.19.109.173:40369] [client 193.19.109.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aUM1JoaT7bsEXnJVfJdZhAAAAck"]
[Thu Dec 18 06:56:42.900880 2025] [:error] [pid 23557:tid 23589] [client 193.19.109.179:45663] [client 193.19.109.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.179, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aUM1KhYcs6rFVxbdP_lANgAAAEE"]
[Thu Dec 18 06:56:44.064971 2025] [:error] [pid 23558:tid 23615] [client 193.19.109.176:45815] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aUM1LOHam9NbgPQa9uZDDwAAAMA"]
[Thu Dec 18 06:57:11.774298 2025] [:error] [pid 23557:tid 23603] [client 193.19.109.188:39793] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aUM1RxYcs6rFVxbdP_lA-QAAAE8"]
[Thu Dec 18 06:57:19.147996 2025] [:error] [pid 24958:tid 24980] [client 193.19.109.161:65349] [client 193.19.109.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.161, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aUM1T8kDOrUkd0wNm2EbhgAAAZM"]
[Thu Dec 18 06:57:27.568311 2025] [:error] [pid 24433:tid 24437] [client 193.19.109.195:41061] [client 193.19.109.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aUM1V54pN9ycmipm8TguegAAAQE"]
[Thu Dec 18 06:57:30.185069 2025] [:error] [pid 23645:tid 23667] [client 193.19.109.181:42581] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/infi.php"] [unique_id "aUM1Wjf_Rx0Y0ao_QJiYYgAAAJQ"]
[Thu Dec 18 06:57:33.655933 2025] [:error] [pid 24433:tid 24454] [client 193.19.109.177:44329] [client 193.19.109.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUM1XZ4pN9ycmipm8TguoAAAARI"]
[Thu Dec 18 06:57:38.983161 2025] [:error] [pid 25357:tid 25367] [client 193.19.109.170:27527] [client 193.19.109.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUM1YoaT7bsEXnJVfJdbKQAAAcg"]
[Thu Dec 18 06:57:39.703289 2025] [:error] [pid 24542:tid 24559] [client 193.19.109.202:33283] [client 193.19.109.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUM1Y0tQz4H2oS3NrDYiaQAAAU8"]
[Thu Dec 18 06:57:46.973359 2025] [:error] [pid 23645:tid 23648] [client 193.19.109.171:63415] [client 193.19.109.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUM1ajf_Rx0Y0ao_QJiYuwAAAIE"]
[Thu Dec 18 06:57:49.253944 2025] [:error] [pid 24433:tid 24444] [client 193.19.109.164:63829] [client 193.19.109.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aUM1bZ4pN9ycmipm8TgvFwAAAQg"]
[Thu Dec 18 06:57:56.559093 2025] [:error] [pid 25357:tid 25373] [client 193.19.109.165:50635] [client 193.19.109.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/edit.php"] [unique_id "aUM1dIaT7bsEXnJVfJdbhAAAAc4"]
[Thu Dec 18 06:58:02.849789 2025] [:error] [pid 24433:tid 24450] [client 193.19.109.209:31477] [client 193.19.109.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aUM1ep4pN9ycmipm8TgvhgAAAQ4"]
[Thu Dec 18 06:58:06.663106 2025] [:error] [pid 24958:tid 24984] [client 193.19.109.206:35199] [client 193.19.109.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/click.php"] [unique_id "aUM1fskDOrUkd0wNm2Ec6AAAAZc"]
[Thu Dec 18 06:58:12.795956 2025] [:error] [pid 23557:tid 23607] [client 193.19.109.196:21529] [client 193.19.109.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aUM1hBYcs6rFVxbdP_lDBQAAAFM"]
[Thu Dec 18 06:58:23.776457 2025] [:error] [pid 24542:tid 24557] [client 193.19.109.183:50117] [client 193.19.109.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aUM1j0tQz4H2oS3NrDYkMgAAAU0"]
[Thu Dec 18 06:58:24.488854 2025] [:error] [pid 24958:tid 24984] [client 193.19.109.165:29155] [client 193.19.109.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aUM1kMkDOrUkd0wNm2EdaQAAAZc"]
[Thu Dec 18 06:58:25.271303 2025] [:error] [pid 23556:tid 23569] [client 193.19.109.167:46195] [client 193.19.109.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aUM1kRnmLlk3u5yt9kEWmgAAAAk"]
[Thu Dec 18 06:58:25.987883 2025] [:error] [pid 25357:tid 25361] [client 193.19.109.202:24851] [client 193.19.109.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aUM1kYaT7bsEXnJVfJdcCQAAAcI"]
[Thu Dec 18 06:58:28.309183 2025] [:error] [pid 24433:tid 24458] [client 193.19.109.171:36135] [client 193.19.109.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aUM1lJ4pN9ycmipm8TgwVgAAARY"]
[Thu Dec 18 06:58:29.168712 2025] [:error] [pid 24433:tid 24452] [client 193.19.109.197:42167] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aUM1lZ4pN9ycmipm8TgwXQAAARA"]
[Thu Dec 18 06:58:33.364825 2025] [:error] [pid 24542:tid 24552] [client 193.19.109.199:35821] [client 193.19.109.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/index.php"] [unique_id "aUM1mUtQz4H2oS3NrDYkbgAAAUg"]
[Thu Dec 18 06:58:34.100110 2025] [:error] [pid 24958:tid 24979] [client 193.19.109.178:21663] [client 193.19.109.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUM1mskDOrUkd0wNm2EdlwAAAZI"]
[Thu Dec 18 06:58:34.886417 2025] [:error] [pid 23645:tid 23664] [client 193.19.109.175:46459] [client 193.19.109.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aUM1mjf_Rx0Y0ao_QJiZvQAAAJE"]
[Thu Dec 18 06:58:35.662006 2025] [:error] [pid 23645:tid 23663] [client 193.19.109.190:31581] [client 193.19.109.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aUM1mzf_Rx0Y0ao_QJiZwgAAAJA"]
[Thu Dec 18 06:58:37.859207 2025] [:error] [pid 24958:tid 24975] [client 193.19.109.205:27857] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUM1nckDOrUkd0wNm2EdrAAAAY4"]
[Thu Dec 18 06:58:41.710509 2025] [:error] [pid 23558:tid 23618] [client 193.19.109.167:63571] [client 193.19.109.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aUM1oeHam9NbgPQa9uZF1AAAAMM"]
[Thu Dec 18 06:58:49.581098 2025] [:error] [pid 24433:tid 24449] [client 193.19.109.202:53685] [client 193.19.109.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aUM1qZ4pN9ycmipm8TgwxwAAAQ0"]
[Thu Dec 18 06:59:06.960903 2025] [:error] [pid 23557:tid 23595] [client 193.19.109.185:22399] [client 193.19.109.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aUM1uhYcs6rFVxbdP_lECwAAAEc"]
[Thu Dec 18 06:59:12.557230 2025] [:error] [pid 23557:tid 23596] [client 193.19.109.197:29925] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aUM1wBYcs6rFVxbdP_lEOAAAAEg"]
[Thu Dec 18 06:59:13.263100 2025] [:error] [pid 24542:tid 24562] [client 193.19.109.163:21121] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aUM1wUtQz4H2oS3NrDYldAAAAVI"]
[Thu Dec 18 06:59:19.877777 2025] [:error] [pid 24542:tid 24549] [client 193.19.109.196:51027] [client 193.19.109.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUM1x0tQz4H2oS3NrDYlowAAAUU"]
[Thu Dec 18 06:59:24.496512 2025] [proxy_fcgi:error] [pid 23556:tid 23567] [client 193.19.109.189:65449] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:59:24.913627 2025] [proxy_fcgi:error] [pid 23556:tid 23562] [client 193.19.109.189:65449] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:59:25.322841 2025] [proxy_fcgi:error] [pid 23556:tid 23574] [client 193.19.109.189:65449] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:59:29.217041 2025] [:error] [pid 23556:tid 23562] [client 193.19.109.191:41623] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUM10RnmLlk3u5yt9kEXbAAAAAI"]
[Thu Dec 18 06:59:29.961632 2025] [:error] [pid 23556:tid 23561] [client 193.19.109.175:42039] [client 193.19.109.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aUM10RnmLlk3u5yt9kEXbwAAAAE"]
[Thu Dec 18 06:59:30.684852 2025] [:error] [pid 25357:tid 25369] [client 193.19.109.165:45749] [client 193.19.109.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aUM10oaT7bsEXnJVfJdd7gAAAco"]
[Thu Dec 18 06:59:31.372260 2025] [:error] [pid 25357:tid 25367] [client 193.19.109.176:25111] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aUM104aT7bsEXnJVfJdd9QAAAcg"]
[Thu Dec 18 06:59:32.074347 2025] [:error] [pid 25357:tid 25381] [client 193.19.109.164:20887] [client 193.19.109.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aUM11IaT7bsEXnJVfJdd-gAAAdY"]
[Thu Dec 18 06:59:32.766583 2025] [:error] [pid 24958:tid 24968] [client 193.19.109.183:50885] [client 193.19.109.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aUM11MkDOrUkd0wNm2Ee8AAAAYc"]
[Thu Dec 18 06:59:34.471109 2025] [:error] [pid 25357:tid 25381] [client 193.19.109.168:55419] [client 193.19.109.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aUM11oaT7bsEXnJVfJdeCQAAAdY"]
[Thu Dec 18 06:59:35.176258 2025] [:error] [pid 25357:tid 25367] [client 193.37.33.230:33977] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aUM114aT7bsEXnJVfJdeDwAAAcg"]
[Thu Dec 18 06:59:35.883636 2025] [:error] [pid 25357:tid 25359] [client 193.19.109.172:59291] [client 193.19.109.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aUM114aT7bsEXnJVfJdeFwAAAcA"]
[Thu Dec 18 06:59:36.608090 2025] [:error] [pid 24542:tid 24555] [client 193.19.109.170:28067] [client 193.19.109.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aUM12EtQz4H2oS3NrDYmfQAAAUs"]
[Thu Dec 18 06:59:39.600715 2025] [:error] [pid 24958:tid 24982] [client 193.19.109.190:36341] [client 193.19.109.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aUM128kDOrUkd0wNm2EfEAAAAZU"]
[Thu Dec 18 06:59:41.103736 2025] [:error] [pid 24542:tid 24558] [client 193.19.109.194:64883] [client 193.19.109.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aUM13UtQz4H2oS3NrDYmpAAAAU4"]
[Thu Dec 18 06:59:44.073289 2025] [:error] [pid 24433:tid 24453] [client 193.19.109.210:42279] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aUM14J4pN9ycmipm8TgxqAAAARE"]
[Thu Dec 18 06:59:47.247814 2025] [:error] [pid 25357:tid 25362] [client 193.19.109.210:24139] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/about.php"] [unique_id "aUM144aT7bsEXnJVfJdefgAAAcM"]
[Thu Dec 18 06:59:51.645685 2025] [:error] [pid 24542:tid 24549] [client 193.19.109.206:35153] [client 193.19.109.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aUM150tQz4H2oS3NrDYm7gAAAUU"]
[Thu Dec 18 06:59:58.047121 2025] [:error] [pid 24542:tid 24554] [client 193.19.109.199:44857] [client 193.19.109.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aUM17ktQz4H2oS3NrDYnCQAAAUo"]
[Thu Dec 18 06:59:59.878105 2025] [:error] [pid 24433:tid 24441] [client 193.19.109.190:34517] [client 193.19.109.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aUM1754pN9ycmipm8Tgx8gAAAQU"]
[Thu Dec 18 07:00:24.395057 2025] [:error] [pid 24958:tid 24978] [client 193.37.33.230:57455] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aUM2CMkDOrUkd0wNm2Ef3QAAAZE"]
[Thu Dec 18 07:00:25.176493 2025] [:error] [pid 24433:tid 24455] [client 193.19.109.165:65287] [client 193.19.109.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aUM2CZ4pN9ycmipm8TgyQwAAARM"]
[Thu Dec 18 07:00:25.949594 2025] [:error] [pid 23558:tid 23639] [client 193.19.109.206:56785] [client 193.19.109.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.206, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUM2CeHam9NbgPQa9uZHNQAAANg"]
[Thu Dec 18 07:00:27.883516 2025] [:error] [pid 23645:tid 23657] [client 193.19.109.173:29999] [client 193.19.109.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aUM2Czf_Rx0Y0ao_QJicJQAAAIo"]
[Thu Dec 18 07:00:31.277613 2025] [:error] [pid 24542:tid 24546] [client 193.19.109.201:59131] [client 193.19.109.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aUM2D0tQz4H2oS3NrDYoFwAAAUI"]
[Thu Dec 18 07:00:32.050850 2025] [:error] [pid 23558:tid 23627] [client 193.19.109.170:45349] [client 193.19.109.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aUM2EOHam9NbgPQa9uZHPgAAAMw"]
[Thu Dec 18 07:00:38.172506 2025] [:error] [pid 25357:tid 25365] [client 193.19.109.172:29521] [client 193.19.109.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aUM2FoaT7bsEXnJVfJdgCQAAAcY"]
[Thu Dec 18 07:00:38.876956 2025] [:error] [pid 24958:tid 24985] [client 193.19.109.181:54061] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "aUM2FskDOrUkd0wNm2EgGwAAAZg"]
[Thu Dec 18 07:00:45.685842 2025] [:error] [pid 24958:tid 24968] [client 193.19.109.197:46871] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aUM2HckDOrUkd0wNm2EgNAAAAYc"]
[Thu Dec 18 07:00:48.692565 2025] [proxy_fcgi:error] [pid 23645:tid 23654] [client 193.19.109.172:55601] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 07:00:50.452437 2025] [:error] [pid 23645:tid 23657] [client 193.19.109.169:20431] [client 193.19.109.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/function.php"] [unique_id "aUM2Ijf_Rx0Y0ao_QJicuAAAAIo"]
[Thu Dec 18 07:00:51.188162 2025] [:error] [pid 24958:tid 24980] [client 193.19.109.177:54039] [client 193.19.109.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/plugins.php"] [unique_id "aUM2I8kDOrUkd0wNm2EgSgAAAZM"]
[Thu Dec 18 07:00:54.195918 2025] [:error] [pid 23645:tid 23649] [client 193.19.109.199:27111] [client 193.19.109.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aUM2Jjf_Rx0Y0ao_QJic7AAAAII"]
[Thu Dec 18 07:00:54.956172 2025] [:error] [pid 24958:tid 24967] [client 193.19.109.176:39483] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aUM2JskDOrUkd0wNm2EgZwAAAYY"]
[Thu Dec 18 07:01:04.058761 2025] [:error] [pid 23557:tid 23594] [client 193.19.109.189:48909] [client 193.19.109.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aUM2MBYcs6rFVxbdP_lGcAAAAEY"]
[Thu Dec 18 07:01:04.849094 2025] [:error] [pid 23645:tid 23665] [client 193.37.33.230:30759] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aUM2MDf_Rx0Y0ao_QJidmQAAAJI"]
[Thu Dec 18 07:01:10.067869 2025] [:error] [pid 23645:tid 23670] [client 193.19.109.210:60023] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/index.php"] [unique_id "aUM2Njf_Rx0Y0ao_QJid7QAAAJc"]
[Thu Dec 18 07:01:10.807646 2025] [:error] [pid 23557:tid 23602] [client 193.19.109.165:53499] [client 193.19.109.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUM2NhYcs6rFVxbdP_lGdAAAAE4"]
[Thu Dec 18 07:01:11.655790 2025] [:error] [pid 25357:tid 25376] [client 193.19.109.198:29603] [client 193.19.109.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aUM2N4aT7bsEXnJVfJdgjQAAAdE"]
[Thu Dec 18 07:01:18.276805 2025] [:error] [pid 25357:tid 25370] [client 193.19.109.193:43047] [client 193.19.109.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aUM2PoaT7bsEXnJVfJdgtAAAAcs"]
[Thu Dec 18 07:01:20.248113 2025] [:error] [pid 24542:tid 24563] [client 193.19.109.171:36281] [client 193.19.109.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aUM2QEtQz4H2oS3NrDYpsAAAAVM"]
[Thu Dec 18 07:01:27.565590 2025] [:error] [pid 23556:tid 23566] [client 193.19.109.190:40011] [client 193.19.109.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.190, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/js/wp-login.php"] [unique_id "aUM2RxnmLlk3u5yt9kEZvAAAAAY"]
[Thu Dec 18 07:01:34.756126 2025] [:error] [pid 24542:tid 24555] [client 193.19.109.182:48303] [client 193.19.109.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aUM2TktQz4H2oS3NrDYpzwAAAUs"]
[Thu Dec 18 07:01:35.548806 2025] [:error] [pid 23556:tid 23579] [client 193.19.109.164:41499] [client 193.19.109.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.164, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aUM2TxnmLlk3u5yt9kEZ-wAAABM"]
[Thu Dec 18 07:01:50.306950 2025] [proxy_fcgi:error] [pid 24433:tid 24459] [client 193.19.109.208:30033] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 07:02:07.759118 2025] [:error] [pid 25357:tid 25364] [client 193.19.109.184:20717] [client 193.19.109.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aUM2b4aT7bsEXnJVfJdhRwAAAcU"]
[Thu Dec 18 07:02:12.150105 2025] [:error] [pid 25357:tid 25380] [client 193.19.109.188:21491] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aUM2dIaT7bsEXnJVfJdhVQAAAdU"]
[Thu Dec 18 07:02:15.163776 2025] [:error] [pid 23558:tid 23630] [client 193.19.109.198:42545] [client 193.19.109.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aUM2d-Ham9NbgPQa9uZIJQAAAM8"]
[Thu Dec 18 07:02:27.171485 2025] [:error] [pid 24958:tid 24983] [client 193.19.109.192:51739] [client 193.19.109.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aUM2g8kDOrUkd0wNm2EiJAAAAZY"]
[Thu Dec 18 07:02:30.454598 2025] [:error] [pid 23645:tid 23659] [client 193.19.109.185:20869] [client 193.19.109.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aUM2hjf_Rx0Y0ao_QJie5QAAAIw"]
[Thu Dec 18 07:02:33.478813 2025] [:error] [pid 24433:tid 24439] [client 193.19.109.162:41999] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUM2iZ4pN9ycmipm8TgzmAAAAQM"]
[Thu Dec 18 07:02:38.977257 2025] [proxy_fcgi:error] [pid 24958:tid 24968] [client 193.19.109.202:36255] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 07:02:39.477243 2025] [proxy_fcgi:error] [pid 24958:tid 24969] [client 193.19.109.202:36255] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 07:02:39.877695 2025] [:error] [pid 24958:tid 24966] [client 193.19.109.202:36255] [client 193.19.109.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aUM2j8kDOrUkd0wNm2EiQAAAAYU"]
[Thu Dec 18 07:02:40.573482 2025] [:error] [pid 23645:tid 23662] [client 193.19.109.169:38669] [client 193.19.109.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aUM2kDf_Rx0Y0ao_QJie8gAAAI8"]
[Thu Dec 18 07:02:49.000823 2025] [:error] [pid 24542:tid 24548] [client 193.19.109.161:54007] [client 193.19.109.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aUM2mEtQz4H2oS3NrDYqagAAAUQ"]
[Thu Dec 18 07:02:50.978301 2025] [:error] [pid 23556:tid 23564] [client 193.19.109.190:40883] [client 193.19.109.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tiny.php"] [unique_id "aUM2mhnmLlk3u5yt9kEbCQAAAAQ"]
[Thu Dec 18 07:02:55.062929 2025] [:error] [pid 23645:tid 23667] [client 193.37.33.230:43777] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aUM2nzf_Rx0Y0ao_QJifDAAAAJQ"]
[Thu Dec 18 07:03:05.065699 2025] [:error] [pid 25357:tid 25361] [client 193.19.109.192:50397] [client 193.19.109.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aUM2qYaT7bsEXnJVfJdhvAAAAcI"]
[Thu Dec 18 07:03:05.793286 2025] [proxy_fcgi:error] [pid 23645:tid 23660] [client 193.19.109.163:30307] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 07:03:08.660714 2025] [:error] [pid 23556:tid 23567] [client 193.19.109.204:63741] [client 193.19.109.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aUM2rBnmLlk3u5yt9kEbIwAAAAc"]
[Thu Dec 18 07:03:15.364621 2025] [proxy_fcgi:error] [pid 23556:tid 23569] [client 193.19.109.178:61701] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 07:03:17.002138 2025] [:error] [pid 23557:tid 23607] [client 193.19.109.195:45301] [client 193.19.109.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.195, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aUM2tRYcs6rFVxbdP_lHIAAAAFM"]
[Thu Dec 18 07:03:24.183653 2025] [:error] [pid 25357:tid 25360] [client 193.19.109.194:62573] [client 193.19.109.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aUM2vIaT7bsEXnJVfJdh6gAAAcE"]
[Thu Dec 18 07:03:27.111203 2025] [:error] [pid 23645:tid 23660] [client 193.19.109.166:37919] [client 193.19.109.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aUM2vzf_Rx0Y0ao_QJifRwAAAI0"]
[Thu Dec 18 07:03:32.245962 2025] [:error] [pid 24958:tid 24967] [client 193.19.109.205:28299] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aUM2xMkDOrUkd0wNm2EilQAAAYY"]
[Thu Dec 18 07:03:37.089114 2025] [:error] [pid 24433:tid 24436] [client 193.19.109.197:29781] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aUM2yZ4pN9ycmipm8Tg0DwAAAQA"]
[Thu Dec 18 07:03:38.985629 2025] [:error] [pid 24958:tid 24964] [client 193.19.109.193:26003] [client 193.19.109.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aUM2yskDOrUkd0wNm2EiqAAAAYM"]
[Thu Dec 18 07:03:43.179253 2025] [:error] [pid 25357:tid 25366] [client 193.19.109.204:61897] [client 193.19.109.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aUM2z4aT7bsEXnJVfJdiCgAAAcc"]
[Thu Dec 18 07:03:46.258335 2025] [proxy_fcgi:error] [pid 23557:tid 23612] [client 193.19.109.193:27071] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 07:03:46.600644 2025] [:error] [pid 23557:tid 23591] [client 193.19.109.193:27071] [client 193.19.109.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aUM20hYcs6rFVxbdP_lHYQAAAEM"]
[Thu Dec 18 07:03:48.642822 2025] [:error] [pid 24542:tid 24555] [client 193.19.109.201:20491] [client 193.19.109.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/db.php"] [unique_id "aUM21EtQz4H2oS3NrDYq0AAAAUs"]
[Thu Dec 18 07:03:49.368504 2025] [:error] [pid 23556:tid 23567] [client 193.19.109.195:28911] [client 193.19.109.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aUM21RnmLlk3u5yt9kEbZQAAAAc"]
[Thu Dec 18 07:03:50.174783 2025] [:error] [pid 23557:tid 23592] [client 193.19.109.163:41007] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aUM21hYcs6rFVxbdP_lHYwAAAEQ"]
[Thu Dec 18 07:03:50.982470 2025] [:error] [pid 23556:tid 23574] [client 193.37.33.230:46573] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aUM21hnmLlk3u5yt9kEbaQAAAA4"]
[Thu Dec 18 07:03:51.708999 2025] [:error] [pid 23556:tid 23570] [client 193.19.109.200:36557] [client 193.19.109.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aUM21xnmLlk3u5yt9kEbagAAAAo"]
[Thu Dec 18 07:03:52.478736 2025] [:error] [pid 23557:tid 23607] [client 193.19.109.198:52661] [client 193.19.109.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aUM22BYcs6rFVxbdP_lHZQAAAFM"]
[Thu Dec 18 07:03:55.958491 2025] [:error] [pid 23556:tid 23579] [client 193.19.109.162:59187] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aUM22xnmLlk3u5yt9kEbcAAAABM"]
[Thu Dec 18 07:03:56.785111 2025] [:error] [pid 23557:tid 23599] [client 193.19.109.163:50649] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aUM23BYcs6rFVxbdP_lHaQAAAEs"]
[Thu Dec 18 07:03:58.603620 2025] [:error] [pid 24958:tid 24974] [client 193.19.109.208:58209] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aUM23skDOrUkd0wNm2Ei4wAAAY0"]
[Thu Dec 18 07:04:00.298051 2025] [:error] [pid 25357:tid 25378] [client 193.37.33.229:52513] [client 193.37.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aUM24IaT7bsEXnJVfJdiFwAAAdM"]
[Thu Dec 18 07:04:03.675645 2025] [:error] [pid 24958:tid 24980] [client 193.19.109.162:55893] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aUM248kDOrUkd0wNm2Ei7wAAAZM"]
[Thu Dec 18 07:04:04.496914 2025] [proxy_fcgi:error] [pid 24958:tid 24983] [client 193.19.109.205:20177] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 07:04:08.385122 2025] [:error] [pid 23645:tid 23668] [client 193.37.33.229:64155] [client 193.37.33.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.229, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aUM26Df_Rx0Y0ao_QJifbgAAAJU"]
[Thu Dec 18 07:04:15.447840 2025] [:error] [pid 25357:tid 25374] [client 193.19.109.183:53837] [client 193.19.109.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aUM274aT7bsEXnJVfJdiOQAAAc8"]
[Thu Dec 18 07:04:16.172827 2025] [:error] [pid 23556:tid 23581] [client 193.19.109.184:23531] [client 193.19.109.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aUM28BnmLlk3u5yt9kEbmwAAABU"]
[Thu Dec 18 07:04:38.561842 2025] [:error] [pid 23558:tid 23621] [client 193.19.109.169:49119] [client 193.19.109.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUM3BuHam9NbgPQa9uZIyAAAAMY"]
[Thu Dec 18 07:04:39.652721 2025] [:error] [pid 23557:tid 23593] [client 193.19.109.165:48997] [client 193.19.109.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aUM3BxYcs6rFVxbdP_lHrAAAAEU"]
[Thu Dec 18 07:04:40.377255 2025] [:error] [pid 25357:tid 25371] [client 193.19.109.197:56559] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aUM3CIaT7bsEXnJVfJdiZQAAAcw"]
[Thu Dec 18 07:04:48.256192 2025] [:error] [pid 24433:tid 24448] [client 193.19.109.190:20083] [client 193.19.109.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aUM3EJ4pN9ycmipm8Tg0kgAAAQw"]
[Thu Dec 18 07:04:48.981307 2025] [:error] [pid 25357:tid 25381] [client 193.19.109.167:24713] [client 193.19.109.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aUM3EIaT7bsEXnJVfJdicgAAAdY"]
[Thu Dec 18 07:04:49.749946 2025] [:error] [pid 25357:tid 25377] [client 193.19.109.209:63865] [client 193.19.109.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aUM3EYaT7bsEXnJVfJdidQAAAdI"]
[Thu Dec 18 07:04:54.665768 2025] [:error] [pid 23557:tid 23597] [client 193.37.33.229:36713] [client 193.37.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aUM3FhYcs6rFVxbdP_lHvQAAAEk"]
[Thu Dec 18 07:04:56.504787 2025] [:error] [pid 24542:tid 24559] [client 193.19.109.167:57205] [client 193.19.109.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aUM3GEtQz4H2oS3NrDYrJgAAAU8"]
[Thu Dec 18 07:04:59.370961 2025] [:error] [pid 23558:tid 23631] [client 193.19.109.198:25599] [client 193.19.109.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aUM3G-Ham9NbgPQa9uZI5QAAANA"]
[Thu Dec 18 07:05:12.683840 2025] [:error] [pid 23557:tid 23599] [client 193.19.109.200:44113] [client 193.19.109.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aUM3KBYcs6rFVxbdP_lH1wAAAEs"]
[Thu Dec 18 07:05:15.992963 2025] [:error] [pid 24958:tid 24984] [client 193.19.109.210:32117] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/about.php"] [unique_id "aUM3K8kDOrUkd0wNm2EjuQAAAZc"]
[Thu Dec 18 07:05:23.480009 2025] [:error] [pid 23557:tid 23606] [client 193.19.109.164:49999] [client 193.19.109.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aUM3MxYcs6rFVxbdP_lH5QAAAFI"]
[Thu Dec 18 07:05:26.673912 2025] [:error] [pid 24433:tid 24453] [client 193.19.109.176:29755] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aUM3Np4pN9ycmipm8Tg0_gAAARE"]
[Thu Dec 18 07:05:31.970662 2025] [:error] [pid 25357:tid 25379] [client 193.19.109.182:43789] [client 193.19.109.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aUM3O4aT7bsEXnJVfJdiqwAAAdQ"]
[Thu Dec 18 07:05:38.267221 2025] [:error] [pid 23557:tid 23608] [client 193.19.109.200:48457] [client 193.19.109.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aUM3QhYcs6rFVxbdP_lH7QAAAFQ"]
[Thu Dec 18 07:05:42.376929 2025] [:error] [pid 23556:tid 23562] [client 193.19.109.209:30189] [client 193.19.109.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aUM3RhnmLlk3u5yt9kEcJwAAAAI"]
[Thu Dec 18 07:05:43.150249 2025] [:error] [pid 24542:tid 24544] [client 193.19.109.201:21605] [client 193.19.109.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aUM3R0tQz4H2oS3NrDYrbAAAAUA"]
[Thu Dec 18 07:05:51.068808 2025] [:error] [pid 23557:tid 23601] [client 193.19.109.193:27759] [client 193.19.109.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aUM3TxYcs6rFVxbdP_lH_wAAAE0"]
[Thu Dec 18 07:05:56.456176 2025] [:error] [pid 23557:tid 23596] [client 193.19.109.209:49409] [client 193.19.109.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aUM3VBYcs6rFVxbdP_lICAAAAEg"]
[Thu Dec 18 07:06:01.697945 2025] [:error] [pid 23558:tid 23636] [client 193.19.109.204:38359] [client 193.19.109.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aUM3WeHam9NbgPQa9uZJOAAAANU"]
[Thu Dec 18 07:06:02.561008 2025] [:error] [pid 23558:tid 23625] [client 193.19.109.179:49391] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aUM3WuHam9NbgPQa9uZJOgAAAMo"]
[Thu Dec 18 07:06:05.844650 2025] [:error] [pid 24542:tid 24560] [client 193.19.109.192:54967] [client 193.19.109.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aUM3XUtQz4H2oS3NrDYrlwAAAVA"]
[Thu Dec 18 07:06:09.574840 2025] [:error] [pid 24542:tid 24550] [client 193.19.109.184:31587] [client 193.19.109.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/install.php"] [unique_id "aUM3YUtQz4H2oS3NrDYroQAAAUY"]
[Thu Dec 18 07:06:10.381728 2025] [:error] [pid 23558:tid 23627] [client 193.19.109.180:35183] [client 193.19.109.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aUM3YuHam9NbgPQa9uZJRAAAAMw"]
[Thu Dec 18 07:06:18.376969 2025] [:error] [pid 23557:tid 23605] [client 193.19.109.207:36051] [client 193.19.109.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/category-double.php"] [unique_id "aUM3ahYcs6rFVxbdP_lIHAAAAFE"]
[Thu Dec 18 07:06:21.384407 2025] [:error] [pid 25357:tid 25366] [client 193.19.109.172:28701] [client 193.19.109.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aUM3bYaT7bsEXnJVfJdi6wAAAcc"]
[Thu Dec 18 07:06:22.157099 2025] [:error] [pid 23556:tid 23584] [client 193.19.109.172:25953] [client 193.19.109.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aUM3bhnmLlk3u5yt9kEcYAAAABg"]
[Thu Dec 18 07:06:25.382737 2025] [:error] [pid 25357:tid 25363] [client 193.19.109.163:29941] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aUM3cYaT7bsEXnJVfJdi8wAAAcQ"]
[Thu Dec 18 07:06:28.464074 2025] [:error] [pid 23556:tid 23562] [client 193.19.109.192:52029] [client 193.19.109.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aUM3dBnmLlk3u5yt9kEccQAAAAI"]
[Thu Dec 18 07:06:34.379561 2025] [:error] [pid 24433:tid 24438] [client 193.19.109.199:65125] [client 193.19.109.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aUM3ep4pN9ycmipm8Tg1igAAAQI"]
[Thu Dec 18 07:06:38.460002 2025] [:error] [pid 24433:tid 24439] [client 193.19.109.183:45845] [client 193.19.109.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aUM3fp4pN9ycmipm8Tg1jAAAAQM"]
[Thu Dec 18 07:06:41.751895 2025] [:error] [pid 24542:tid 24544] [client 193.19.109.196:55945] [client 193.19.109.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aUM3gUtQz4H2oS3NrDYr7AAAAUA"]
[Thu Dec 18 07:06:43.660113 2025] [:error] [pid 24542:tid 24545] [client 193.19.109.178:49637] [client 193.19.109.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/as.php"] [unique_id "aUM3g0tQz4H2oS3NrDYr8AAAAUE"]
[Thu Dec 18 07:06:45.544410 2025] [:error] [pid 25357:tid 25372] [client 193.19.109.186:54409] [client 193.19.109.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aUM3hYaT7bsEXnJVfJdjGQAAAc0"]
[Thu Dec 18 07:06:46.254404 2025] [:error] [pid 24958:tid 24965] [client 193.19.109.164:49675] [client 193.19.109.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/install.php"] [unique_id "aUM3hskDOrUkd0wNm2EkRAAAAYQ"]
[Thu Dec 18 07:06:46.984924 2025] [:error] [pid 23557:tid 23590] [client 193.19.109.196:38945] [client 193.19.109.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aUM3hhYcs6rFVxbdP_lIRgAAAEI"]
[Thu Dec 18 07:06:54.594877 2025] [:error] [pid 25357:tid 25375] [client 193.19.109.180:43371] [client 193.19.109.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aUM3joaT7bsEXnJVfJdjNAAAAdA"]
[Thu Dec 18 07:06:58.759582 2025] [:error] [pid 23558:tid 23619] [client 193.19.109.195:42751] [client 193.19.109.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rk2.php"] [unique_id "aUM3kuHam9NbgPQa9uZJwAAAAMQ"]
[Thu Dec 18 07:07:02.882528 2025] [:error] [pid 23558:tid 23639] [client 193.19.109.210:40729] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aUM3luHam9NbgPQa9uZJwQAAANg"]
[Thu Dec 18 07:07:07.275083 2025] [:error] [pid 23556:tid 23569] [client 193.19.109.194:24353] [client 193.19.109.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aUM3mxnmLlk3u5yt9kEcpgAAAAk"]
[Thu Dec 18 07:07:14.865678 2025] [:error] [pid 23558:tid 23635] [client 193.19.109.174:48825] [client 193.19.109.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aUM3ouHam9NbgPQa9uZJxwAAANQ"]
[Thu Dec 18 07:07:16.669789 2025] [:error] [pid 23557:tid 23608] [client 193.19.109.185:32227] [client 193.19.109.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aUM3pBYcs6rFVxbdP_lIawAAAFQ"]
[Thu Dec 18 07:07:18.582673 2025] [:error] [pid 23556:tid 23566] [client 193.19.109.191:37821] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aUM3phnmLlk3u5yt9kEcsAAAAAY"]
[Thu Dec 18 07:07:21.677401 2025] [:error] [pid 25357:tid 25379] [client 193.19.109.207:44615] [client 193.19.109.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aUM3qYaT7bsEXnJVfJdjZwAAAdQ"]
[Thu Dec 18 07:07:31.191630 2025] [:error] [pid 24433:tid 24436] [client 193.19.109.178:29663] [client 193.19.109.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aUM3s54pN9ycmipm8Tg11AAAAQA"]
[Thu Dec 18 07:07:31.968982 2025] [:error] [pid 23645:tid 23648] [client 193.19.109.179:47205] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aUM3szf_Rx0Y0ao_QJiguQAAAIE"]
[Thu Dec 18 07:07:35.650373 2025] [:error] [pid 25357:tid 25369] [client 193.19.109.183:31351] [client 193.19.109.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aUM3t4aT7bsEXnJVfJdjjQAAAco"]
[Thu Dec 18 07:07:36.451718 2025] [:error] [pid 23645:tid 23669] [client 193.19.109.175:53195] [client 193.19.109.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aUM3uDf_Rx0Y0ao_QJigugAAAJY"]
[Thu Dec 18 07:07:40.844541 2025] [:error] [pid 23558:tid 23635] [client 193.19.109.172:32553] [client 193.19.109.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aUM3vOHam9NbgPQa9uZJ6AAAANQ"]
[Thu Dec 18 07:07:41.570178 2025] [:error] [pid 23645:tid 23657] [client 193.19.109.176:50053] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aUM3vTf_Rx0Y0ao_QJigvQAAAIo"]
[Thu Dec 18 07:07:42.274163 2025] [:error] [pid 24433:tid 24449] [client 193.19.109.161:21699] [client 193.19.109.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.161, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUM3vp4pN9ycmipm8Tg14AAAAQ0"]
[Thu Dec 18 07:07:42.280192 2025] [proxy_fcgi:error] [pid 24433:tid 24449] [client 193.19.109.161:21699] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 07:07:42.630832 2025] [:error] [pid 24433:tid 24453] [client 193.19.109.161:21699] [client 193.19.109.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aUM3vp4pN9ycmipm8Tg14QAAARE"]
[Thu Dec 18 07:07:46.451676 2025] [:error] [pid 24433:tid 24451] [client 193.19.109.188:45439] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aUM3wp4pN9ycmipm8Tg16QAAAQ8"]
[Thu Dec 18 07:07:47.164045 2025] [:error] [pid 23556:tid 23574] [client 193.19.109.172:38723] [client 193.19.109.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/network.php"] [unique_id "aUM3wxnmLlk3u5yt9kEcyQAAAA4"]
[Thu Dec 18 07:07:55.588570 2025] [:error] [pid 25357:tid 25359] [client 193.19.109.189:53455] [client 193.19.109.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aUM3y4aT7bsEXnJVfJdjvAAAAcA"]
[Thu Dec 18 07:07:56.570180 2025] [:error] [pid 24433:tid 24454] [client 193.19.109.165:47693] [client 193.19.109.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aUM3zJ4pN9ycmipm8Tg19QAAARI"]
[Thu Dec 18 07:07:59.962736 2025] [:error] [pid 24433:tid 24439] [client 193.19.109.188:55571] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aUM3z54pN9ycmipm8Tg2AwAAAQM"]
[Thu Dec 18 07:08:00.683487 2025] [:error] [pid 23556:tid 23570] [client 193.19.109.166:60877] [client 193.19.109.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aUM30BnmLlk3u5yt9kEc2wAAAAo"]
[Thu Dec 18 07:08:01.477199 2025] [proxy_fcgi:error] [pid 23645:tid 23663] [client 193.37.33.230:64219] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 07:08:01.815713 2025] [:error] [pid 23645:tid 23647] [client 193.37.33.230:64219] [client 193.37.33.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.230, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aUM30Tf_Rx0Y0ao_QJig8wAAAIA"]
[Thu Dec 18 07:08:04.181017 2025] [:error] [pid 25357:tid 25372] [client 193.37.33.230:61679] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aUM31IaT7bsEXnJVfJdj5AAAAc0"]
[Thu Dec 18 07:08:18.163005 2025] [autoindex:error] [pid 24958:tid 24964] [client 193.19.109.170:43997] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:18.578237 2025] [autoindex:error] [pid 24958:tid 24963] [client 193.19.109.170:43997] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:18.924930 2025] [autoindex:error] [pid 24958:tid 24985] [client 193.19.109.170:43997] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:19.293771 2025] [autoindex:error] [pid 24958:tid 24962] [client 193.19.109.170:43997] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:21.876762 2025] [autoindex:error] [pid 23558:tid 23623] [client 193.19.109.184:35791] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:22.299031 2025] [autoindex:error] [pid 23558:tid 23615] [client 193.19.109.184:35791] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:22.676239 2025] [autoindex:error] [pid 23558:tid 23639] [client 193.19.109.184:35791] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:23.021969 2025] [autoindex:error] [pid 23558:tid 23631] [client 193.19.109.184:35791] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:24.878298 2025] [autoindex:error] [pid 23556:tid 23582] [client 193.19.109.171:48305] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:26.966957 2025] [autoindex:error] [pid 23556:tid 23566] [client 193.19.109.171:48305] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:27.313007 2025] [autoindex:error] [pid 23556:tid 23584] [client 193.19.109.171:48305] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:30.285761 2025] [autoindex:error] [pid 25357:tid 25382] [client 193.19.109.190:55851] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:30.674602 2025] [autoindex:error] [pid 25357:tid 25375] [client 193.19.109.190:55851] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:31.073821 2025] [autoindex:error] [pid 25357:tid 25373] [client 193.19.109.190:55851] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:31.422337 2025] [autoindex:error] [pid 25357:tid 25368] [client 193.19.109.190:55851] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:36.386114 2025] [autoindex:error] [pid 23558:tid 23625] [client 193.19.109.171:42169] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:38.964717 2025] [autoindex:error] [pid 24433:tid 24443] [client 193.19.109.210:27993] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:39.319356 2025] [autoindex:error] [pid 24433:tid 24448] [client 193.19.109.210:27993] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:39.690058 2025] [autoindex:error] [pid 24433:tid 24437] [client 193.19.109.210:27993] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:43.479923 2025] [autoindex:error] [pid 25357:tid 25377] [client 193.19.109.165:52613] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:47.060152 2025] [autoindex:error] [pid 24542:tid 24566] [client 193.19.109.169:63783] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:48.472755 2025] [autoindex:error] [pid 24542:tid 24557] [client 193.19.109.196:30479] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:48.912115 2025] [autoindex:error] [pid 24542:tid 24567] [client 193.19.109.196:30479] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:49.779361 2025] [proxy_fcgi:error] [pid 24542:tid 24548] [client 193.19.109.196:30479] AH01071: Got error 'PHP message: PHP Warning:  Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/crosscen/public_html/wp-includes/blocks/index.php on line 8PHP message: PHP Warning:  Use of undefined constant WPINC - assumed 'WPINC' (this will throw an Error in a future version of PHP) in /home/crosscen/public_html/wp-includes/blocks/index.php on line 8PHP message: PHP Warning:  require(ABSPATHWPINC/blocks/legacy-widget.php): failed to open stream: No such file or directory in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11PHP message: PHP Warning:  require(ABSPATHWPINC/blocks/legacy-widget.php): failed to open stream: No such file or directory in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11PHP message: PHP Fatal error:  require(): Failed opening required 'ABSPATHWPINC/blocks/legacy-widget.php' (include_path='.:') in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11'
[Thu Dec 18 07:08:50.571827 2025] [autoindex:error] [pid 23557:tid 23602] [client 193.19.109.193:25245] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:50.918796 2025] [autoindex:error] [pid 23557:tid 23607] [client 193.19.109.193:25245] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:51.307812 2025] [autoindex:error] [pid 23557:tid 23603] [client 193.19.109.193:25245] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:08:54.881070 2025] [autoindex:error] [pid 24958:tid 24984] [client 193.19.109.185:59545] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:09:28.603129 2025] [autoindex:error] [pid 24542:tid 24552] [client 193.19.109.188:32753] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:09:28.976842 2025] [autoindex:error] [pid 24542:tid 24546] [client 193.19.109.188:32753] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:09:29.366771 2025] [autoindex:error] [pid 24542:tid 24548] [client 193.19.109.188:32753] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:09:29.716773 2025] [autoindex:error] [pid 24542:tid 24562] [client 193.19.109.188:32753] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:09:30.102731 2025] [autoindex:error] [pid 24542:tid 24563] [client 193.19.109.188:32753] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:09:30.492411 2025] [autoindex:error] [pid 24542:tid 24554] [client 193.19.109.188:32753] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:09:30.971534 2025] [autoindex:error] [pid 24542:tid 24549] [client 193.19.109.188:32753] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:09:31.333748 2025] [autoindex:error] [pid 24542:tid 24560] [client 193.19.109.188:32753] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:09:32.866311 2025] [autoindex:error] [pid 23557:tid 23608] [client 193.19.109.181:36043] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:09:34.380337 2025] [autoindex:error] [pid 23557:tid 23596] [client 193.19.109.207:37355] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:09:34.768842 2025] [autoindex:error] [pid 23557:tid 23588] [client 193.19.109.207:37355] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:09:35.111176 2025] [autoindex:error] [pid 23557:tid 23612] [client 193.19.109.207:37355] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:09:35.482794 2025] [autoindex:error] [pid 23557:tid 23598] [client 193.19.109.207:37355] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/wlw/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:09:35.868976 2025] [autoindex:error] [pid 23557:tid 23611] [client 193.19.109.207:37355] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:09:37.107320 2025] [autoindex:error] [pid 23557:tid 23599] [client 193.19.109.207:37355] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:09:37.497157 2025] [autoindex:error] [pid 23557:tid 23605] [client 193.19.109.207:37355] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:09:37.896814 2025] [autoindex:error] [pid 23557:tid 23606] [client 193.19.109.207:37355] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:10:05.186949 2025] [autoindex:error] [pid 23556:tid 23568] [client 193.19.109.179:52241] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:10:19.397402 2025] [autoindex:error] [pid 24542:tid 24568] [client 193.19.109.210:47571] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:10:24.175975 2025] [autoindex:error] [pid 24542:tid 24567] [client 193.19.109.205:27863] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:10:24.522009 2025] [autoindex:error] [pid 24542:tid 24545] [client 193.19.109.205:27863] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:10:24.921900 2025] [autoindex:error] [pid 24542:tid 24549] [client 193.19.109.205:27863] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/XML/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:10:28.708383 2025] [autoindex:error] [pid 23556:tid 23579] [client 193.19.109.187:32493] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:10:29.081522 2025] [autoindex:error] [pid 23556:tid 23575] [client 193.19.109.187:32493] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:10:29.426392 2025] [autoindex:error] [pid 23556:tid 23583] [client 193.19.109.187:32493] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:10:29.804522 2025] [autoindex:error] [pid 23556:tid 23570] [client 193.19.109.187:32493] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:10:30.208177 2025] [autoindex:error] [pid 23556:tid 23560] [client 193.19.109.187:32493] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:10:30.583863 2025] [autoindex:error] [pid 23556:tid 23569] [client 193.19.109.187:32493] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:10:31.110511 2025] [autoindex:error] [pid 23556:tid 23574] [client 193.19.109.187:32493] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:10:31.488784 2025] [autoindex:error] [pid 23556:tid 23567] [client 193.19.109.187:32493] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:10:31.875837 2025] [autoindex:error] [pid 23556:tid 23563] [client 193.19.109.187:32493] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:10:56.176619 2025] [autoindex:error] [pid 23645:tid 23652] [client 193.19.109.195:51233] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 14:51:54.132391 2025] [:error] [pid 23558:tid 23619] [client 209.97.180.8:57620] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUOkiuHam9NbgPQa9uakMQAAAMQ"]
[Thu Dec 18 14:52:03.195889 2025] [authz_core:error] [pid 12383:tid 12396] [client 209.97.180.8:38924] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Thu Dec 18 14:52:07.346212 2025] [:error] [pid 12239:tid 12261] [client 209.97.180.8:38962] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aUOkl9NnXxfGIuWO6amxQQAAApE"]
[Thu Dec 18 14:52:09.355705 2025] [:error] [pid 24542:tid 24565] [client 209.97.180.8:43068] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aUOkmUtQz4H2oS3NrDaUmgAAAVU"]
[Thu Dec 18 18:46:39.615954 2025] [:error] [pid 23556:tid 23575] [client 173.239.218.102:25631] [client 173.239.218.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.102, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUPbjxnmLlk3u5yt9kHKmQAAAA8"]
[Thu Dec 18 20:17:26.187838 2025] [:error] [pid 25357:tid 25373] [client 173.239.218.113:63825] [client 173.239.218.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.113, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUPw1oaT7bsEXnJVfJdcHQAAAc4"]
[Thu Dec 18 20:17:26.187838 2025] [:error] [pid 12239:tid 12248] [client 173.239.218.79:48797] [client 173.239.218.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.79, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUPw1tNnXxfGIuWO6akElgAAAoQ"]
[Thu Dec 18 20:23:11.135282 2025] [:error] [pid 23556:tid 23584] [client 173.239.218.77:56653] [client 173.239.218.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.77, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUPyLxnmLlk3u5yt9kHdPAAAABg"]
[Thu Dec 18 20:23:11.145635 2025] [:error] [pid 24433:tid 24454] [client 173.239.218.82:23145] [client 173.239.218.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.82, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUPyL54pN9ycmipm8TjPGwAAARI"]
[Thu Dec 18 20:25:25.280945 2025] [:error] [pid 23558:tid 23618] [client 159.89.127.165:47380] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUPyteHam9NbgPQa9uYVhQAAAMM"]
[Thu Dec 18 20:25:33.526313 2025] [authz_core:error] [pid 12035:tid 12045] [client 159.89.127.165:47428] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Thu Dec 18 20:25:37.307147 2025] [:error] [pid 12383:tid 12408] [client 159.89.127.165:49450] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aUPywfdgllo9h1cyxGa8JAAAAtY"]
[Thu Dec 18 20:25:39.276103 2025] [:error] [pid 12383:tid 12406] [client 159.89.127.165:49458] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aUPyw_dgllo9h1cyxGa8JQAAAtQ"]
[Thu Dec 18 20:28:40.399999 2025] [:error] [pid 24433:tid 24443] [client 173.239.218.110:37553] [client 173.239.218.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.110, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUPzeJ4pN9ycmipm8TjP9wAAAQc"]
[Thu Dec 18 20:28:41.386581 2025] [:error] [pid 23558:tid 23631] [client 173.239.218.97:23841] [client 173.239.218.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.97, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUPzeeHam9NbgPQa9uYWVgAAANA"]
[Thu Dec 18 20:34:12.901286 2025] [:error] [pid 24433:tid 24449] [client 173.239.218.88:23075] [client 173.239.218.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.88, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUP0xJ4pN9ycmipm8TjQ9gAAAQ0"]
[Thu Dec 18 20:34:12.901292 2025] [:error] [pid 23558:tid 23637] [client 173.239.218.103:51121] [client 173.239.218.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.103, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUP0xOHam9NbgPQa9uYXlAAAANY"]
[Thu Dec 18 20:40:40.518079 2025] [:error] [pid 23556:tid 23579] [client 173.239.218.124:34029] [client 173.239.218.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.124, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUP2SBnmLlk3u5yt9kHhDwAAABM"]
[Thu Dec 18 20:40:40.518190 2025] [:error] [pid 23556:tid 23567] [client 173.239.218.105:46107] [client 173.239.218.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.105, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUP2SBnmLlk3u5yt9kHhDgAAAAc"]
[Thu Dec 18 20:48:54.872408 2025] [:error] [pid 12239:tid 12245] [client 194.5.52.24:36523] [client 194.5.52.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.52.24, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUP4NtNnXxfGIuWO6akMIgAAAoE"]
[Thu Dec 18 20:48:55.929777 2025] [:error] [pid 12239:tid 12250] [client 173.239.218.89:25157] [client 173.239.218.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.89, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUP4N9NnXxfGIuWO6akMJAAAAoY"]
[Thu Dec 18 20:58:20.264238 2025] [:error] [pid 12239:tid 12260] [client 173.239.218.103:61171] [client 173.239.218.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.103, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUP6bNNnXxfGIuWO6akPwwAAApA"]
[Thu Dec 18 20:58:20.264302 2025] [:error] [pid 24542:tid 24549] [client 173.239.218.82:57651] [client 173.239.218.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.82, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUP6bEtQz4H2oS3NrDYXqgAAAUU"]
[Thu Dec 18 21:09:35.142331 2025] [:error] [pid 12035:tid 12064] [client 173.239.218.115:44301] [client 173.239.218.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.115, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUP9D7cVHrNSHjCo-0qW0QAAAhU"]
[Thu Dec 18 21:09:35.164384 2025] [:error] [pid 24958:tid 24967] [client 173.239.218.85:42679] [client 173.239.218.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.85, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUP9D8kDOrUkd0wNm2HMQQAAAYY"]
[Thu Dec 18 21:21:04.567433 2025] [:error] [pid 23645:tid 23657] [client 173.239.218.99:21959] [client 173.239.218.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.99, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUP_wDf_Rx0Y0ao_QJhfGwAAAIo"]
[Thu Dec 18 21:21:04.567577 2025] [:error] [pid 12239:tid 12248] [client 173.239.218.93:48147] [client 173.239.218.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUP_wNNnXxfGIuWO6akXUwAAAoQ"]
[Thu Dec 18 21:32:44.213917 2025] [:error] [pid 24958:tid 24975] [client 173.239.218.93:57937] [client 173.239.218.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQCfMkDOrUkd0wNm2HRbQAAAY4"]
[Thu Dec 18 21:32:44.219020 2025] [:error] [pid 23556:tid 23580] [client 173.239.218.101:44649] [client 173.239.218.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.101, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQCfBnmLlk3u5yt9kHtRwAAABQ"]
[Thu Dec 18 21:44:44.700934 2025] [:error] [pid 12035:tid 12063] [client 173.239.218.125:35423] [client 173.239.218.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.125, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQFTLcVHrNSHjCo-0qevAAAAhQ"]
[Thu Dec 18 21:44:44.706408 2025] [:error] [pid 25357:tid 25377] [client 173.239.218.94:21167] [client 173.239.218.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.94, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQFTIaT7bsEXnJVfJdzIAAAAdI"]
[Thu Dec 18 22:02:56.022285 2025] [:error] [pid 23558:tid 23631] [client 173.239.218.75:36409] [client 173.239.218.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.75, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQJkOHam9NbgPQa9uYy3QAAANA"]
[Thu Dec 18 22:02:56.022921 2025] [:error] [pid 25357:tid 25383] [client 173.239.218.94:22501] [client 173.239.218.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.94, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQJkIaT7bsEXnJVfJd3HgAAAdg"]
[Thu Dec 18 22:21:07.219871 2025] [:error] [pid 12239:tid 12245] [client 173.239.218.113:27353] [client 173.239.218.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.113, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQN09NnXxfGIuWO6aktKQAAAoE"]
[Thu Dec 18 22:21:07.236994 2025] [:error] [pid 12035:tid 12061] [client 173.239.218.126:58247] [client 173.239.218.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.126, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQN07cVHrNSHjCo-0qjzAAAAhI"]
[Thu Dec 18 22:33:56.117916 2025] [:error] [pid 24542:tid 24562] [client 173.239.218.103:39815] [client 173.239.218.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.103, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQQ1EtQz4H2oS3NrDY0QQAAAVI"]
[Thu Dec 18 22:33:56.117972 2025] [:error] [pid 24958:tid 24961] [client 173.239.218.100:27449] [client 173.239.218.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.100, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQQ1MkDOrUkd0wNm2Ha0wAAAYA"]
[Thu Dec 18 22:45:49.818695 2025] [:error] [pid 24958:tid 24974] [client 173.239.218.88:33479] [client 173.239.218.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.88, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQTnckDOrUkd0wNm2HcHwAAAY0"]
[Thu Dec 18 22:45:50.019399 2025] [:error] [pid 23556:tid 23582] [client 173.239.218.89:58923] [client 173.239.218.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.89, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQTnhnmLlk3u5yt9kH8MAAAABY"]
[Thu Dec 18 22:57:33.467222 2025] [:error] [pid 23558:tid 23619] [client 173.239.218.91:37909] [client 173.239.218.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.91, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQWXeHam9NbgPQa9uY9jwAAAMQ"]
[Thu Dec 18 22:57:33.469253 2025] [:error] [pid 23556:tid 23566] [client 173.239.218.118:52403] [client 173.239.218.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.118, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQWXRnmLlk3u5yt9kH9qwAAAAY"]
[Thu Dec 18 23:08:52.107814 2025] [:error] [pid 24542:tid 24561] [client 173.239.218.83:29491] [client 173.239.218.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.83, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQZBEtQz4H2oS3NrDY9lwAAAVE"]
[Thu Dec 18 23:08:52.108805 2025] [:error] [pid 25357:tid 25373] [client 173.239.218.104:21107] [client 173.239.218.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.104, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQZBIaT7bsEXnJVfJeBlAAAAc4"]
[Thu Dec 18 23:17:54.855627 2025] [:error] [pid 12239:tid 12245] [client 165.22.34.189:47666] [client 165.22.34.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUQbItNnXxfGIuWO6ak4ugAAAoE"]
[Thu Dec 18 23:18:03.045759 2025] [authz_core:error] [pid 24958:tid 24985] [client 165.22.34.189:56372] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Thu Dec 18 23:18:06.844965 2025] [:error] [pid 23556:tid 23581] [client 165.22.34.189:56406] [client 165.22.34.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aUQbLhnmLlk3u5yt9kEARQAAABU"]
[Thu Dec 18 23:18:08.853148 2025] [:error] [pid 23556:tid 23571] [client 165.22.34.189:56518] [client 165.22.34.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aUQbMBnmLlk3u5yt9kEATQAAAAs"]
[Thu Dec 18 23:20:11.034823 2025] [:error] [pid 12383:tid 12395] [client 173.239.218.76:54345] [client 173.239.218.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQbq_dgllo9h1cyxGbZ1QAAAsk"]
[Thu Dec 18 23:20:11.035278 2025] [:error] [pid 12239:tid 12244] [client 173.239.218.80:34011] [client 173.239.218.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.80, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQbq9NnXxfGIuWO6ak5VAAAAoA"]
[Thu Dec 18 23:35:15.445761 2025] [:error] [pid 24542:tid 24550] [client 173.239.218.101:49821] [client 173.239.218.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.101, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQfM0tQz4H2oS3NrDZDUQAAAUY"]
[Thu Dec 18 23:35:15.445884 2025] [:error] [pid 12239:tid 12253] [client 173.239.218.117:60057] [client 173.239.218.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.117, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQfM9NnXxfGIuWO6ak-VQAAAok"]
[Thu Dec 18 23:46:49.676583 2025] [:error] [pid 24958:tid 24970] [client 173.239.218.120:25623] [client 173.239.218.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.120, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQh6ckDOrUkd0wNm2Hj0QAAAYk"]
[Thu Dec 18 23:46:49.677642 2025] [:error] [pid 24542:tid 24564] [client 173.239.218.90:20971] [client 173.239.218.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.90, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQh6UtQz4H2oS3NrDZF-QAAAVQ"]
[Thu Dec 18 23:57:30.841863 2025] [:error] [pid 24433:tid 24449] [client 173.239.218.77:52635] [client 173.239.218.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.77, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQkap4pN9ycmipm8Tj0qgAAAQ0"]
[Thu Dec 18 23:57:30.841871 2025] [:error] [pid 24433:tid 24443] [client 173.239.218.124:24889] [client 173.239.218.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.124, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQkap4pN9ycmipm8Tj0qQAAAQc"]
[Fri Dec 19 00:08:49.877489 2025] [:error] [pid 25357:tid 25363] [client 173.239.218.84:25211] [client 173.239.218.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.84, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQnEYaT7bsEXnJVfJeMBgAAAcQ"]
[Fri Dec 19 00:08:49.877489 2025] [:error] [pid 24958:tid 24964] [client 173.239.218.116:60905] [client 173.239.218.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.116, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQnEckDOrUkd0wNm2HnBwAAAYM"]
[Fri Dec 19 00:19:35.498449 2025] [:error] [pid 45825:tid 45835] [client 173.239.218.91:46449] [client 173.239.218.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.91, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQpl9ES1ifyzuzFwz8B_gAAAEg"]
[Fri Dec 19 00:19:35.500791 2025] [:error] [pid 45825:tid 45848] [client 173.239.218.88:42717] [client 173.239.218.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.88, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQpl9ES1ifyzuzFwz8B_wAAAFU"]
[Fri Dec 19 00:30:16.747220 2025] [:error] [pid 45825:tid 45850] [client 173.239.218.110:54721] [client 173.239.218.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.110, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQsGNES1ifyzuzFwz8GVgAAAFc"]
[Fri Dec 19 00:30:16.752701 2025] [:error] [pid 45825:tid 45838] [client 173.239.218.99:50197] [client 173.239.218.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.99, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQsGNES1ifyzuzFwz8GVQAAAEs"]
[Fri Dec 19 00:40:57.984792 2025] [:error] [pid 45825:tid 45837] [client 173.239.218.100:52845] [client 173.239.218.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.100, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQumdES1ifyzuzFwz8KRQAAAEo"]
[Fri Dec 19 00:40:57.988451 2025] [:error] [pid 45738:tid 45781] [client 173.239.218.107:38295] [client 173.239.218.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.107, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQumXnw52b7ekJTIU23CQAAAM0"]
[Fri Dec 19 00:51:35.740182 2025] [:error] [pid 45738:tid 45785] [client 173.239.218.75:59039] [client 173.239.218.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.75, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQxF3nw52b7ekJTIU26LwAAANE"]
[Fri Dec 19 00:51:35.740397 2025] [:error] [pid 45738:tid 45771] [client 173.239.218.126:64123] [client 173.239.218.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.126, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQxF3nw52b7ekJTIU26MAAAAMM"]
[Fri Dec 19 01:02:10.441971 2025] [:error] [pid 65011:tid 65062] [client 173.239.218.91:22273] [client 173.239.218.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.91, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQzktqlBhOfWMNHM-69UgAAAVE"]
[Fri Dec 19 01:02:10.441971 2025] [:error] [pid 45825:tid 45841] [client 173.239.218.78:30331] [client 173.239.218.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.78, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQzktES1ifyzuzFwz8TugAAAE4"]
[Fri Dec 19 01:12:54.120042 2025] [:error] [pid 45825:tid 45828] [client 173.239.218.78:26767] [client 173.239.218.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.78, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQ2FtES1ifyzuzFwz8XXwAAAEE"]
[Fri Dec 19 01:12:54.120213 2025] [:error] [pid 45737:tid 45754] [client 173.239.218.101:58505] [client 173.239.218.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.101, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQ2FlAGdb8SXm6CLHiRFAAAAA0"]
[Fri Dec 19 01:23:31.267774 2025] [:error] [pid 45737:tid 45764] [client 173.239.218.89:54277] [client 173.239.218.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.89, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQ4k1AGdb8SXm6CLHiT8QAAABc"]
[Fri Dec 19 01:23:31.279932 2025] [:error] [pid 45825:tid 45828] [client 173.239.218.115:47831] [client 173.239.218.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.115, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQ4k9ES1ifyzuzFwz8byQAAAEE"]
[Fri Dec 19 01:34:04.380713 2025] [:error] [pid 65011:tid 65058] [client 173.239.218.79:30375] [client 173.239.218.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.79, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQ7DNqlBhOfWMNHM-7GfAAAAU0"]
[Fri Dec 19 01:34:04.381717 2025] [:error] [pid 37418:tid 37441] [client 173.239.218.89:48279] [client 173.239.218.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.89, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQ7DK0VAcRIm10OnozDAgAAAJU"]
[Fri Dec 19 01:44:44.584251 2025] [:error] [pid 45737:tid 45756] [client 173.239.218.75:37149] [client 173.239.218.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.75, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQ9jFAGdb8SXm6CLHibjQAAAA8"]
[Fri Dec 19 01:44:44.584642 2025] [:error] [pid 45825:tid 45842] [client 173.239.218.105:42713] [client 173.239.218.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.105, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUQ9jNES1ifyzuzFwz8lsAAAAE8"]
[Fri Dec 19 01:55:20.386145 2025] [:error] [pid 37418:tid 37438] [client 173.239.218.113:49699] [client 173.239.218.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.113, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURACK0VAcRIm10OnozJwQAAAJI"]
[Fri Dec 19 01:55:20.386270 2025] [:error] [pid 65011:tid 65044] [client 173.239.218.75:29431] [client 173.239.218.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.75, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURACNqlBhOfWMNHM-7NCQAAAUA"]
[Fri Dec 19 02:05:58.790867 2025] [:error] [pid 45739:tid 45819] [client 173.239.218.86:27245] [client 173.239.218.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.86, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURChuIfOvWlLwqW0X30BwAAARg"]
[Fri Dec 19 02:05:58.795614 2025] [:error] [pid 45825:tid 45838] [client 173.239.218.78:61823] [client 173.239.218.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.78, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURChtES1ifyzuzFwz8ulgAAAEs"]
[Fri Dec 19 02:16:35.325398 2025] [:error] [pid 45825:tid 45850] [client 173.239.218.80:46943] [client 173.239.218.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.80, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURFA9ES1ifyzuzFwz8yEQAAAFc"]
[Fri Dec 19 02:16:35.352604 2025] [:error] [pid 45825:tid 45837] [client 194.5.52.24:62041] [client 194.5.52.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.52.24, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURFA9ES1ifyzuzFwz8yEgAAAEo"]
[Fri Dec 19 02:27:16.555134 2025] [:error] [pid 45825:tid 45847] [client 173.239.218.84:41365] [client 173.239.218.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.84, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURHhNES1ifyzuzFwz81vAAAAFQ"]
[Fri Dec 19 02:27:16.555564 2025] [:error] [pid 45737:tid 45751] [client 173.239.218.111:48743] [client 173.239.218.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.111, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURHhFAGdb8SXm6CLHiorwAAAAo"]
[Fri Dec 19 02:37:56.685564 2025] [:error] [pid 45825:tid 45848] [client 173.239.218.79:57481] [client 173.239.218.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.79, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURKBNES1ifyzuzFwz86lwAAAFU"]
[Fri Dec 19 02:37:56.685560 2025] [:error] [pid 45737:tid 45761] [client 173.239.218.78:39595] [client 173.239.218.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.78, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURKBFAGdb8SXm6CLHisRwAAABQ"]
[Fri Dec 19 02:48:34.859885 2025] [:error] [pid 65011:tid 65053] [client 173.239.218.84:29791] [client 173.239.218.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.84, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURMgtqlBhOfWMNHM-7bNQAAAUg"]
[Fri Dec 19 02:48:34.859919 2025] [:error] [pid 65011:tid 65067] [client 173.239.218.91:44705] [client 173.239.218.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.91, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURMgtqlBhOfWMNHM-7bNAAAAVY"]
[Fri Dec 19 02:59:05.319892 2025] [:error] [pid 45738:tid 45789] [client 173.239.218.105:33995] [client 173.239.218.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.105, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURO-Xnw52b7ekJTIU3ZvQAAANU"]
[Fri Dec 19 02:59:05.320464 2025] [:error] [pid 45739:tid 45810] [client 194.5.52.24:45563] [client 194.5.52.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.52.24, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURO-eIfOvWlLwqW0X0BUQAAAQ8"]
[Fri Dec 19 03:09:39.494455 2025] [:error] [pid 36046:tid 36057] [client 173.239.218.89:64849] [client 173.239.218.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.89, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURRc1yqR0CI241035MCiAAAAYY"]
[Fri Dec 19 03:09:39.495184 2025] [:error] [pid 36046:tid 36062] [client 173.239.218.102:31051] [client 173.239.218.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.102, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURRc1yqR0CI241035MCiQAAAYs"]
[Fri Dec 19 03:20:14.973691 2025] [:error] [pid 42864:tid 42873] [client 173.239.218.120:64167] [client 173.239.218.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.120, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURT7iRvgQZkt33cPD6zigAAAMc"]
[Fri Dec 19 03:20:14.974532 2025] [:error] [pid 42691:tid 42798] [client 173.239.218.97:47215] [client 173.239.218.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.97, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURT7gtHzgnqE3exG3Ah3AAAAEQ"]
[Fri Dec 19 03:30:57.051277 2025] [:error] [pid 45260:tid 45338] [client 173.239.218.122:20561] [client 173.239.218.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.122, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURWcadnfw7J8jr3HVKmLQAAAJU"]
[Fri Dec 19 03:30:57.051277 2025] [:error] [pid 45258:tid 45277] [client 173.239.218.86:49957] [client 173.239.218.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.86, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURWcVnV4AM5HzJQVZqSrgAAAA4"]
[Fri Dec 19 03:41:36.747824 2025] [:error] [pid 18000:tid 18031] [client 173.239.218.83:21771] [client 173.239.218.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.83, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURY8K8X08UzAqa7kpWjrAAAABU"]
[Fri Dec 19 03:41:36.747962 2025] [:error] [pid 18101:tid 18112] [client 173.239.218.90:56451] [client 173.239.218.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.90, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURY8FnmQArPyc-WjDswVgAAAMQ"]
[Fri Dec 19 03:52:11.724840 2025] [:error] [pid 61922:tid 61964] [client 173.239.218.96:57795] [client 173.239.218.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.96, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURbaxsDXYvsvN0FFlAXtgAAAEw"]
[Fri Dec 19 03:52:11.724845 2025] [:error] [pid 62008:tid 62013] [client 173.239.218.77:40041] [client 173.239.218.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.77, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURba5JCOG7NAlbm_OQ49QAAAMI"]
[Fri Dec 19 04:02:55.397791 2025] [:error] [pid 61921:tid 61947] [client 173.239.218.126:53285] [client 173.239.218.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.126, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURd7yI5bruBgrPWiCCpbgAAABY"]
[Fri Dec 19 04:02:55.398272 2025] [:error] [pid 62008:tid 62024] [client 173.239.218.83:38827] [client 173.239.218.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.83, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURd75JCOG7NAlbm_OQ-1wAAAM0"]
[Fri Dec 19 04:13:41.460228 2025] [:error] [pid 62008:tid 62029] [client 173.239.218.100:29245] [client 173.239.218.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.100, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURgdZJCOG7NAlbm_ORBvgAAANI"]
[Fri Dec 19 04:13:41.467945 2025] [:error] [pid 62008:tid 62026] [client 173.239.218.107:34335] [client 173.239.218.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.107, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURgdZJCOG7NAlbm_ORBvwAAAM8"]
[Fri Dec 19 04:24:31.442617 2025] [:error] [pid 62008:tid 62019] [client 173.239.218.89:29095] [client 173.239.218.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.89, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURi_5JCOG7NAlbm_ORFMgAAAMg"]
[Fri Dec 19 04:24:31.445443 2025] [:error] [pid 62008:tid 62035] [client 173.239.218.120:54779] [client 173.239.218.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.120, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURi_5JCOG7NAlbm_ORFMwAAANg"]
[Fri Dec 19 04:35:23.139311 2025] [:error] [pid 64979:tid 64992] [client 173.239.218.126:37205] [client 173.239.218.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.126, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURli8Tf9GnU9RkPzit3tAAAAQs"]
[Fri Dec 19 04:35:23.144603 2025] [:error] [pid 61923:tid 61998] [client 173.239.218.95:62071] [client 173.239.218.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.95, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURli-IJyAkgoURyh1jE5AAAAJM"]
[Fri Dec 19 04:46:16.903148 2025] [:error] [pid 61923:tid 61996] [client 173.239.218.103:48957] [client 173.239.218.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.103, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURoGOIJyAkgoURyh1jLdgAAAJE"]
[Fri Dec 19 04:46:16.904985 2025] [:error] [pid 61921:tid 61949] [client 173.239.218.125:29809] [client 173.239.218.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.125, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURoGCI5bruBgrPWiCC1_AAAABg"]
[Fri Dec 19 04:57:36.083910 2025] [:error] [pid 61922:tid 61971] [client 173.239.218.90:40577] [client 173.239.218.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.90, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURqwBsDXYvsvN0FFlArHQAAAFM"]
[Fri Dec 19 04:57:36.084438 2025] [:error] [pid 61921:tid 61938] [client 173.239.218.99:65379] [client 173.239.218.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.99, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURqwCI5bruBgrPWiCC5vgAAAA0"]
[Fri Dec 19 05:08:22.876284 2025] [:error] [pid 45026:tid 45031] [client 173.239.218.80:54151] [client 173.239.218.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.80, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURtRom-yUUgtemKdxfxXAAAAUI"]
[Fri Dec 19 05:08:22.876279 2025] [:error] [pid 64979:tid 64997] [client 173.239.218.93:34691] [client 173.239.218.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURtRsTf9GnU9RkPziuMogAAARA"]
[Fri Dec 19 05:19:13.508850 2025] [:error] [pid 61922:tid 61958] [client 173.239.218.115:36673] [client 173.239.218.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.115, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURv0RsDXYvsvN0FFlAw4gAAAEY"]
[Fri Dec 19 05:19:13.510240 2025] [:error] [pid 61923:tid 61999] [client 173.239.218.76:20005] [client 173.239.218.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURv0eIJyAkgoURyh1jUlgAAAJQ"]
[Fri Dec 19 05:30:00.146231 2025] [:error] [pid 47035:tid 47060] [client 173.239.218.90:45689] [client 173.239.218.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.90, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURyWIy3wL45ZxTVK_UOrgAAAZc"]
[Fri Dec 19 05:30:00.146664 2025] [:error] [pid 64979:tid 64988] [client 173.239.218.120:48027] [client 173.239.218.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.120, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aURyWMTf9GnU9RkPziuTIQAAAQc"]
[Fri Dec 19 05:40:43.880944 2025] [:error] [pid 62008:tid 62018] [client 173.239.218.100:31637] [client 173.239.218.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.100, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUR025JCOG7NAlbm_ORh0QAAAMc"]
[Fri Dec 19 05:40:43.881732 2025] [:error] [pid 62008:tid 62024] [client 194.5.52.24:54233] [client 194.5.52.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.52.24, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUR025JCOG7NAlbm_ORh0gAAAM0"]
[Fri Dec 19 05:51:24.683663 2025] [:error] [pid 47035:tid 47056] [client 173.239.218.105:50489] [client 173.239.218.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.105, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUR3XIy3wL45ZxTVK_UU7gAAAZM"]
[Fri Dec 19 05:51:24.683675 2025] [:error] [pid 47035:tid 47058] [client 173.239.218.84:32237] [client 173.239.218.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.84, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUR3XIy3wL45ZxTVK_UU7wAAAZU"]
[Fri Dec 19 06:02:06.398894 2025] [:error] [pid 62008:tid 62030] [client 173.239.218.118:43539] [client 173.239.218.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.118, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUR53pJCOG7NAlbm_ORtogAAANM"]
[Fri Dec 19 06:02:06.399382 2025] [:error] [pid 61923:tid 61985] [client 173.239.218.94:25491] [client 173.239.218.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.94, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUR53uIJyAkgoURyh1je3AAAAIY"]
[Fri Dec 19 06:12:48.289719 2025] [:error] [pid 61921:tid 61931] [client 173.239.218.77:50019] [client 173.239.218.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.77, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUR8YCI5bruBgrPWiCDIZgAAAAY"]
[Fri Dec 19 06:12:48.292337 2025] [:error] [pid 61921:tid 61942] [client 173.239.218.116:65483] [client 173.239.218.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.116, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUR8YCI5bruBgrPWiCDIZwAAABE"]
[Fri Dec 19 06:23:30.013397 2025] [:error] [pid 61922:tid 61970] [client 173.239.218.98:55549] [client 173.239.218.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.98, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUR-4hsDXYvsvN0FFlBAAQAAAFI"]
[Fri Dec 19 06:23:30.013397 2025] [:error] [pid 62008:tid 62014] [client 173.239.218.121:23595] [client 173.239.218.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.121, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUR-4pJCOG7NAlbm_OR2wQAAAMM"]
[Fri Dec 19 06:34:09.662360 2025] [:error] [pid 61923:tid 61998] [client 173.239.218.101:50899] [client 173.239.218.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.101, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSBYeIJyAkgoURyh1jmpQAAAJM"]
[Fri Dec 19 06:34:09.662595 2025] [:error] [pid 61922:tid 61962] [client 194.5.52.24:40419] [client 194.5.52.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.52.24, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSBYRsDXYvsvN0FFlBCIwAAAEo"]
[Fri Dec 19 06:42:04.124395 2025] [:error] [pid 61921:tid 61948] [client 170.64.200.173:41806] [client 170.64.200.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aUSDPCI5bruBgrPWiCDP2gAAABc"]
[Fri Dec 19 06:50:00.163831 2025] [:error] [pid 61923:tid 61993] [client 173.239.218.93:57109] [client 173.239.218.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSFGOIJyAkgoURyh1jp6gAAAI4"]
[Fri Dec 19 06:50:00.164360 2025] [:error] [pid 61921:tid 61946] [client 173.239.218.82:29103] [client 173.239.218.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.82, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSFGCI5bruBgrPWiCDRFQAAABU"]
[Fri Dec 19 07:00:44.941846 2025] [:error] [pid 47035:tid 47039] [client 173.239.218.112:26385] [client 173.239.218.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.112, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSHnIy3wL45ZxTVK_Ut8QAAAYI"]
[Fri Dec 19 07:00:44.947593 2025] [:error] [pid 47035:tid 47060] [client 173.239.218.121:58833] [client 173.239.218.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.121, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSHnIy3wL45ZxTVK_Ut8wAAAZc"]
[Fri Dec 19 07:11:31.365302 2025] [:error] [pid 64979:tid 64986] [client 173.239.218.100:31449] [client 173.239.218.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.100, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSKI8Tf9GnU9RkPziuvYgAAAQU"]
[Fri Dec 19 07:11:31.366438 2025] [:error] [pid 64979:tid 64991] [client 173.239.218.83:52091] [client 173.239.218.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.83, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSKI8Tf9GnU9RkPziuvYwAAAQo"]
[Fri Dec 19 07:22:18.163266 2025] [:error] [pid 47035:tid 47056] [client 173.239.218.77:60559] [client 173.239.218.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.77, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSMqoy3wL45ZxTVK_U1WgAAAZM"]
[Fri Dec 19 07:22:18.164323 2025] [:error] [pid 61922:tid 61960] [client 173.239.218.116:53581] [client 173.239.218.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.116, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSMqhsDXYvsvN0FFlBM6QAAAEg"]
[Fri Dec 19 07:33:06.676117 2025] [:error] [pid 47035:tid 47058] [client 173.239.218.103:31405] [client 173.239.218.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.103, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSPMoy3wL45ZxTVK_U4nAAAAZU"]
[Fri Dec 19 07:33:06.676149 2025] [:error] [pid 47035:tid 47041] [client 173.239.218.88:52187] [client 173.239.218.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.88, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSPMoy3wL45ZxTVK_U4mwAAAYQ"]
[Fri Dec 19 07:43:56.095208 2025] [:error] [pid 61921:tid 61944] [client 173.239.218.90:64535] [client 173.239.218.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.90, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSRvCI5bruBgrPWiCDdGQAAABM"]
[Fri Dec 19 07:43:56.095208 2025] [:error] [pid 61923:tid 61987] [client 173.239.218.96:22165] [client 173.239.218.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.96, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSRvOIJyAkgoURyh1j3uQAAAIg"]
[Fri Dec 19 07:54:44.759351 2025] [:error] [pid 47035:tid 47049] [client 173.239.218.116:44939] [client 173.239.218.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.116, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSURIy3wL45ZxTVK_U_HgAAAYw"]
[Fri Dec 19 07:54:44.760091 2025] [:error] [pid 47035:tid 47061] [client 173.239.218.88:29351] [client 173.239.218.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.88, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSURIy3wL45ZxTVK_U_HwAAAZg"]
[Fri Dec 19 08:05:34.450578 2025] [:error] [pid 61921:tid 61940] [client 173.239.218.103:55955] [client 173.239.218.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.103, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSWziI5bruBgrPWiCDg_QAAAA8"]
[Fri Dec 19 08:05:34.450634 2025] [:error] [pid 61921:tid 61942] [client 173.239.218.124:42017] [client 173.239.218.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.124, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSWziI5bruBgrPWiCDg_AAAABE"]
[Fri Dec 19 08:16:29.812015 2025] [:error] [pid 62008:tid 62015] [client 173.239.218.115:27151] [client 173.239.218.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.115, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSZXZJCOG7NAlbm_OSdygAAAMQ"]
[Fri Dec 19 08:16:29.812600 2025] [:error] [pid 62008:tid 62014] [client 173.239.218.93:40667] [client 173.239.218.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSZXZJCOG7NAlbm_OSdywAAAMM"]
[Fri Dec 19 08:27:18.313044 2025] [:error] [pid 64979:tid 65003] [client 173.239.218.114:61823] [client 173.239.218.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.114, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSb5sTf9GnU9RkPzivIcgAAARY"]
[Fri Dec 19 08:27:18.313706 2025] [:error] [pid 64979:tid 64983] [client 173.239.218.81:30425] [client 173.239.218.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.81, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSb5sTf9GnU9RkPzivIcwAAAQI"]
[Fri Dec 19 08:38:16.643235 2025] [:error] [pid 47035:tid 47052] [client 173.239.218.80:33151] [client 173.239.218.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.80, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSeeIy3wL45ZxTVK_VJsAAAAY8"]
[Fri Dec 19 08:38:16.643623 2025] [:error] [pid 61923:tid 61989] [client 194.5.52.24:47207] [client 194.5.52.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.52.24, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSeeOIJyAkgoURyh1gB-wAAAIo"]
[Fri Dec 19 08:48:12.580833 2025] [:error] [pid 64979:tid 64989] [client 173.239.218.110:58957] [client 173.239.218.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.110, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSgzMTf9GnU9RkPzivNRQAAAQg"]
[Fri Dec 19 08:48:12.581119 2025] [:error] [pid 64979:tid 65004] [client 173.239.218.104:51243] [client 173.239.218.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.104, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSgzMTf9GnU9RkPzivNRgAAARc"]
[Fri Dec 19 08:57:12.908320 2025] [:error] [pid 45026:tid 45043] [client 173.239.218.116:37845] [client 173.239.218.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.116, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSi6Im-yUUgtemKdxcpwAAAAU4"]
[Fri Dec 19 08:57:12.908570 2025] [:error] [pid 45026:tid 45037] [client 173.239.218.95:50205] [client 173.239.218.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.95, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSi6Im-yUUgtemKdxcpwQAAAUg"]
[Fri Dec 19 09:04:44.764187 2025] [:error] [pid 62008:tid 62032] [client 173.239.218.77:63497] [client 173.239.218.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.77, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSkrJJCOG7NAlbm_OSq8AAAANU"]
[Fri Dec 19 09:04:44.789223 2025] [:error] [pid 61923:tid 61987] [client 173.239.218.121:58451] [client 173.239.218.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.121, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSkrOIJyAkgoURyh1gFVgAAAIg"]
[Fri Dec 19 09:11:55.243260 2025] [:error] [pid 41956:tid 41979] [client 173.239.218.103:46861] [client 173.239.218.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.103, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSmW5FF_rXxx-Pv5gmhSgAAAZU"]
[Fri Dec 19 09:11:55.243827 2025] [:error] [pid 41890:tid 41945] [client 173.239.218.81:31075] [client 173.239.218.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.81, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSmW5p7boJAsmsdn9EQ7QAAAVM"]
[Fri Dec 19 09:20:34.099379 2025] [:error] [pid 41858:tid 41883] [client 173.239.218.75:50107] [client 173.239.218.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.75, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSoYp0PV23R6CcTulWlkwAAAFc"]
[Fri Dec 19 09:20:34.101670 2025] [:error] [pid 41956:tid 41980] [client 173.239.218.89:27641] [client 173.239.218.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.89, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSoYpFF_rXxx-Pv5gmk4AAAAZY"]
[Fri Dec 19 09:30:05.530343 2025] [:error] [pid 46781:tid 46806] [client 173.239.218.82:38555] [client 173.239.218.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.82, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSqneU9o3uerz7jjegx1wAAABU"]
[Fri Dec 19 09:30:05.532204 2025] [:error] [pid 46781:tid 46805] [client 173.239.218.88:47351] [client 173.239.218.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.88, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSqneU9o3uerz7jjegx2AAAABQ"]
[Fri Dec 19 09:41:04.971045 2025] [:error] [pid 41956:tid 41978] [client 173.239.218.75:56279] [client 173.239.218.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.75, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUStMJFF_rXxx-Pv5gmrRQAAAZQ"]
[Fri Dec 19 09:41:04.971637 2025] [:error] [pid 46781:tid 46798] [client 173.239.218.98:63033] [client 173.239.218.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.98, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUStMOU9o3uerz7jjeg2MQAAAA0"]
[Fri Dec 19 09:52:04.899071 2025] [:error] [pid 41890:tid 41938] [client 173.239.218.108:55725] [client 173.239.218.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.108, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSvxJp7boJAsmsdn9EbIAAAAUw"]
[Fri Dec 19 09:52:04.899217 2025] [:error] [pid 41858:tid 41873] [client 173.239.218.90:49049] [client 173.239.218.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.90, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSvxJ0PV23R6CcTulWsfwAAAE0"]
[Fri Dec 19 10:03:15.003838 2025] [:error] [pid 46781:tid 46801] [client 173.239.218.102:26463] [client 173.239.218.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.102, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSyY-U9o3uerz7jjeg-YAAAABA"]
[Fri Dec 19 10:03:15.004400 2025] [:error] [pid 41889:tid 41906] [client 173.239.218.93:52877] [client 173.239.218.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUSyY4D4vChTJK38lbYPPwAAAQc"]
[Fri Dec 19 10:14:20.702531 2025] [:error] [pid 46781:tid 46786] [client 173.239.218.95:21657] [client 173.239.218.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.95, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUS0_OU9o3uerz7jjehC2AAAAAE"]
[Fri Dec 19 10:14:20.702527 2025] [:error] [pid 41890:tid 41940] [client 173.239.218.94:55993] [client 173.239.218.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.94, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUS0_Jp7boJAsmsdn9EhlgAAAU4"]
[Fri Dec 19 10:25:24.150795 2025] [:error] [pid 41956:tid 41980] [client 173.239.218.103:59747] [client 173.239.218.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.103, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUS3lJFF_rXxx-Pv5gm6KgAAAZY"]
[Fri Dec 19 10:25:24.150795 2025] [:error] [pid 41890:tid 41947] [client 173.239.218.81:21271] [client 173.239.218.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.81, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUS3lJp7boJAsmsdn9ElBgAAAVU"]
[Fri Dec 19 10:36:27.549012 2025] [:error] [pid 46781:tid 46800] [client 173.239.218.81:62389] [client 173.239.218.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.81, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUS6K-U9o3uerz7jjehMywAAAA8"]
[Fri Dec 19 10:36:27.549964 2025] [:error] [pid 41956:tid 41958] [client 173.239.218.81:29695] [client 173.239.218.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.81, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUS6K5FF_rXxx-Pv5gm_0QAAAYA"]
[Fri Dec 19 10:47:31.336298 2025] [:error] [pid 41956:tid 41981] [client 173.239.218.84:45495] [client 173.239.218.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.84, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUS8w5FF_rXxx-Pv5gnFgAAAAZc"]
[Fri Dec 19 10:47:31.337066 2025] [:error] [pid 41890:tid 41934] [client 173.239.218.81:29631] [client 173.239.218.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.81, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUS8w5p7boJAsmsdn9Et0gAAAUg"]
[Fri Dec 19 10:58:33.224432 2025] [:error] [pid 41890:tid 41941] [client 173.239.218.79:26353] [client 173.239.218.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.79, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUS_WZp7boJAsmsdn9Ew0QAAAU8"]
[Fri Dec 19 10:58:33.224455 2025] [:error] [pid 41890:tid 41949] [client 173.239.218.120:32605] [client 173.239.218.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.120, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUS_WZp7boJAsmsdn9Ew0AAAAVc"]
[Fri Dec 19 11:09:35.734308 2025] [:error] [pid 41890:tid 41935] [client 173.239.218.115:61143] [client 173.239.218.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.115, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTB75p7boJAsmsdn9EzwwAAAUk"]
[Fri Dec 19 11:09:35.734900 2025] [:error] [pid 41858:tid 41867] [client 173.239.218.94:31961] [client 173.239.218.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.94, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTB750PV23R6CcTulXD-AAAAEc"]
[Fri Dec 19 11:20:35.600035 2025] [:error] [pid 46781:tid 46785] [client 173.239.218.120:45117] [client 173.239.218.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.120, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTEg-U9o3uerz7jjehd2QAAAAA"]
[Fri Dec 19 11:20:35.601087 2025] [:error] [pid 41956:tid 41979] [client 173.239.218.82:36445] [client 173.239.218.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.82, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTEg5FF_rXxx-Pv5gnOHgAAAZU"]
[Fri Dec 19 11:31:38.663733 2025] [:error] [pid 41858:tid 41881] [client 173.239.218.118:41227] [client 173.239.218.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.118, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTHGp0PV23R6CcTulXK_AAAAFU"]
[Fri Dec 19 11:31:38.663938 2025] [:error] [pid 41858:tid 41869] [client 173.239.218.116:58803] [client 173.239.218.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.116, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTHGp0PV23R6CcTulXK_QAAAEk"]
[Fri Dec 19 11:42:43.512806 2025] [:error] [pid 20675:tid 20703] [client 173.239.218.118:40719] [client 173.239.218.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.118, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTJs7MyJ3XqeDRsbQmc_AAAAQ8"]
[Fri Dec 19 11:42:43.513698 2025] [:error] [pid 20581:tid 20618] [client 173.239.218.122:62187] [client 173.239.218.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.122, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTJs_xEv7WXNhnFD1nqqQAAAIM"]
[Fri Dec 19 11:53:40.663267 2025] [:error] [pid 20580:tid 20598] [client 173.239.218.112:48619] [client 173.239.218.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.112, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTMREmd1op_YdAdgR30WgAAAEw"]
[Fri Dec 19 11:53:40.663386 2025] [:error] [pid 20580:tid 20588] [client 173.239.218.104:30813] [client 173.239.218.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.104, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTMREmd1op_YdAdgR30WwAAAEI"]
[Fri Dec 19 12:04:40.756465 2025] [:error] [pid 20581:tid 20628] [client 173.239.218.101:42925] [client 173.239.218.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.101, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTO2PxEv7WXNhnFD1nwcwAAAI0"]
[Fri Dec 19 12:04:40.757130 2025] [:error] [pid 20582:tid 20647] [client 173.239.218.76:43747] [client 173.239.218.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTO2MpAnrkQKZ4b5gaXdwAAAMU"]
[Fri Dec 19 12:15:44.659930 2025] [:error] [pid 20580:tid 20606] [client 173.239.218.78:51701] [client 173.239.218.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.78, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTRcEmd1op_YdAdgR39HAAAAFQ"]
[Fri Dec 19 12:15:44.660673 2025] [:error] [pid 20581:tid 20628] [client 173.239.218.105:27839] [client 173.239.218.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.105, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTRcPxEv7WXNhnFD1nzwgAAAI0"]
[Fri Dec 19 12:26:42.566057 2025] [:error] [pid 20675:tid 20703] [client 173.239.218.81:56121] [client 173.239.218.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.81, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTUArMyJ3XqeDRsbQmz7gAAAQ8"]
[Fri Dec 19 12:26:42.566078 2025] [:error] [pid 20675:tid 20693] [client 173.239.218.91:59551] [client 173.239.218.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.91, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTUArMyJ3XqeDRsbQmz7QAAAQU"]
[Fri Dec 19 12:37:47.600793 2025] [:error] [pid 20675:tid 20701] [client 173.239.218.94:49955] [client 173.239.218.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.94, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTWm7MyJ3XqeDRsbQm7GQAAAQ0"]
[Fri Dec 19 12:37:47.601529 2025] [:error] [pid 20582:tid 20654] [client 173.239.218.124:57679] [client 173.239.218.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.124, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTWm8pAnrkQKZ4b5gaj2AAAAMw"]
[Fri Dec 19 12:48:48.553616 2025] [:error] [pid 20675:tid 20688] [client 173.239.218.79:25097] [client 173.239.218.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.79, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTZMLMyJ3XqeDRsbQnDRAAAAQA"]
[Fri Dec 19 12:48:48.553635 2025] [:error] [pid 20581:tid 20634] [client 173.239.218.99:20775] [client 173.239.218.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.99, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTZMPxEv7WXNhnFD1kCIgAAAJM"]
[Fri Dec 19 12:59:44.156903 2025] [:error] [pid 20582:tid 20655] [client 173.239.218.125:61445] [client 173.239.218.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.125, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTbwMpAnrkQKZ4b5gasKgAAAM0"]
[Fri Dec 19 12:59:44.157352 2025] [:error] [pid 41451:tid 41460] [client 173.239.218.86:45535] [client 173.239.218.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.86, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTbwAYXFn-DbZghZBE5pgAAAAY"]
[Fri Dec 19 13:10:48.394135 2025] [:error] [pid 20580:tid 20590] [client 173.239.218.79:24033] [client 173.239.218.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.79, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTeWEmd1op_YdAdgR0T4gAAAEQ"]
[Fri Dec 19 13:10:48.394708 2025] [:error] [pid 41451:tid 41455] [client 173.239.218.95:37589] [client 173.239.218.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.95, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTeWAYXFn-DbZghZBE-BgAAAAE"]
[Fri Dec 19 13:21:53.119841 2025] [:error] [pid 20675:tid 20711] [client 173.239.218.79:28699] [client 173.239.218.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.79, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTg8bMyJ3XqeDRsbQnSBwAAARc"]
[Fri Dec 19 13:21:53.120114 2025] [:error] [pid 20675:tid 20694] [client 173.239.218.96:33315] [client 173.239.218.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.96, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTg8bMyJ3XqeDRsbQnSCAAAAQY"]
[Fri Dec 19 13:32:57.614528 2025] [:error] [pid 20580:tid 20606] [client 173.239.218.86:24149] [client 173.239.218.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.86, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTjiUmd1op_YdAdgR0ZrwAAAFQ"]
[Fri Dec 19 13:32:57.614564 2025] [:error] [pid 20582:tid 20648] [client 173.239.218.105:44373] [client 173.239.218.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.105, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTjicpAnrkQKZ4b5ga0hQAAAMY"]
[Fri Dec 19 13:44:06.816012 2025] [:error] [pid 41451:tid 41466] [client 173.239.218.117:35637] [client 173.239.218.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.117, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTmJgYXFn-DbZghZBFJ3wAAAAw"]
[Fri Dec 19 13:44:06.816318 2025] [:error] [pid 20580:tid 20591] [client 173.239.218.83:61465] [client 173.239.218.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.83, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTmJkmd1op_YdAdgR0c7QAAAEU"]
[Fri Dec 19 13:55:17.157208 2025] [:error] [pid 20675:tid 20700] [client 173.239.218.81:48441] [client 173.239.218.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.81, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUToxbMyJ3XqeDRsbQnlmQAAAQw"]
[Fri Dec 19 13:55:17.157181 2025] [:error] [pid 20675:tid 20710] [client 173.239.218.93:61777] [client 173.239.218.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUToxbMyJ3XqeDRsbQnlmAAAARY"]
[Fri Dec 19 14:06:23.013932 2025] [:error] [pid 41451:tid 41463] [client 173.239.218.119:26175] [client 173.239.218.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.119, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTrXwYXFn-DbZghZBFRoAAAAAk"]
[Fri Dec 19 14:06:23.013932 2025] [:error] [pid 20675:tid 20701] [client 173.239.218.95:51521] [client 173.239.218.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.95, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTrX7MyJ3XqeDRsbQnq4AAAAQ0"]
[Fri Dec 19 14:17:32.385705 2025] [:error] [pid 41451:tid 41474] [client 194.5.52.25:44781] [client 194.5.52.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.52.25, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTt_AYXFn-DbZghZBFVOAAAABQ"]
[Fri Dec 19 14:17:32.386362 2025] [:error] [pid 20580:tid 20589] [client 173.239.218.99:55627] [client 173.239.218.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.99, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTt_Emd1op_YdAdgR0n7wAAAEM"]
[Fri Dec 19 14:28:49.766314 2025] [:error] [pid 20580:tid 20590] [client 173.239.218.85:45187] [client 173.239.218.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.85, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTwoUmd1op_YdAdgR0rHQAAAEQ"]
[Fri Dec 19 14:28:49.766314 2025] [:error] [pid 20582:tid 20661] [client 173.239.218.125:35849] [client 173.239.218.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.125, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTwocpAnrkQKZ4b5gbFmQAAANM"]
[Fri Dec 19 14:40:02.976790 2025] [:error] [pid 41451:tid 41454] [client 173.239.218.114:34239] [client 173.239.218.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.114, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTzQgYXFn-DbZghZBFdBAAAAAA"]
[Fri Dec 19 14:40:02.976794 2025] [:error] [pid 20675:tid 20688] [client 173.239.218.114:58867] [client 173.239.218.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.114, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUTzQrMyJ3XqeDRsbQn8_gAAAQA"]
[Fri Dec 19 14:51:17.113376 2025] [:error] [pid 20580:tid 20603] [client 173.239.218.99:47283] [client 173.239.218.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.99, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUT15Umd1op_YdAdgR0w-QAAAFE"]
[Fri Dec 19 14:51:17.113394 2025] [:error] [pid 20581:tid 20633] [client 173.239.218.96:63401] [client 173.239.218.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.96, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUT15fxEv7WXNhnFD1klDAAAAJI"]
[Fri Dec 19 15:02:38.529149 2025] [:error] [pid 41451:tid 41472] [client 173.239.218.103:34169] [client 173.239.218.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.103, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUT4jgYXFn-DbZghZBFjjAAAABI"]
[Fri Dec 19 15:02:38.529281 2025] [:error] [pid 20675:tid 20711] [client 173.239.218.124:30033] [client 173.239.218.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.124, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUT4jrMyJ3XqeDRsbQkHZAAAARc"]
[Fri Dec 19 15:13:58.974398 2025] [:error] [pid 20675:tid 20688] [client 173.239.218.85:34107] [client 173.239.218.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.85, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUT7NrMyJ3XqeDRsbQkLeQAAAQA"]
[Fri Dec 19 15:13:58.974656 2025] [:error] [pid 41451:tid 41469] [client 173.239.218.77:50725] [client 173.239.218.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.77, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUT7NgYXFn-DbZghZBFmbgAAAA8"]
[Fri Dec 19 15:25:17.421474 2025] [:error] [pid 41451:tid 41477] [client 173.239.218.113:41233] [client 173.239.218.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.113, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUT93QYXFn-DbZghZBFpjgAAABc"]
[Fri Dec 19 15:25:17.422014 2025] [:error] [pid 20675:tid 20698] [client 173.239.218.8:58555] [client 173.239.218.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.8, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUT93bMyJ3XqeDRsbQkO9gAAAQo"]
[Fri Dec 19 22:29:31.112014 2025] [autoindex:error] [pid 20675:tid 20696] [client 4.230.25.14:11761] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 22:29:55.803245 2025] [:error] [pid 20580:tid 20601] [client 4.230.25.14:8140] [client 4.230.25.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUVhY0md1op_YdAdgR256AAAAE8"]
[Fri Dec 19 22:30:26.352648 2025] [:error] [pid 20580:tid 20588] [client 4.230.25.14:11652] [client 4.230.25.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUVhgkmd1op_YdAdgR26SAAAAEI"]
[Fri Dec 19 22:30:27.971952 2025] [:error] [pid 20675:tid 20710] [client 4.230.25.14:8136] [client 4.230.25.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aUVhg7MyJ3XqeDRsbQm4tQAAARY"]
[Fri Dec 19 22:30:30.221424 2025] [autoindex:error] [pid 20580:tid 20595] [client 4.230.25.14:8158] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 22:30:30.418444 2025] [:error] [pid 20580:tid 20589] [client 4.230.25.14:8158] [client 4.230.25.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aUVhhkmd1op_YdAdgR26WgAAAEM"]
[Fri Dec 19 22:30:32.137397 2025] [:error] [pid 20580:tid 20601] [client 4.230.25.14:8176] [client 4.230.25.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aUVhiEmd1op_YdAdgR26ZgAAAE8"]
[Fri Dec 19 22:30:34.986006 2025] [proxy_fcgi:error] [pid 20581:tid 20621] [client 4.230.25.14:8128] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:30:41.875673 2025] [autoindex:error] [pid 20582:tid 20645] [client 4.230.25.14:8147] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 22:30:42.807498 2025] [:error] [pid 20581:tid 20621] [client 4.230.25.14:11683] [client 4.230.25.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aUVhkvxEv7WXNhnFD1mglQAAAIY"]
[Fri Dec 19 22:30:44.443824 2025] [autoindex:error] [pid 18438:tid 18456] [client 4.230.25.14:11765] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 22:30:50.146596 2025] [:error] [pid 20675:tid 20688] [client 4.230.25.14:11751] [client 4.230.25.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUVhmrMyJ3XqeDRsbQm41QAAAQA"]
[Fri Dec 19 22:30:50.519857 2025] [:error] [pid 20675:tid 20704] [client 4.230.25.14:11694] [client 4.230.25.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aUVhmrMyJ3XqeDRsbQm41gAAARA"]
[Fri Dec 19 23:05:21.624713 2025] [:error] [pid 20582:tid 20650] [client 104.208.114.89:39717] [client 104.208.114.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-config.php"] [unique_id "aUVpscpAnrkQKZ4b5gZmDgAAAMg"]
[Fri Dec 19 23:07:13.151193 2025] [:error] [pid 20675:tid 20702] [client 104.208.114.89:52111] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/system.php"] [unique_id "aUVqIbMyJ3XqeDRsbQnBzAAAAQ4"]
[Fri Dec 19 23:07:15.785925 2025] [:error] [pid 20580:tid 20599] [client 104.208.114.89:26347] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/system.php"] [unique_id "aUVqI0md1op_YdAdgR3EnQAAAE0"]
[Fri Dec 19 23:07:31.748961 2025] [:error] [pid 20580:tid 20603] [client 104.208.114.89:30281] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mage.php"] [unique_id "aUVqM0md1op_YdAdgR3EswAAAFE"]
[Fri Dec 19 23:07:33.702767 2025] [:error] [pid 20580:tid 20596] [client 104.208.114.89:34331] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mage.php"] [unique_id "aUVqNUmd1op_YdAdgR3EuQAAAEo"]
[Fri Dec 19 23:07:36.941451 2025] [:error] [pid 20580:tid 20608] [client 104.208.114.89:39630] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mage.php"] [unique_id "aUVqOEmd1op_YdAdgR3EvQAAAFY"]
[Fri Dec 19 23:07:41.332802 2025] [:error] [pid 20581:tid 20616] [client 104.208.114.89:31515] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mage.php"] [unique_id "aUVqPfxEv7WXNhnFD1mqowAAAIE"]
[Fri Dec 19 23:08:07.384800 2025] [:error] [pid 20580:tid 20598] [client 104.208.114.89:41067] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mob.php"] [unique_id "aUVqV0md1op_YdAdgR3E3wAAAEw"]
[Fri Dec 19 23:08:32.181987 2025] [:error] [pid 20580:tid 20596] [client 104.208.114.89:32922] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shippings.php"] [unique_id "aUVqcEmd1op_YdAdgR3E-QAAAEo"]
[Fri Dec 19 23:08:38.144667 2025] [:error] [pid 20675:tid 20690] [client 104.208.114.89:58885] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/adminer-4.6.6.php"] [unique_id "aUVqdrMyJ3XqeDRsbQnCVwAAAQI"]
[Fri Dec 19 23:08:39.624732 2025] [:error] [pid 20675:tid 20709] [client 104.208.114.89:29106] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/adminer-4.6.6.php"] [unique_id "aUVqd7MyJ3XqeDRsbQnCWgAAARU"]
[Fri Dec 19 23:08:41.217611 2025] [:error] [pid 20580:tid 20601] [client 104.208.114.89:27389] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/adminer-4.6.6.php"] [unique_id "aUVqeUmd1op_YdAdgR3FEQAAAE8"]
[Fri Dec 19 23:08:43.719646 2025] [:error] [pid 20675:tid 20699] [client 104.208.114.89:32956] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/adminer-4.6.6.php"] [unique_id "aUVqe7MyJ3XqeDRsbQnCawAAAQs"]
[Fri Dec 19 23:08:46.426069 2025] [:error] [pid 20580:tid 20594] [client 104.208.114.89:29817] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/adminer-4.6.5.php"] [unique_id "aUVqfkmd1op_YdAdgR3FHAAAAEg"]
[Fri Dec 19 23:08:49.325288 2025] [:error] [pid 20580:tid 20609] [client 104.208.114.89:29096] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/adminer-4.6.5.php"] [unique_id "aUVqgUmd1op_YdAdgR3FJAAAAFc"]
[Fri Dec 19 23:08:51.576562 2025] [:error] [pid 41451:tid 41474] [client 104.208.114.89:29083] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/adminer-4.6.5.php"] [unique_id "aUVqgwYXFn-DbZghZBEBNAAAABQ"]
[Fri Dec 19 23:08:55.652483 2025] [:error] [pid 20582:tid 20663] [client 104.208.114.89:58923] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/adminer-4.6.5.php"] [unique_id "aUVqh8pAnrkQKZ4b5gZnjwAAANU"]
[Fri Dec 19 23:08:57.543645 2025] [:error] [pid 20580:tid 20586] [client 104.208.114.89:52871] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/adminer-4.6.4.php"] [unique_id "aUVqiUmd1op_YdAdgR3FLwAAAEA"]
[Fri Dec 19 23:08:59.261268 2025] [:error] [pid 18438:tid 18443] [client 104.208.114.89:29844] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/adminer-4.6.4.php"] [unique_id "aUVqi5RArClWV1iij_TLGAAAAYI"]
[Fri Dec 19 23:09:01.226650 2025] [:error] [pid 20675:tid 20699] [client 104.208.114.89:29882] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/adminer-4.6.4.php"] [unique_id "aUVqjbMyJ3XqeDRsbQnChgAAAQs"]
[Fri Dec 19 23:09:30.478115 2025] [:error] [pid 18438:tid 18441] [client 104.208.114.89:29066] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/signin.php"] [unique_id "aUVqqpRArClWV1iij_TLUAAAAYA"]
[Fri Dec 19 23:09:32.047008 2025] [:error] [pid 18438:tid 18446] [client 104.208.114.89:37575] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/signin.php"] [unique_id "aUVqrJRArClWV1iij_TLVQAAAYU"]
[Fri Dec 19 23:09:37.941786 2025] [:error] [pid 41451:tid 41475] [client 104.208.114.89:29846] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/weblinks.php"] [unique_id "aUVqsQYXFn-DbZghZBEBegAAABU"]
[Fri Dec 19 23:09:39.836544 2025] [:error] [pid 20581:tid 20626] [client 104.208.114.89:31468] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/weblinks.php"] [unique_id "aUVqs_xEv7WXNhnFD1mq8gAAAIs"]
[Fri Dec 19 23:09:46.035844 2025] [:error] [pid 20580:tid 20589] [client 104.208.114.89:29870] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/weblinks.php"] [unique_id "aUVqukmd1op_YdAdgR3FdgAAAEM"]
[Fri Dec 19 23:10:01.550058 2025] [:error] [pid 16026:tid 16046] [client 104.208.114.89:38114] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/vbv.php"] [unique_id "aUVqyULVfhf4Jb3enmNjtAAAAVE"]
[Fri Dec 19 23:10:04.778488 2025] [:error] [pid 20582:tid 20650] [client 104.208.114.89:31934] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/vbv.php"] [unique_id "aUVqzMpAnrkQKZ4b5gZn3gAAAMg"]
[Fri Dec 19 23:10:19.243992 2025] [:error] [pid 41451:tid 41460] [client 104.208.114.89:38111] [client 104.208.114.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/adminer-4.7.0.php"] [unique_id "aUVq2wYXFn-DbZghZBEBmgAAAAY"]
[Sat Dec 20 21:49:25.135115 2025] [proxy_fcgi:error] [pid 62124:tid 62142] [client 20.39.202.92:23350] AH01071: Got error 'PHP message: PHP Warning:  mysqli_query(): (HY000/2006): MySQL server has gone away in /home/crosscen/public_html/wp-includes/class-wpdb.php on line 2187'
[Sat Dec 20 21:53:09.506119 2025] [:error] [pid 39577:tid 39600] [client 85.203.34.46:40239] [client 85.203.34.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUaqRbviRnt1rJiSOfyBowAAANU"]
[Sat Dec 20 21:53:13.428621 2025] [:error] [pid 14286:tid 14304] [client 85.203.34.50:61145] [client 85.203.34.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aUaqSZ7rbXIrw6rGSdad6wAAAU4"]
[Sat Dec 20 21:53:26.044056 2025] [:error] [pid 33793:tid 33804] [client 85.203.34.22:39539] [client 85.203.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/item.php"] [unique_id "aUaqVlSicyB0BFmbRMzqXgAAAsk"]
[Sat Dec 20 21:53:26.672990 2025] [:error] [pid 33570:tid 33593] [client 85.203.34.22:36475] [client 85.203.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/item.php"] [unique_id "aUaqVoTNveA-c6YcSrIleQAAAdE"]
[Sat Dec 20 21:53:48.771901 2025] [autoindex:error] [pid 14286:tid 14299] [client 85.203.34.30:50875] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:53:52.788822 2025] [autoindex:error] [pid 33749:tid 33757] [client 85.203.34.44:24739] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:54:02.955252 2025] [autoindex:error] [pid 39493:tid 39569] [client 85.203.34.41:51399] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:54:05.645925 2025] [autoindex:error] [pid 14286:tid 14308] [client 85.203.34.26:53187] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:54:05.943246 2025] [autoindex:error] [pid 14286:tid 14291] [client 85.203.34.26:53187] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:54:06.256485 2025] [autoindex:error] [pid 14286:tid 14302] [client 85.203.34.26:53187] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:54:06.592282 2025] [autoindex:error] [pid 14286:tid 14292] [client 85.203.34.26:53187] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:54:06.960972 2025] [autoindex:error] [pid 14286:tid 14312] [client 85.203.34.26:53187] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:54:07.317620 2025] [proxy_fcgi:error] [pid 14286:tid 14291] [client 85.203.34.26:53187] AH01071: Got error 'PHP message: PHP Warning:  Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/crosscen/public_html/wp-includes/blocks/index.php on line 8PHP message: PHP Warning:  Use of undefined constant WPINC - assumed 'WPINC' (this will throw an Error in a future version of PHP) in /home/crosscen/public_html/wp-includes/blocks/index.php on line 8PHP message: PHP Warning:  require(ABSPATHWPINC/blocks/legacy-widget.php): failed to open stream: No such file or directory in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11PHP message: PHP Warning:  require(ABSPATHWPINC/blocks/legacy-widget.php): failed to open stream: No such file or directory in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11PHP message: PHP Fatal error:  require(): Failed opening required 'ABSPATHWPINC/blocks/legacy-widget.php' (include_path='.:') in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11'
[Sun Dec 21 00:43:07.441678 2025] [:error] [pid 8642:tid 8719] [client 146.190.63.248:34068] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUbSGyJkiik8k41igp3_GQAAAQ4"]
[Sun Dec 21 00:43:15.634539 2025] [authz_core:error] [pid 8751:tid 8753] [client 146.190.63.248:42378] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Sun Dec 21 00:43:19.443428 2025] [:error] [pid 22338:tid 22393] [client 146.190.63.248:42412] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aUbSJ3GYQSUt-opKpSL-pwAAAEk"]
[Sun Dec 21 00:43:21.450593 2025] [:error] [pid 8642:tid 8726] [client 146.190.63.248:42422] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aUbSKSJkiik8k41igp3_OwAAARU"]
[Sun Dec 21 00:48:14.694342 2025] [:error] [pid 22338:tid 22386] [client 4.217.177.183:48270] [client 4.217.177.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUbTTnGYQSUt-opKpSIBPAAAAEI"]
[Sun Dec 21 00:48:32.056427 2025] [:error] [pid 8751:tid 8754] [client 4.217.177.183:52803] [client 4.217.177.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aUbTYGvrnuGjNP7vtDQO9QAAAAE"]
[Sun Dec 21 00:49:05.619378 2025] [proxy_fcgi:error] [pid 8751:tid 8773] [client 4.217.177.183:48202] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 00:50:31.972506 2025] [autoindex:error] [pid 8751:tid 8777] [client 4.217.177.183:44018] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 00:51:44.203274 2025] [autoindex:error] [pid 8640:tid 8658] [client 4.217.177.183:52519] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 00:52:18.103375 2025] [autoindex:error] [pid 8642:tid 8723] [client 4.217.177.183:55640] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 00:52:21.390910 2025] [:error] [pid 8642:tid 8718] [client 4.217.177.183:14498] [client 4.217.177.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aUbURSJkiik8k41igp0BkgAAAQ0"]
[Sun Dec 21 00:52:35.992399 2025] [:error] [pid 8640:tid 8673] [client 4.217.177.183:52595] [client 4.217.177.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "aUbUU_VclzlEWWhvYtlalQAAAJc"]
[Sun Dec 21 01:13:58.772344 2025] [:error] [pid 22338:tid 22409] [client 45.88.186.197:58859] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aUbZVnGYQSUt-opKpSIM0wAAAFg"]
[Sun Dec 21 01:13:59.187455 2025] [:error] [pid 8641:tid 8709] [client 45.88.186.197:59013] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aUbZV3E703usYSvQGLRYKwAAANg"]
[Sun Dec 21 01:13:59.590145 2025] [:error] [pid 22338:tid 22393] [client 45.88.186.197:59150] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aUbZV3GYQSUt-opKpSIM8gAAAEk"]
[Sun Dec 21 01:13:59.995670 2025] [:error] [pid 8642:tid 8697] [client 45.88.186.197:59271] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aUbZVyJkiik8k41igp0IkAAAAQA"]
[Sun Dec 21 01:14:00.407258 2025] [:error] [pid 8640:tid 8664] [client 45.88.186.197:59394] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aUbZWPVclzlEWWhvYtlgxgAAAI4"]
[Sun Dec 21 01:43:23.472284 2025] [:error] [pid 8751:tid 8773] [client 40.69.220.197:8656] [client 40.69.220.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-config.php"] [unique_id "aUbgO2vrnuGjNP7vtDQvoQAAABQ"]
[Sun Dec 21 01:59:27.319843 2025] [:error] [pid 8640:tid 8662] [client 52.178.194.13:6599] [client 52.178.194.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.178.194.13, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aUbj__VclzlEWWhvYtlxXwAAAIw"]
[Sun Dec 21 01:59:35.819429 2025] [:error] [pid 8641:tid 8687] [client 52.178.194.13:2506] [client 52.178.194.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-config.php"] [unique_id "aUbkB3E703usYSvQGLRosgAAAMk"]
[Sun Dec 21 02:30:10.702869 2025] [:error] [pid 8751:tid 8758] [client 165.227.173.41:60198] [client 165.227.173.41] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUbrMmvrnuGjNP7vtDRNrgAAAAU"]
[Sun Dec 21 02:30:19.864843 2025] [authz_core:error] [pid 8751:tid 8766] [client 165.227.173.41:52762] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Sun Dec 21 02:30:24.062330 2025] [:error] [pid 22338:tid 22390] [client 165.227.173.41:52802] [client 165.227.173.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aUbrQHGYQSUt-opKpSI2ywAAAEY"]
[Sun Dec 21 02:30:26.071936 2025] [:error] [pid 8751:tid 8754] [client 165.227.173.41:52808] [client 165.227.173.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aUbrQmvrnuGjNP7vtDROAAAAAAE"]
[Mon Dec 22 00:40:54.909304 2025] [:error] [pid 46343:tid 46364] [client 157.245.3.60:37610] [client 157.245.3.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aUgjFhzbW_u_EvstJwQfUwAAABI"]
[Mon Dec 22 04:07:27.891343 2025] [:error] [pid 58078:tid 58101] [client 138.197.36.149:37398] [client 138.197.36.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aUhTf5WKg9Bf8njHlB5O5AAAABI"]
[Mon Dec 22 17:42:57.664009 2025] [:error] [pid 33440:tid 33459] [client 185.92.25.138:57595] [client 185.92.25.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUkSoZOsUWKqgxu6QTQIjAAAARE"]
[Mon Dec 22 17:43:02.751431 2025] [:error] [pid 33535:tid 33561] [client 85.203.34.12:32529] [client 85.203.34.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUkSpmOCI8D9Xtn-n7SV1AAAAdg"]
[Mon Dec 22 17:43:15.870033 2025] [:error] [pid 56044:tid 56062] [client 85.203.34.33:57415] [client 85.203.34.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tinyfilemanager.php"] [unique_id "aUkSs-60uUaieriJqP1H0QAAAI4"]
[Mon Dec 22 17:43:21.405826 2025] [:error] [pid 58172:tid 58197] [client 85.203.34.1:60759] [client 85.203.34.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUkSueSVKDT5jWOcnSW0nwAAANc"]
[Mon Dec 22 17:43:38.080409 2025] [:error] [pid 33535:tid 33538] [client 85.203.34.30:28655] [client 85.203.34.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUkSymOCI8D9Xtn-n7SV7AAAAcE"]
[Mon Dec 22 17:43:39.520899 2025] [:error] [pid 33472:tid 33515] [client 85.203.34.8:60977] [client 85.203.34.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUkSy55p2WQpPIK8HAkD2gAAAY4"]
[Mon Dec 22 17:43:40.125449 2025] [:error] [pid 33564:tid 33573] [client 85.203.34.6:23807] [client 85.203.34.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUkSzASHeG6oLmMnKY6N1gAAAgY"]
[Mon Dec 22 17:43:41.053719 2025] [:error] [pid 58172:tid 58178] [client 85.203.34.7:25521] [client 85.203.34.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUkSzeSVKDT5jWOcnSW0rQAAAMQ"]
[Mon Dec 22 17:43:44.109428 2025] [:error] [pid 33440:tid 33456] [client 85.203.34.44:45873] [client 85.203.34.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUkS0JOsUWKqgxu6QTQIogAAAQ4"]
[Mon Dec 22 17:43:49.972660 2025] [:error] [pid 56080:tid 56137] [client 85.203.34.45:56735] [client 85.203.34.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUkS1ZIHT3YJq9hjDc7CMQAAAw0"]
[Mon Dec 22 17:43:51.176907 2025] [:error] [pid 56080:tid 56128] [client 85.203.34.41:49635] [client 85.203.34.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUkS15IHT3YJq9hjDc7CNQAAAwQ"]
[Mon Dec 22 17:43:53.076126 2025] [:error] [pid 33535:tid 33540] [client 85.203.34.4:37231] [client 85.203.34.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "aUkS2WOCI8D9Xtn-n7SWBAAAAcM"]
[Mon Dec 22 17:43:55.505283 2025] [:error] [pid 33471:tid 33478] [client 85.203.34.22:50577] [client 85.203.34.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUkS275BeNE7regJ7iwlpAAAAUQ"]
[Mon Dec 22 17:43:57.701152 2025] [:error] [pid 33471:tid 33491] [client 85.203.34.22:29469] [client 85.203.34.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUkS3b5BeNE7regJ7iwlqAAAAVE"]
[Mon Dec 22 17:44:00.223021 2025] [:error] [pid 56044:tid 56069] [client 85.203.34.9:27545] [client 85.203.34.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUkS4O60uUaieriJqP1H3QAAAJU"]
[Mon Dec 22 17:44:13.787678 2025] [:error] [pid 33535:tid 33542] [client 85.203.34.9:60517] [client 85.203.34.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUkS7WOCI8D9Xtn-n7SWGwAAAcU"]
[Mon Dec 22 17:44:15.741004 2025] [:error] [pid 33535:tid 33558] [client 85.203.34.12:28269] [client 85.203.34.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUkS72OCI8D9Xtn-n7SWHwAAAdU"]
[Mon Dec 22 17:44:22.048644 2025] [:error] [pid 56044:tid 56048] [client 85.203.34.31:55415] [client 85.203.34.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUkS9u60uUaieriJqP1IQQAAAIA"]
[Mon Dec 22 17:44:25.708975 2025] [:error] [pid 33535:tid 33544] [client 85.203.34.27:49015] [client 85.203.34.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUkS-WOCI8D9Xtn-n7SWKgAAAcc"]
[Mon Dec 22 17:44:37.051102 2025] [autoindex:error] [pid 33471:tid 33475] [client 85.203.34.17:32975] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 17:44:37.349873 2025] [autoindex:error] [pid 33471:tid 33495] [client 85.203.34.17:32975] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 17:44:37.653750 2025] [autoindex:error] [pid 33471:tid 33480] [client 85.203.34.17:32975] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 17:44:37.943725 2025] [autoindex:error] [pid 33471:tid 33483] [client 85.203.34.17:32975] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 17:44:40.022027 2025] [autoindex:error] [pid 33564:tid 33577] [client 185.92.25.139:58483] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 17:44:40.570263 2025] [autoindex:error] [pid 33564:tid 33575] [client 185.92.25.139:58483] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 17:44:40.867651 2025] [autoindex:error] [pid 33564:tid 33568] [client 185.92.25.139:58483] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 17:44:41.149126 2025] [autoindex:error] [pid 33564:tid 33583] [client 185.92.25.139:58483] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 17:44:43.002847 2025] [autoindex:error] [pid 33564:tid 33586] [client 85.203.34.44:26417] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 17:44:44.165856 2025] [autoindex:error] [pid 33564:tid 33573] [client 85.203.34.44:26417] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 17:44:44.723473 2025] [autoindex:error] [pid 33564:tid 33576] [client 85.203.34.44:26417] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 17:44:48.241050 2025] [autoindex:error] [pid 33535:tid 33554] [client 85.203.34.36:37611] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 17:44:48.787794 2025] [autoindex:error] [pid 33535:tid 33552] [client 85.203.34.36:37611] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 17:44:49.334238 2025] [autoindex:error] [pid 33535:tid 33546] [client 85.203.34.36:37611] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 17:44:49.644952 2025] [autoindex:error] [pid 33535:tid 33555] [client 85.203.34.36:37611] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 17:44:54.589987 2025] [autoindex:error] [pid 58078:tid 58085] [client 185.92.25.138:41687] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 20:24:36.007236 2025] [:error] [pid 58078:tid 58087] [client 20.42.211.48:17054] [client 20.42.211.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aUk4hJWKg9Bf8njHlB5CaQAAAAQ"]
[Mon Dec 22 21:36:36.170345 2025] [:error] [pid 56155:tid 56228] [client 104.234.19.140:36753] [client 104.234.19.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.140, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJZGG8a3wQucsuN67-VAAAA4Y"], referer: https://www.google.com/
[Mon Dec 22 21:36:37.496137 2025] [:error] [pid 56044:tid 56070] [client 136.144.19.173:60785] [client 136.144.19.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.173, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJZe60uUaieriJqP14ggAAAJY"], referer: https://www.google.com/
[Mon Dec 22 21:36:38.800244 2025] [:error] [pid 33471:tid 33483] [client 104.234.19.139:51835] [client 104.234.19.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.139, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJZr5BeNE7regJ7ixUewAAAUk"], referer: https://www.google.com/
[Mon Dec 22 21:36:40.116080 2025] [:error] [pid 33535:tid 33538] [client 104.234.19.141:44171] [client 104.234.19.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.141, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJaGOCI8D9Xtn-n7TN5gAAAcE"], referer: https://www.google.com/
[Mon Dec 22 21:36:41.513479 2025] [:error] [pid 33564:tid 33581] [client 136.144.19.133:61711] [client 136.144.19.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.133, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJaQSHeG6oLmMnKY7TTwAAAg4"], referer: https://www.google.com/
[Mon Dec 22 21:36:42.895274 2025] [:error] [pid 58078:tid 58083] [client 104.234.19.134:46957] [client 104.234.19.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.134, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJapWKg9Bf8njHlB5cQAAAAAA"], referer: https://www.google.com/
[Mon Dec 22 21:36:44.191531 2025] [:error] [pid 33440:tid 33442] [client 193.36.224.36:44287] [client 193.36.224.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.36, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJbJOsUWKqgxu6QTQ_iwAAAQA"], referer: https://www.google.com/
[Mon Dec 22 21:36:45.494223 2025] [:error] [pid 33535:tid 33547] [client 136.144.19.188:47883] [client 136.144.19.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.188, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJbWOCI8D9Xtn-n7TN6gAAAco"], referer: https://www.google.com/
[Mon Dec 22 21:36:46.804267 2025] [:error] [pid 58078:tid 58090] [client 136.144.19.134:29881] [client 136.144.19.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.134, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJbpWKg9Bf8njHlB5cQwAAAAc"], referer: https://www.google.com/
[Mon Dec 22 21:36:48.097114 2025] [:error] [pid 56155:tid 56230] [client 193.36.224.23:34541] [client 193.36.224.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.23, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJcGG8a3wQucsuN67-YAAAA4g"], referer: https://www.google.com/
[Mon Dec 22 21:36:49.407327 2025] [:error] [pid 33440:tid 33450] [client 193.36.224.98:48879] [client 193.36.224.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.98, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJcZOsUWKqgxu6QTQ_lAAAAQg"], referer: https://www.google.com/
[Mon Dec 22 21:36:50.724143 2025] [:error] [pid 58078:tid 58095] [client 193.36.224.30:60871] [client 193.36.224.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.30, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJcpWKg9Bf8njHlB5cSwAAAAw"], referer: https://www.google.com/
[Mon Dec 22 21:36:52.019076 2025] [:error] [pid 58078:tid 58106] [client 193.36.224.91:59869] [client 193.36.224.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.91, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJdJWKg9Bf8njHlB5cTQAAABc"], referer: https://www.google.com/
[Mon Dec 22 21:36:53.339329 2025] [:error] [pid 58078:tid 58103] [client 136.144.19.148:23883] [client 136.144.19.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.148, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJdZWKg9Bf8njHlB5cUgAAABQ"], referer: https://www.google.com/
[Mon Dec 22 21:36:54.656374 2025] [:error] [pid 58078:tid 58105] [client 136.144.19.134:42391] [client 136.144.19.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.134, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJdpWKg9Bf8njHlB5cVAAAABY"], referer: https://www.google.com/
[Mon Dec 22 21:36:55.943646 2025] [:error] [pid 33472:tid 33503] [client 193.36.224.96:27381] [client 193.36.224.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.96, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJd55p2WQpPIK8HAk-2gAAAYI"], referer: https://www.google.com/
[Mon Dec 22 21:36:57.272650 2025] [:error] [pid 33471:tid 33495] [client 193.36.224.35:49583] [client 193.36.224.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.35, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJeb5BeNE7regJ7ixUfwAAAVU"], referer: https://www.google.com/
[Mon Dec 22 21:36:58.563845 2025] [:error] [pid 56080:tid 56132] [client 136.144.19.163:55443] [client 136.144.19.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.163, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJepIHT3YJq9hjDc7zGAAAAwg"], referer: https://www.google.com/
[Mon Dec 22 21:36:59.879838 2025] [:error] [pid 33472:tid 33520] [client 136.144.19.186:28215] [client 136.144.19.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.186, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJe55p2WQpPIK8HAk-3AAAAZM"], referer: https://www.google.com/
[Mon Dec 22 21:37:01.214887 2025] [:error] [pid 58078:tid 58105] [client 193.36.224.36:29545] [client 193.36.224.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.36, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJfZWKg9Bf8njHlB5cXwAAABY"], referer: https://www.google.com/
[Mon Dec 22 21:37:02.527502 2025] [:error] [pid 58078:tid 58091] [client 104.234.19.141:61121] [client 104.234.19.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.141, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJfpWKg9Bf8njHlB5cYwAAAAg"], referer: https://www.google.com/
[Mon Dec 22 21:37:03.831672 2025] [:error] [pid 58172:tid 58176] [client 104.234.19.141:36173] [client 104.234.19.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.141, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJf-SVKDT5jWOcnSUCUwAAAMI"], referer: https://www.google.com/
[Mon Dec 22 21:37:05.136596 2025] [:error] [pid 33471:tid 33497] [client 136.144.19.187:28907] [client 136.144.19.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.187, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJgb5BeNE7regJ7ixUiQAAAVc"], referer: https://www.google.com/
[Mon Dec 22 21:37:06.435474 2025] [:error] [pid 58078:tid 58090] [client 104.234.19.141:60593] [client 104.234.19.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.141, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJgpWKg9Bf8njHlB5cagAAAAc"], referer: https://www.google.com/
[Mon Dec 22 21:37:07.776938 2025] [:error] [pid 33472:tid 33514] [client 193.36.224.90:32973] [client 193.36.224.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.90, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJg55p2WQpPIK8HAk-4QAAAY0"], referer: https://www.google.com/
[Mon Dec 22 21:37:09.092013 2025] [:error] [pid 58078:tid 58094] [client 193.36.224.30:24551] [client 193.36.224.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.30, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJhZWKg9Bf8njHlB5ccQAAAAs"], referer: https://www.google.com/
[Mon Dec 22 21:37:10.388126 2025] [:error] [pid 58172:tid 58185] [client 104.234.19.140:56311] [client 104.234.19.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.140, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJhuSVKDT5jWOcnSUCVQAAAMs"], referer: https://www.google.com/
[Mon Dec 22 21:37:11.716019 2025] [:error] [pid 56080:tid 56128] [client 136.144.19.145:39695] [client 136.144.19.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.145, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJh5IHT3YJq9hjDc7zHAAAAwQ"], referer: https://www.google.com/
[Mon Dec 22 21:37:13.028173 2025] [:error] [pid 56155:tid 56233] [client 193.36.224.89:28423] [client 193.36.224.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.89, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJiWG8a3wQucsuN67-awAAA4s"], referer: https://www.google.com/
[Mon Dec 22 21:37:14.323270 2025] [:error] [pid 33535:tid 33555] [client 104.234.19.136:52725] [client 104.234.19.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.136, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJimOCI8D9Xtn-n7TN8gAAAdI"], referer: https://www.google.com/
[Mon Dec 22 21:37:15.631866 2025] [:error] [pid 56155:tid 56232] [client 193.36.224.51:53639] [client 193.36.224.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.51, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJi2G8a3wQucsuN67-cAAAA4o"], referer: https://www.google.com/
[Mon Dec 22 21:37:16.922794 2025] [:error] [pid 58078:tid 58087] [client 136.144.19.180:31955] [client 136.144.19.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.180, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJjJWKg9Bf8njHlB5cdgAAAAQ"], referer: https://www.google.com/
[Mon Dec 22 21:37:18.218103 2025] [:error] [pid 33564:tid 33581] [client 193.36.224.89:40447] [client 193.36.224.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.89, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJjgSHeG6oLmMnKY7TmwAAAg4"], referer: https://www.google.com/
[Mon Dec 22 21:37:19.562117 2025] [:error] [pid 33472:tid 33503] [client 104.234.19.136:35483] [client 104.234.19.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.136, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJj55p2WQpPIK8HAk-7wAAAYI"], referer: https://www.google.com/
[Mon Dec 22 21:37:20.857567 2025] [:error] [pid 33472:tid 33514] [client 136.144.19.181:55157] [client 136.144.19.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.181, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJkJ5p2WQpPIK8HAk-8QAAAY0"], referer: https://www.google.com/
[Mon Dec 22 21:37:22.149836 2025] [:error] [pid 33440:tid 33452] [client 136.144.19.198:23129] [client 136.144.19.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.198, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJkpOsUWKqgxu6QTQ_ogAAAQo"], referer: https://www.google.com/
[Mon Dec 22 21:37:23.468756 2025] [:error] [pid 33440:tid 33457] [client 104.234.19.141:26691] [client 104.234.19.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.141, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJk5OsUWKqgxu6QTQ_pAAAAQ8"], referer: https://www.google.com/
[Mon Dec 22 21:37:24.774619 2025] [:error] [pid 33440:tid 33455] [client 136.144.19.154:64771] [client 136.144.19.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.154, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJlJOsUWKqgxu6QTQ_pQAAAQ0"], referer: https://www.google.com/
[Mon Dec 22 21:37:26.076735 2025] [:error] [pid 58172:tid 58175] [client 193.36.224.90:51187] [client 193.36.224.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.90, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJluSVKDT5jWOcnSUCXAAAAME"], referer: https://www.google.com/
[Mon Dec 22 21:37:27.377025 2025] [:error] [pid 33440:tid 33444] [client 193.36.224.35:37429] [client 193.36.224.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.35, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJl5OsUWKqgxu6QTQ_qQAAAQI"], referer: https://www.google.com/
[Mon Dec 22 21:37:28.662954 2025] [:error] [pid 58078:tid 58090] [client 193.36.224.23:54255] [client 193.36.224.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.23, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJmJWKg9Bf8njHlB5cgwAAAAc"], referer: https://www.google.com/
[Mon Dec 22 21:37:29.957601 2025] [:error] [pid 33471:tid 33479] [client 136.144.19.180:33017] [client 136.144.19.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.180, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJmb5BeNE7regJ7ixUmwAAAUU"], referer: https://www.google.com/
[Mon Dec 22 21:37:31.278206 2025] [:error] [pid 33564:tid 33587] [client 136.144.19.187:22827] [client 136.144.19.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.187, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJmwSHeG6oLmMnKY7TqwAAAhQ"], referer: https://www.google.com/
[Mon Dec 22 21:37:32.572034 2025] [:error] [pid 56080:tid 56138] [client 193.36.224.35:58827] [client 193.36.224.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.35, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJnJIHT3YJq9hjDc7zLAAAAw4"], referer: https://www.google.com/
[Mon Dec 22 21:37:33.854687 2025] [:error] [pid 33535:tid 33544] [client 193.36.224.31:38635] [client 193.36.224.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.31, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJnWOCI8D9Xtn-n7TOCgAAAcc"], referer: https://www.google.com/
[Mon Dec 22 21:37:35.142963 2025] [:error] [pid 58078:tid 58084] [client 193.36.224.107:40545] [client 193.36.224.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.107, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJn5WKg9Bf8njHlB5chwAAAAE"], referer: https://www.google.com/
[Mon Dec 22 21:37:36.465222 2025] [:error] [pid 56155:tid 56236] [client 136.144.19.187:52719] [client 136.144.19.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.187, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJoGG8a3wQucsuN67-fgAAA44"], referer: https://www.google.com/
[Mon Dec 22 21:38:07.893751 2025] [:error] [pid 58078:tid 58087] [client 136.144.19.155:43925] [client 136.144.19.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.155, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJv5WKg9Bf8njHlB5csQAAAAQ"], referer: https://www.google.com/
[Mon Dec 22 21:38:09.468849 2025] [:error] [pid 56155:tid 56228] [client 136.144.19.160:45141] [client 136.144.19.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.160, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJwWG8a3wQucsuN67-lgAAA4Y"], referer: https://www.google.com/
[Mon Dec 22 21:38:10.866951 2025] [:error] [pid 58078:tid 58089] [client 193.36.224.30:41159] [client 193.36.224.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.30, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJwpWKg9Bf8njHlB5cwQAAAAY"], referer: https://www.google.com/
[Mon Dec 22 21:38:12.275152 2025] [:error] [pid 56080:tid 56138] [client 136.144.19.187:57895] [client 136.144.19.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.187, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJxJIHT3YJq9hjDc7zRQAAAw4"], referer: https://www.google.com/
[Mon Dec 22 21:38:13.691220 2025] [:error] [pid 58172:tid 58188] [client 104.234.19.140:43125] [client 104.234.19.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.140, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJxeSVKDT5jWOcnSUCmQAAAM4"], referer: https://www.google.com/
[Mon Dec 22 21:38:15.125181 2025] [:error] [pid 56044:tid 56055] [client 193.36.224.33:38705] [client 193.36.224.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.33, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJx-60uUaieriJqP14swAAAIc"], referer: https://www.google.com/
[Mon Dec 22 21:38:16.531712 2025] [:error] [pid 56044:tid 56066] [client 104.234.19.134:61277] [client 104.234.19.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.134, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJyO60uUaieriJqP14tAAAAJI"], referer: https://www.google.com/
[Mon Dec 22 21:38:17.900107 2025] [:error] [pid 33471:tid 33476] [client 136.144.19.188:24925] [client 136.144.19.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.188, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJyb5BeNE7regJ7ixUvAAAAUI"], referer: https://www.google.com/
[Mon Dec 22 21:38:19.304719 2025] [:error] [pid 33564:tid 33576] [client 104.234.19.138:61209] [client 104.234.19.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.138, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJywSHeG6oLmMnKY7T2QAAAgk"], referer: https://www.google.com/
[Mon Dec 22 21:38:20.650059 2025] [:error] [pid 58078:tid 58096] [client 136.144.19.189:21121] [client 136.144.19.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.189, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJzJWKg9Bf8njHlB5cxwAAAA0"], referer: https://www.google.com/
[Mon Dec 22 21:38:22.063686 2025] [:error] [pid 33564:tid 33572] [client 136.144.19.145:52913] [client 136.144.19.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.145, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJzgSHeG6oLmMnKY7T3AAAAgU"], referer: https://www.google.com/
[Mon Dec 22 21:38:23.501667 2025] [:error] [pid 56044:tid 56058] [client 193.36.224.96:35839] [client 193.36.224.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.96, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJz-60uUaieriJqP14twAAAIo"], referer: https://www.google.com/
[Mon Dec 22 21:38:24.960725 2025] [:error] [pid 33564:tid 33577] [client 104.234.19.134:34985] [client 104.234.19.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.134, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJ0ASHeG6oLmMnKY7T4AAAAgo"], referer: https://www.google.com/
[Mon Dec 22 21:38:26.401583 2025] [:error] [pid 33535:tid 33550] [client 193.36.224.32:30575] [client 193.36.224.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.32, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJ0mOCI8D9Xtn-n7TOZgAAAc0"], referer: https://www.google.com/
[Mon Dec 22 21:38:57.703723 2025] [:error] [pid 56155:tid 56224] [client 193.36.224.23:28601] [client 193.36.224.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.23, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJ8WG8a3wQucsuN67-qgAAA4I"], referer: https://www.google.com/
[Mon Dec 22 21:38:59.114494 2025] [:error] [pid 56080:tid 56133] [client 136.144.19.148:46427] [client 136.144.19.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.148, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJ85IHT3YJq9hjDc7zZQAAAwk"], referer: https://www.google.com/
[Mon Dec 22 21:39:00.424484 2025] [:error] [pid 56044:tid 56052] [client 193.36.224.31:54877] [client 193.36.224.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.31, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJ9O60uUaieriJqP14xwAAAIQ"], referer: https://www.google.com/
[Mon Dec 22 21:39:01.743370 2025] [:error] [pid 56155:tid 56226] [client 193.36.224.107:51055] [client 193.36.224.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.107, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJ9WG8a3wQucsuN67-rQAAA4Q"], referer: https://www.google.com/
[Mon Dec 22 21:39:03.044344 2025] [:error] [pid 33472:tid 33517] [client 193.36.224.50:44357] [client 193.36.224.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.50, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJ955p2WQpPIK8HAk_KgAAAZA"], referer: https://www.google.com/
[Mon Dec 22 21:39:04.341685 2025] [:error] [pid 58078:tid 58091] [client 104.234.19.140:23829] [client 104.234.19.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.140, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJ-JWKg9Bf8njHlB5c8AAAAAg"], referer: https://www.google.com/
[Mon Dec 22 21:39:05.635804 2025] [:error] [pid 56044:tid 56058] [client 136.144.19.182:24483] [client 136.144.19.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.182, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJ-e60uUaieriJqP14ygAAAIo"], referer: https://www.google.com/
[Mon Dec 22 21:39:06.921800 2025] [:error] [pid 33440:tid 33463] [client 136.144.19.148:54099] [client 136.144.19.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.148, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJ-pOsUWKqgxu6QTQ_7QAAARU"], referer: https://www.google.com/
[Mon Dec 22 21:39:08.265265 2025] [:error] [pid 33472:tid 33506] [client 136.144.19.145:42721] [client 136.144.19.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.145, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJ_J5p2WQpPIK8HAk_MgAAAYU"], referer: https://www.google.com/
[Mon Dec 22 21:39:09.556486 2025] [:error] [pid 33564:tid 33581] [client 104.234.19.138:62833] [client 104.234.19.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.138, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJ_QSHeG6oLmMnKY7T_gAAAg4"], referer: https://www.google.com/
[Mon Dec 22 21:39:10.847950 2025] [:error] [pid 56044:tid 56069] [client 136.144.19.147:55845] [client 136.144.19.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.147, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlJ_u60uUaieriJqP14zAAAAJU"], referer: https://www.google.com/
[Mon Dec 22 21:39:12.140362 2025] [:error] [pid 33564:tid 33580] [client 193.36.224.47:37667] [client 193.36.224.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.47, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKAASHeG6oLmMnKY7UAQAAAg0"], referer: https://www.google.com/
[Mon Dec 22 21:39:13.440174 2025] [:error] [pid 33472:tid 33502] [client 193.36.224.96:22231] [client 193.36.224.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.96, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKAZ5p2WQpPIK8HAk_NwAAAYE"], referer: https://www.google.com/
[Mon Dec 22 21:39:14.727730 2025] [:error] [pid 33471:tid 33485] [client 136.144.19.186:52439] [client 136.144.19.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.186, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKAr5BeNE7regJ7ixU1gAAAUs"], referer: https://www.google.com/
[Mon Dec 22 21:39:16.050628 2025] [:error] [pid 33564:tid 33589] [client 193.36.224.89:35363] [client 193.36.224.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.89, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKBASHeG6oLmMnKY7UBQAAAhY"], referer: https://www.google.com/
[Mon Dec 22 21:39:17.394767 2025] [:error] [pid 33535:tid 33551] [client 193.36.224.30:61765] [client 193.36.224.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.30, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKBWOCI8D9Xtn-n7TOfwAAAc4"], referer: https://www.google.com/
[Mon Dec 22 21:39:18.677422 2025] [:error] [pid 33440:tid 33464] [client 193.36.224.89:40003] [client 193.36.224.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.89, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKBpOsUWKqgxu6QTQ_8QAAARY"], referer: https://www.google.com/
[Mon Dec 22 21:39:50.058315 2025] [:error] [pid 33535:tid 33557] [client 136.144.19.189:31069] [client 136.144.19.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.189, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKJmOCI8D9Xtn-n7TOmQAAAdQ"], referer: https://www.google.com/
[Mon Dec 22 21:39:51.615137 2025] [:error] [pid 58172:tid 58189] [client 136.144.19.188:61345] [client 136.144.19.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.188, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKJ-SVKDT5jWOcnSUDCQAAAM8"], referer: https://www.google.com/
[Mon Dec 22 21:39:52.953825 2025] [:error] [pid 56155:tid 56238] [client 104.234.19.133:51077] [client 104.234.19.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.133, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKKGG8a3wQucsuN67-7QAAA5A"], referer: https://www.google.com/
[Mon Dec 22 21:39:54.282665 2025] [:error] [pid 33472:tid 33504] [client 136.144.19.147:55137] [client 136.144.19.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.147, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKKp5p2WQpPIK8HAk_UAAAAYM"], referer: https://www.google.com/
[Mon Dec 22 21:39:55.682090 2025] [:error] [pid 33564:tid 33587] [client 104.234.19.139:25821] [client 104.234.19.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.139, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKKwSHeG6oLmMnKY7UKgAAAhQ"], referer: https://www.google.com/
[Mon Dec 22 21:39:57.033725 2025] [:error] [pid 56080:tid 56138] [client 193.36.224.49:26705] [client 193.36.224.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.49, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKLZIHT3YJq9hjDc7ziwAAAw4"], referer: https://www.google.com/
[Mon Dec 22 21:39:58.349395 2025] [:error] [pid 33440:tid 33458] [client 136.144.19.198:48919] [client 136.144.19.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.198, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKLpOsUWKqgxu6QTRACwAAARA"], referer: https://www.google.com/
[Mon Dec 22 21:39:59.740105 2025] [:error] [pid 56044:tid 56055] [client 104.234.19.140:48799] [client 104.234.19.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.140, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKL-60uUaieriJqP146AAAAIc"], referer: https://www.google.com/
[Mon Dec 22 21:40:01.063790 2025] [:error] [pid 56155:tid 56240] [client 136.144.19.148:64311] [client 136.144.19.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.148, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKMWG8a3wQucsuN67-8wAAA5I"], referer: https://www.google.com/
[Mon Dec 22 21:40:02.475676 2025] [:error] [pid 58078:tid 58085] [client 193.36.224.21:38523] [client 193.36.224.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.21, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKMpWKg9Bf8njHlB5dWAAAAAI"], referer: https://www.google.com/
[Mon Dec 22 21:40:03.837507 2025] [:error] [pid 56080:tid 56133] [client 193.36.224.31:23961] [client 193.36.224.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.31, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKM5IHT3YJq9hjDc7zkQAAAwk"], referer: https://www.google.com/
[Mon Dec 22 21:40:05.132660 2025] [:error] [pid 56155:tid 56231] [client 136.144.19.182:51091] [client 136.144.19.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.182, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKNWG8a3wQucsuN67-9QAAA4k"], referer: https://www.google.com/
[Mon Dec 22 21:40:06.454750 2025] [:error] [pid 56080:tid 56147] [client 193.36.224.31:25773] [client 193.36.224.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.31, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKNpIHT3YJq9hjDc7zlQAAAxc"], referer: https://www.google.com/
[Mon Dec 22 21:40:07.762524 2025] [:error] [pid 33472:tid 33501] [client 136.144.19.180:33033] [client 136.144.19.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.180, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKN55p2WQpPIK8HAk_WgAAAYA"], referer: https://www.google.com/
[Mon Dec 22 21:40:09.110518 2025] [:error] [pid 58172:tid 58176] [client 193.36.224.23:39305] [client 193.36.224.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.23, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKOeSVKDT5jWOcnSUDFAAAAMI"], referer: https://www.google.com/
[Mon Dec 22 21:40:10.453656 2025] [:error] [pid 33472:tid 33505] [client 104.234.19.135:62749] [client 104.234.19.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.135, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aUlKOp5p2WQpPIK8HAk_YAAAAYQ"], referer: https://www.google.com/
[Mon Dec 22 23:31:48.582165 2025] [:error] [pid 33472:tid 33523] [client 209.38.208.202:50914] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUlkZJ5p2WQpPIK8HAlVRQAAAZY"]
[Mon Dec 22 23:31:58.350649 2025] [authz_core:error] [pid 56080:tid 56132] [client 209.38.208.202:50990] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Dec 22 23:32:03.050045 2025] [:error] [pid 33564:tid 33578] [client 209.38.208.202:33022] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aUlkcwSHeG6oLmMnKY7r3AAAAgs"]
[Mon Dec 22 23:32:05.033773 2025] [:error] [pid 33440:tid 33451] [client 209.38.208.202:33026] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aUlkdZOsUWKqgxu6QTRSMwAAAQk"]
[Wed Dec 24 04:11:49.254199 2025] [:error] [pid 16550:tid 16560] [client 20.78.178.63:64847] [client 20.78.178.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aUr3haYYcdD-LuO7vrDhUwAAAMg"]
[Wed Dec 24 04:16:40.799672 2025] [:error] [pid 16467:tid 16520] [client 20.78.178.63:65314] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pepe.php"] [unique_id "aUr4qI0TJMcBxX5slgpr4AAAAFc"]
[Wed Dec 24 04:16:44.379918 2025] [:error] [pid 16467:tid 16521] [client 20.78.178.63:59685] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pepe.php"] [unique_id "aUr4rI0TJMcBxX5slgpr_gAAAFg"]
[Wed Dec 24 04:16:49.938226 2025] [:error] [pid 16468:tid 16539] [client 20.78.178.63:64922] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/v2.php"] [unique_id "aUr4sYdyfuSTFLkCbP-oswAAAI8"]
[Wed Dec 24 04:16:50.845465 2025] [:error] [pid 16466:tid 16483] [client 20.78.178.63:65282] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/v2.php"] [unique_id "aUr4sru0JcuKJMjJn6xYTgAAAA0"]
[Wed Dec 24 04:16:52.704597 2025] [:error] [pid 16467:tid 16516] [client 20.78.178.63:64895] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/v2.php"] [unique_id "aUr4tI0TJMcBxX5slgpsDQAAAFM"]
[Wed Dec 24 04:16:55.191416 2025] [:error] [pid 16550:tid 16562] [client 20.78.178.63:65251] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/v2.php"] [unique_id "aUr4t6YYcdD-LuO7vrDi8gAAAMo"]
[Wed Dec 24 04:16:57.751447 2025] [:error] [pid 16467:tid 16506] [client 20.78.178.63:65222] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/yca.php"] [unique_id "aUr4uY0TJMcBxX5slgpsDwAAAEk"]
[Wed Dec 24 04:17:03.312350 2025] [:error] [pid 16466:tid 16492] [client 20.78.178.63:64937] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/yca.php"] [unique_id "aUr4v7u0JcuKJMjJn6xYVgAAABY"]
[Wed Dec 24 04:17:05.644847 2025] [:error] [pid 16467:tid 16511] [client 20.78.178.63:65239] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/yca.php"] [unique_id "aUr4wY0TJMcBxX5slgpsGQAAAE4"]
[Wed Dec 24 04:17:14.882213 2025] [:error] [pid 16550:tid 16567] [client 20.78.178.63:59678] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lock360.php"] [unique_id "aUr4yqYYcdD-LuO7vrDjFQAAAM8"]
[Wed Dec 24 04:17:18.012869 2025] [:error] [pid 16466:tid 16470] [client 20.78.178.63:64454] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lock360.php"] [unique_id "aUr4zru0JcuKJMjJn6xYYQAAAAA"]
[Wed Dec 24 04:17:21.606726 2025] [:error] [pid 16550:tid 16565] [client 20.78.178.63:59671] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lock360.php"] [unique_id "aUr40aYYcdD-LuO7vrDjJQAAAM0"]
[Wed Dec 24 04:17:28.099186 2025] [:error] [pid 16467:tid 16521] [client 20.78.178.63:59686] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ot.php"] [unique_id "aUr42I0TJMcBxX5slgpsMgAAAFg"]
[Wed Dec 24 04:18:30.428812 2025] [:error] [pid 16468:tid 16537] [client 20.78.178.63:64909] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/403.php"] [unique_id "aUr5FodyfuSTFLkCbP-paQAAAI0"]
[Wed Dec 24 04:18:32.391748 2025] [:error] [pid 16550:tid 16555] [client 20.78.178.63:65250] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/403.php"] [unique_id "aUr5GKYYcdD-LuO7vrDjtgAAAMM"]
[Wed Dec 24 04:18:37.333823 2025] [:error] [pid 16466:tid 16491] [client 20.78.178.63:65261] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/403.php"] [unique_id "aUr5Hbu0JcuKJMjJn6xYtAAAABU"]
[Wed Dec 24 04:18:38.931748 2025] [:error] [pid 16550:tid 16552] [client 20.78.178.63:59684] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/403.php"] [unique_id "aUr5HqYYcdD-LuO7vrDjugAAAMA"]
[Wed Dec 24 04:18:55.981753 2025] [:error] [pid 16550:tid 16559] [client 20.78.178.63:59648] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/doc.php"] [unique_id "aUr5L6YYcdD-LuO7vrDj1QAAAMc"]
[Wed Dec 24 04:18:58.630414 2025] [:error] [pid 16468:tid 16545] [client 20.78.178.63:59652] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/doc.php"] [unique_id "aUr5ModyfuSTFLkCbP-pdAAAAJU"]
[Wed Dec 24 04:19:01.245719 2025] [:error] [pid 16466:tid 16473] [client 20.78.178.63:65269] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/doc.php"] [unique_id "aUr5Nbu0JcuKJMjJn6xYvAAAAAM"]
[Wed Dec 24 04:19:06.329032 2025] [:error] [pid 16467:tid 16510] [client 20.78.178.63:59673] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/doc.php"] [unique_id "aUr5Oo0TJMcBxX5slgpspQAAAE0"]
[Wed Dec 24 04:19:08.204434 2025] [:error] [pid 16466:tid 16475] [client 20.78.178.63:64936] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/orm.php"] [unique_id "aUr5PLu0JcuKJMjJn6xYvQAAAAU"]
[Wed Dec 24 04:19:13.545055 2025] [:error] [pid 16468:tid 16524] [client 20.78.178.63:64847] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/orm.php"] [unique_id "aUr5QYdyfuSTFLkCbP-pfgAAAIA"]
[Wed Dec 24 04:19:15.549813 2025] [:error] [pid 16467:tid 16511] [client 20.78.178.63:59664] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/orm.php"] [unique_id "aUr5Q40TJMcBxX5slgpsqgAAAE4"]
[Wed Dec 24 04:19:16.838057 2025] [:error] [pid 16468:tid 16532] [client 20.78.178.63:59663] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/orm.php"] [unique_id "aUr5RIdyfuSTFLkCbP-phQAAAIg"]
[Wed Dec 24 04:19:18.563295 2025] [:error] [pid 16468:tid 16526] [client 20.78.178.63:59692] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ay.php"] [unique_id "aUr5RodyfuSTFLkCbP-piAAAAII"]
[Wed Dec 24 04:19:19.574703 2025] [:error] [pid 16467:tid 16506] [client 20.78.178.63:65274] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ay.php"] [unique_id "aUr5R40TJMcBxX5slgpsqwAAAEk"]
[Wed Dec 24 04:19:20.632037 2025] [:error] [pid 16468:tid 16530] [client 20.78.178.63:64839] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ay.php"] [unique_id "aUr5SIdyfuSTFLkCbP-pjAAAAIY"]
[Wed Dec 24 04:19:20.994835 2025] [:error] [pid 16468:tid 16547] [client 20.78.178.63:65256] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ay.php"] [unique_id "aUr5SIdyfuSTFLkCbP-pjQAAAJc"]
[Wed Dec 24 04:19:23.817281 2025] [:error] [pid 16550:tid 16571] [client 20.78.178.63:64836] [client 20.78.178.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/buy.php"] [unique_id "aUr5S6YYcdD-LuO7vrDj5wAAANM"]
[Wed Dec 24 18:51:34.344882 2025] [:error] [pid 16468:tid 16535] [client 128.199.182.152:44314] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUvFtodyfuSTFLkCbP-JfgAAAIs"]
[Wed Dec 24 18:51:42.601801 2025] [authz_core:error] [pid 16466:tid 16483] [client 128.199.182.152:37068] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Wed Dec 24 18:51:46.421445 2025] [:error] [pid 29371:tid 29397] [client 128.199.182.152:37108] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aUvFwns-DlKLysSq5L-QFQAAAdg"]
[Wed Dec 24 18:51:48.621389 2025] [:error] [pid 16468:tid 16536] [client 128.199.182.152:37112] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aUvFxIdyfuSTFLkCbP-JiwAAAIw"]
[Wed Dec 24 23:12:33.853757 2025] [:error] [pid 28405:tid 28432] [client 4.213.2.158:42770] [client 4.213.2.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "aUwC4cKkTWlhmfdXFqbN2AAAAVY"]
[Thu Dec 25 02:17:59.377851 2025] [:error] [pid 21513:tid 21516] [client 195.178.110.223:33222] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aUwuV2PuOaBlVJ9Har30QQAAAYE"]
[Thu Dec 25 04:33:19.152793 2025] [:error] [pid 31570:tid 31607] [client 159.89.200.230:63060] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/style.php"] [unique_id "aUxOD2Py2DpAzW_4a2iGlgAAAEc"]
[Thu Dec 25 04:33:19.503538 2025] [:error] [pid 31655:tid 31658] [client 159.89.200.230:63166] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/style.php"] [unique_id "aUxOD5ozPMk9HPtIJPPUlgAAAME"]
[Thu Dec 25 04:33:19.846622 2025] [:error] [pid 31570:tid 31618] [client 159.89.200.230:63276] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/style.php"] [unique_id "aUxOD2Py2DpAzW_4a2iGmQAAAFI"]
[Thu Dec 25 04:33:20.188732 2025] [:error] [pid 31655:tid 31660] [client 159.89.200.230:63363] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/style.php"] [unique_id "aUxOEJozPMk9HPtIJPPUmgAAAMM"]
[Thu Dec 25 04:33:20.534525 2025] [:error] [pid 31569:tid 31592] [client 159.89.200.230:63449] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style.php"] [unique_id "aUxOEGiSFBH7Ee_uldXErgAAABM"]
[Thu Dec 25 04:33:20.878485 2025] [:error] [pid 31571:tid 31644] [client 159.89.200.230:63626] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "aUxOEO7e_lLK2X5wU8njZAAAAJE"]
[Thu Dec 25 04:33:21.238776 2025] [:error] [pid 31570:tid 31624] [client 159.89.200.230:63749] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/file.php"] [unique_id "aUxOEWPy2DpAzW_4a2iGqwAAAFg"]
[Thu Dec 25 04:33:21.588264 2025] [:error] [pid 2996:tid 3013] [client 159.89.200.230:63895] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/flower.php"] [unique_id "aUxOEarrTp0EWNyhaIQoewAAAQ8"]
[Thu Dec 25 04:33:21.934287 2025] [:error] [pid 31571:tid 31636] [client 159.89.200.230:64053] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/gifclass.php"] [unique_id "aUxOEe7e_lLK2X5wU8njbQAAAIk"]
[Thu Dec 25 04:33:22.279538 2025] [:error] [pid 2996:tid 3005] [client 159.89.200.230:64332] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/bless.php"] [unique_id "aUxOEqrrTp0EWNyhaIQojAAAAQc"]
[Thu Dec 25 04:33:22.625365 2025] [:error] [pid 31571:tid 31643] [client 159.89.200.230:64598] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/class-t.api.php"] [unique_id "aUxOEu7e_lLK2X5wU8njeQAAAJA"]
[Thu Dec 25 04:33:22.970234 2025] [:error] [pid 31571:tid 31629] [client 159.89.200.230:64769] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/blurbs.php"] [unique_id "aUxOEu7e_lLK2X5wU8njegAAAII"]
[Thu Dec 25 04:33:23.313533 2025] [:error] [pid 31655:tid 31675] [client 159.89.200.230:64892] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/akcc.php"] [unique_id "aUxOE5ozPMk9HPtIJPPUsQAAANI"]
[Thu Dec 25 04:33:23.657890 2025] [:error] [pid 31569:tid 31582] [client 159.89.200.230:65072] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "aUxOE2iSFBH7Ee_uldXE0AAAAAk"]
[Thu Dec 25 04:33:24.011177 2025] [:error] [pid 31571:tid 31650] [client 159.89.200.230:65180] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/shelp.php"] [unique_id "aUxOFO7e_lLK2X5wU8njjQAAAJc"]
[Thu Dec 25 04:33:25.938890 2025] [:error] [pid 31570:tid 31611] [client 159.89.200.230:49711] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/cord.php"] [unique_id "aUxOFWPy2DpAzW_4a2iG3AAAAEs"]
[Thu Dec 25 04:33:26.280620 2025] [:error] [pid 31655:tid 31660] [client 159.89.200.230:49903] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/dex.php"] [unique_id "aUxOFpozPMk9HPtIJPPUxgAAAMM"]
[Thu Dec 25 04:33:26.634959 2025] [:error] [pid 31571:tid 31644] [client 159.89.200.230:50083] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aUxOFu7e_lLK2X5wU8njqwAAAJE"]
[Thu Dec 25 04:33:26.986705 2025] [:error] [pid 31655:tid 31659] [client 159.89.200.230:50283] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/file2.php"] [unique_id "aUxOFpozPMk9HPtIJPPUygAAAMI"]
[Thu Dec 25 04:33:27.330485 2025] [:error] [pid 31571:tid 31628] [client 159.89.200.230:50490] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/zwso.php"] [unique_id "aUxOF-7e_lLK2X5wU8njswAAAIE"]
[Thu Dec 25 04:33:27.674191 2025] [:error] [pid 31655:tid 31674] [client 159.89.200.230:50625] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/zwso.php"] [unique_id "aUxOF5ozPMk9HPtIJPPU1QAAANE"]
[Thu Dec 25 04:33:28.022016 2025] [:error] [pid 31655:tid 31670] [client 159.89.200.230:50825] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "aUxOGJozPMk9HPtIJPPU4wAAAM0"]
[Thu Dec 25 04:33:28.365284 2025] [:error] [pid 31655:tid 31678] [client 159.89.200.230:51025] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/bolt.php"] [unique_id "aUxOGJozPMk9HPtIJPPU8AAAANU"]
[Thu Dec 25 04:33:28.711133 2025] [:error] [pid 31655:tid 31663] [client 159.89.200.230:51213] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/shlo.php"] [unique_id "aUxOGJozPMk9HPtIJPPU-wAAAMY"]
[Thu Dec 25 04:33:29.055799 2025] [:error] [pid 31571:tid 31651] [client 159.89.200.230:51458] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/133.php"] [unique_id "aUxOGe7e_lLK2X5wU8njywAAAJg"]
[Thu Dec 25 04:33:29.423666 2025] [:error] [pid 2996:tid 3013] [client 159.89.200.230:51653] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ahax.php"] [unique_id "aUxOGarrTp0EWNyhaIQo2wAAAQ8"]
[Thu Dec 25 04:33:29.769622 2025] [:error] [pid 31655:tid 31676] [client 159.89.200.230:51850] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/php8.php"] [unique_id "aUxOGZozPMk9HPtIJPPVGAAAANM"]
[Thu Dec 25 04:33:30.122815 2025] [:error] [pid 2996:tid 3021] [client 159.89.200.230:52079] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/lufix1.php"] [unique_id "aUxOGqrrTp0EWNyhaIQo4AAAARc"]
[Thu Dec 25 04:33:30.501002 2025] [:error] [pid 31571:tid 31630] [client 159.89.200.230:52245] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/witmm.php"] [unique_id "aUxOGu7e_lLK2X5wU8nj3QAAAIM"]
[Thu Dec 25 04:33:30.866252 2025] [:error] [pid 31570:tid 31624] [client 159.89.200.230:52444] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/index.php"] [unique_id "aUxOGmPy2DpAzW_4a2iG_gAAAFg"]
[Thu Dec 25 04:33:31.218987 2025] [:error] [pid 31571:tid 31637] [client 159.89.200.230:52583] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUxOG-7e_lLK2X5wU8nj4gAAAIo"]
[Thu Dec 25 04:33:31.565121 2025] [:error] [pid 31569:tid 31593] [client 159.89.200.230:52758] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/index.php"] [unique_id "aUxOG2iSFBH7Ee_uldXFMgAAABQ"]
[Thu Dec 25 04:33:31.908609 2025] [:error] [pid 31655:tid 31677] [client 159.89.200.230:52901] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ioxi-o.php"] [unique_id "aUxOG5ozPMk9HPtIJPPVMgAAANQ"]
[Thu Dec 25 04:33:32.255025 2025] [:error] [pid 31655:tid 31670] [client 159.89.200.230:53064] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "aUxOHJozPMk9HPtIJPPVOwAAAM0"]
[Thu Dec 25 04:33:32.770135 2025] [:error] [pid 31571:tid 31649] [client 159.89.200.230:53369] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/files.php"] [unique_id "aUxOHO7e_lLK2X5wU8nj-AAAAJY"]
[Thu Dec 25 04:33:33.114444 2025] [:error] [pid 31655:tid 31658] [client 159.89.200.230:53636] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-editor.php"] [unique_id "aUxOHZozPMk9HPtIJPPVQgAAAME"]
[Thu Dec 25 04:33:33.457681 2025] [:error] [pid 31571:tid 31638] [client 159.89.200.230:53855] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/txets.php"] [unique_id "aUxOHe7e_lLK2X5wU8nkBAAAAIs"]
[Thu Dec 25 04:33:33.806016 2025] [:error] [pid 31571:tid 31645] [client 159.89.200.230:54152] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/txets.php"] [unique_id "aUxOHe7e_lLK2X5wU8nkCgAAAJI"]
[Thu Dec 25 04:33:34.182291 2025] [:error] [pid 31571:tid 31630] [client 159.89.200.230:54430] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/txets.php"] [unique_id "aUxOHu7e_lLK2X5wU8nkEwAAAIM"]
[Thu Dec 25 04:33:34.551203 2025] [:error] [pid 31571:tid 31634] [client 159.89.200.230:54841] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/postnews.php"] [unique_id "aUxOHu7e_lLK2X5wU8nkGAAAAIc"]
[Thu Dec 25 04:33:34.903346 2025] [:error] [pid 31570:tid 31600] [client 159.89.200.230:55270] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/postnews.php"] [unique_id "aUxOHmPy2DpAzW_4a2iHLAAAAEA"]
[Thu Dec 25 04:33:35.250960 2025] [:error] [pid 31569:tid 31587] [client 159.89.200.230:55569] [client 159.89.200.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/postnews.php"] [unique_id "aUxOH2iSFBH7Ee_uldXFRAAAAA4"]
[Fri Dec 26 01:04:03.987944 2025] [autoindex:error] [pid 24946:tid 24953] [client 20.255.93.205:14142] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 01:04:07.984758 2025] [autoindex:error] [pid 24946:tid 24952] [client 20.255.93.205:14142] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 01:04:08.731933 2025] [:error] [pid 24946:tid 24957] [client 20.255.93.205:13243] [client 20.255.93.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aU1uiFfyLYxv3Jn9S708CQAAAEk"]
[Fri Dec 26 14:40:33.284636 2025] [autoindex:error] [pid 15063:tid 15076] [client 203.159.81.2:34653] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:40:33.734231 2025] [autoindex:error] [pid 15063:tid 15075] [client 203.159.81.2:34653] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:40:34.228662 2025] [autoindex:error] [pid 15063:tid 15089] [client 203.159.81.2:34653] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:40:34.748731 2025] [:error] [pid 15063:tid 15079] [client 203.159.81.2:34653] [client 203.159.81.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aU4t4uDsf_aL46Jy7z-qDwAAAQ4"]
[Fri Dec 26 19:42:38.376905 2025] [:error] [pid 15063:tid 15065] [client 20.196.89.188:44417] [client 20.196.89.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aU50ruDsf_aL46Jy7z8BKQAAAQA"]
[Sat Dec 27 03:41:38.636632 2025] [:error] [pid 16093:tid 16128] [client 34.140.170.179:49268] [client 34.140.170.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.140.170.179, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aU7k8oOUFPKOkSkOup3FhQAAAEI"]
[Sat Dec 27 03:41:41.301683 2025] [:error] [pid 16093:tid 16144] [client 34.140.170.179:56360] [client 34.140.170.179] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aU7k9YOUFPKOkSkOup3FkAAAAFI"]
[Sat Dec 27 03:41:42.168311 2025] [:error] [pid 16093:tid 16149] [client 34.140.170.179:56360] [client 34.140.170.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.140.170.179, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aU7k9oOUFPKOkSkOup3FkwAAAFc"]
[Sat Dec 27 03:41:43.102258 2025] [:error] [pid 16094:tid 16158] [client 34.140.170.179:59116] [client 34.140.170.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.140.170.179, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aU7k9yMbm5HhAM-j1YReBAAAAIU"]
[Sat Dec 27 03:41:44.046993 2025] [:error] [pid 16093:tid 16134] [client 34.140.170.179:58271] [client 34.140.170.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.140.170.179, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aU7k-IOUFPKOkSkOup3FmQAAAEg"]
[Sat Dec 27 03:41:44.047123 2025] [:error] [pid 16093:tid 16134] [client 34.140.170.179:58271] [client 34.140.170.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.140.170.179, counter = 6"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aU7k-IOUFPKOkSkOup3FmQAAAEg"]
[Sat Dec 27 20:27:16.526621 2025] [autoindex:error] [pid 45373:tid 45388] [client 4.190.152.69:17432] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 27 20:27:37.511410 2025] [:error] [pid 32192:tid 32242] [client 4.190.152.69:17461] [client 4.190.152.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aU_QuS_q0VFe066lbk9a9gAAAFM"]
[Sat Dec 27 20:28:02.962368 2025] [:error] [pid 32193:tid 32262] [client 4.190.152.69:7131] [client 4.190.152.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aU_Q0hgw0eCOc2qYqaKvBAAAAIw"]
[Sat Dec 27 20:28:04.216701 2025] [:error] [pid 32193:tid 32250] [client 4.190.152.69:17377] [client 4.190.152.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aU_Q1Bgw0eCOc2qYqaKvBgAAAIA"]
[Sat Dec 27 20:28:06.094859 2025] [autoindex:error] [pid 45373:tid 45398] [client 4.190.152.69:17426] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 27 20:28:06.218227 2025] [:error] [pid 45373:tid 45376] [client 4.190.152.69:17426] [client 4.190.152.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aU_Q1i7p_wFcbpu46HV8sQAAAUE"]
[Sat Dec 27 20:28:07.883151 2025] [:error] [pid 31933:tid 31942] [client 4.190.152.69:17392] [client 4.190.152.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aU_Q18Gr1WIJr39uqarnCQAAAcc"]
[Sat Dec 27 20:28:10.256957 2025] [proxy_fcgi:error] [pid 45373:tid 45386] [client 4.190.152.69:17446] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 20:28:15.903803 2025] [autoindex:error] [pid 3114:tid 3124] [client 4.190.152.69:17436] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 27 20:28:16.623675 2025] [:error] [pid 32191:tid 32203] [client 4.190.152.69:17451] [client 4.190.152.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aU_Q4LPNtMgrjVCHIdEyFQAAAAg"]
[Sat Dec 27 20:28:17.944051 2025] [autoindex:error] [pid 32191:tid 32202] [client 4.190.152.69:17406] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 27 20:28:23.121870 2025] [:error] [pid 31933:tid 31945] [client 4.190.152.69:7138] [client 4.190.152.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aU_Q58Gr1WIJr39uqarnKQAAAco"]
[Sat Dec 27 20:28:23.393440 2025] [:error] [pid 15939:tid 15955] [client 4.190.152.69:17366] [client 4.190.152.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aU_Q5-Z7qdnFxikanMLkowAAAQ4"]
[Sun Dec 28 19:43:02.489265 2025] [:error] [pid 43789:tid 43796] [client 4.194.108.108:23945] [client 4.194.108.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aVEXxga-tUppni4CcCYwhgAAAQU"]
[Sun Dec 28 19:43:09.567184 2025] [autoindex:error] [pid 42293:tid 42326] [client 4.194.108.108:23954] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 19:43:50.658617 2025] [:error] [pid 42292:tid 42304] [client 4.194.108.108:25508] [client 4.194.108.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "aVEX9pyOrM_vaFx1osZGpQAAAAg"]
[Sun Dec 28 19:43:53.427749 2025] [autoindex:error] [pid 29388:tid 29416] [client 4.194.108.108:17370] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 19:44:00.516699 2025] [:error] [pid 43789:tid 43813] [client 4.194.108.108:17357] [client 4.194.108.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aVEYAAa-tUppni4CcCYwxAAAARY"]
[Sun Dec 28 19:44:52.151787 2025] [autoindex:error] [pid 29388:tid 29403] [client 4.194.108.108:23956] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 19:44:54.042995 2025] [:error] [pid 29437:tid 29470] [client 4.194.108.108:17218] [client 4.194.108.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVEYNhhDotAbVk6pZLfAuQAAAcQ"]
[Sun Dec 28 19:44:56.967759 2025] [proxy_fcgi:error] [pid 43789:tid 43811] [client 4.194.108.108:17318] AH01071: Got error 'Primary script unknown'
[Mon Dec 29 10:04:04.068843 2025] [:error] [pid 11451:tid 11477] [client 79.122.16.124:52814] [client 79.122.16.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.southerncrosscentre.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.southerncrosscentre.au"] [uri "/"] [unique_id "aVHhlJDUmxySx0Vynm_OwgAAABY"]
[Mon Dec 29 10:04:05.068332 2025] [:error] [pid 11453:tid 11525] [client 45.187.43.6:24213] [client 45.187.43.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||southerncrosscentre.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aVHhlby-FXnKT7-6pt6CUwAAAJA"]
[Tue Dec 30 19:58:58.890971 2025] [:error] [pid 38777:tid 38801] [client 206.189.225.181:34150] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aVO-gmLn9GPxJXPhnHYPCAAAAFU"]
[Tue Dec 30 19:59:07.381963 2025] [authz_core:error] [pid 28825:tid 28880] [client 206.189.225.181:34224] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Tue Dec 30 19:59:10.936087 2025] [:error] [pid 38777:tid 38789] [client 206.189.225.181:36672] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aVO-jmLn9GPxJXPhnHYPGwAAAEk"]
[Tue Dec 30 19:59:12.935721 2025] [:error] [pid 47553:tid 47573] [client 206.189.225.181:36676] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aVO-kLvhy9HerwSnwIQDnAAAAZI"]
[Tue Dec 30 20:54:47.305691 2025] [:error] [pid 28954:tid 28958] [client 103.77.106.57:60077] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/postnews.php"] [unique_id "aVPLl6RZgqk7uuu8M0w-WQAAAAI"]
[Tue Dec 30 20:54:48.725125 2025] [:error] [pid 47553:tid 47564] [client 103.77.106.57:60330] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/postnews.php"] [unique_id "aVPLmLvhy9HerwSnwIQREAAAAYk"]
[Tue Dec 30 20:54:50.114251 2025] [:error] [pid 28824:tid 28862] [client 103.77.106.57:60561] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/postnews.php"] [unique_id "aVPLmn8FhtgLvBhuCR1NEAAAAJE"]
[Wed Dec 31 04:24:01.206375 2025] [:error] [pid 33109:tid 33130] [client 195.178.110.190:57778] [client 195.178.110.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aVQ04cYN9k_fnLM-n467TwAAANM"]
[Wed Dec 31 06:39:00.835908 2025] [:error] [pid 33109:tid 33129] [client 158.158.107.11:45760] [client 158.158.107.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "aVRUhMYN9k_fnLM-n44D4AAAANI"]
[Wed Dec 31 07:12:46.886193 2025] [autoindex:error] [pid 42536:tid 42538] [client 68.155.144.44:5195] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 31 07:13:10.270959 2025] [:error] [pid 42504:tid 42516] [client 68.155.144.44:5188] [client 68.155.144.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVRchlg0lj8Dy7rLxBDzHgAAAQk"]
[Wed Dec 31 07:13:40.679913 2025] [:error] [pid 42504:tid 42511] [client 68.155.144.44:4052] [client 68.155.144.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVRcpFg0lj8Dy7rLxBDzUgAAAQQ"]
[Wed Dec 31 07:13:42.224119 2025] [:error] [pid 46814:tid 46827] [client 68.155.144.44:5129] [client 68.155.144.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVRcpib1xN9EDaw4QDvWJQAAAAs"]
[Wed Dec 31 07:13:44.482792 2025] [autoindex:error] [pid 42409:tid 42426] [client 68.155.144.44:5246] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 31 07:13:44.676577 2025] [:error] [pid 42409:tid 42415] [client 68.155.144.44:5246] [client 68.155.144.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aVRcqJ1RyrsdhRzKCqGdBgAAAEM"]
[Wed Dec 31 07:13:46.423017 2025] [:error] [pid 42504:tid 42508] [client 68.155.144.44:4092] [client 68.155.144.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVRcqlg0lj8Dy7rLxBDzXwAAAQE"]
[Wed Dec 31 07:13:48.822586 2025] [proxy_fcgi:error] [pid 42409:tid 42417] [client 68.155.144.44:4045] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 07:13:54.072974 2025] [autoindex:error] [pid 42410:tid 42452] [client 68.155.144.44:5178] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 31 07:13:54.940431 2025] [:error] [pid 42409:tid 42428] [client 68.155.144.44:5139] [client 68.155.144.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVRcsp1RyrsdhRzKCqGdFwAAAFA"]
[Wed Dec 31 07:13:56.479378 2025] [autoindex:error] [pid 42410:tid 42451] [client 68.155.144.44:3969] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 31 07:14:01.918522 2025] [:error] [pid 42536:tid 42555] [client 68.155.144.44:5191] [client 68.155.144.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aVRcuQY1iaVE0V_WQ59N-AAAAVE"]
[Wed Dec 31 07:14:02.300954 2025] [:error] [pid 42410:tid 42447] [client 68.155.144.44:5239] [client 68.155.144.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aVRcuo88GyeTD4x6y_nZEAAAAIg"]
[Fri Jan 02 12:38:13.267510 2026] [:error] [pid 63099:tid 63137] [client 188.166.45.200:64264] [client 188.166.45.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.45.200, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aVdLtcmCZokRPYUhzvh3VQAAAEM"]
[Fri Jan 02 12:38:14.672632 2026] [:error] [pid 63098:tid 63121] [client 188.166.45.200:56465] [client 188.166.45.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.45.200, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aVdLtsez9k78gUs48kry2gAAAA4"]
[Fri Jan 02 12:51:16.706990 2026] [:error] [pid 50186:tid 50208] [client 188.166.45.200:64521] [client 188.166.45.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.45.200, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aVdOxFXqK_iX4f-S70IDagAAAZQ"]
[Fri Jan 02 12:57:41.563209 2026] [:error] [pid 50186:tid 50198] [client 188.166.45.200:61290] [client 188.166.45.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.45.200, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aVdQRVXqK_iX4f-S70IGKgAAAYo"]
[Fri Jan 02 13:06:47.021023 2026] [:error] [pid 63099:tid 63155] [client 138.197.191.238:56542] [client 138.197.191.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.191.238, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aVdSZ8mCZokRPYUhzvh7sQAAAFU"]
[Fri Jan 02 13:06:48.565529 2026] [:error] [pid 63099:tid 63140] [client 138.197.191.238:54544] [client 138.197.191.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.191.238, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aVdSaMmCZokRPYUhzvh7swAAAEY"]
[Fri Jan 02 16:29:18.744642 2026] [:error] [pid 43358:tid 43361] [client 54.236.84.252:53754] [client 54.236.84.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aVeB3gncbHK9auzvrA8otwAAAcE"]
[Fri Jan 02 18:09:16.000880 2026] [:error] [pid 63208:tid 63213] [client 54.236.84.252:37784] [client 54.236.84.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aVeZS3KLI9INGPLzfncryQAAAMI"]
[Sat Jan 03 03:28:47.690946 2026] [:error] [pid 2083:tid 2089] [client 4.190.220.252:4032] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVgcbzVlR_BmlMPnhV6cRwAAAMQ"]
[Sat Jan 03 03:28:50.648607 2026] [:error] [pid 1931:tid 2030] [client 4.190.220.252:61629] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVgcch8Tyw7ZoIdXlcbaXQAAAIY"]
[Sat Jan 03 03:28:53.092611 2026] [:error] [pid 2083:tid 2098] [client 4.190.220.252:61588] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVgcdTVlR_BmlMPnhV6cVgAAAM0"]
[Sat Jan 03 03:29:00.871365 2026] [:error] [pid 1929:tid 1939] [client 4.190.220.252:61597] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVgcfOcFqdpu6TNsuWqxkAAAAAE"]
[Sat Jan 03 11:30:55.325285 2026] [autoindex:error] [pid 34260:tid 34272] [client 185.156.46.113:60086] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 11:30:55.575765 2026] [autoindex:error] [pid 34260:tid 34265] [client 185.156.46.113:60086] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 11:30:55.807429 2026] [autoindex:error] [pid 34260:tid 34281] [client 185.156.46.113:60086] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 11:30:56.068426 2026] [autoindex:error] [pid 34260:tid 34275] [client 185.156.46.113:60086] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 01:39:23.537299 2026] [autoindex:error] [pid 49319:tid 49339] [client 20.205.104.108:15576] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 01:39:57.490412 2026] [:error] [pid 49228:tid 49252] [client 20.205.104.108:15584] [client 20.205.104.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVlUbXCPk2c4rRZq2JT8fgAAABM"]
[Sun Jan 04 01:40:37.212488 2026] [:error] [pid 49319:tid 49345] [client 20.205.104.108:4075] [client 20.205.104.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVlUlbcNXYLFZOiX4cQ_NwAAANg"]
[Sun Jan 04 01:40:39.757180 2026] [:error] [pid 49230:tid 49307] [client 20.205.104.108:15516] [client 20.205.104.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVlUl32klmw7JRfgM3jDpAAAAJM"]
[Sun Jan 04 01:40:42.367405 2026] [autoindex:error] [pid 49230:tid 49310] [client 20.205.104.108:15566] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 01:40:42.662062 2026] [:error] [pid 49230:tid 49293] [client 20.205.104.108:15566] [client 20.205.104.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aVlUmn2klmw7JRfgM3jDsAAAAIU"]
[Sun Jan 04 01:40:44.382530 2026] [:error] [pid 49230:tid 49294] [client 20.205.104.108:15610] [client 20.205.104.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVlUnH2klmw7JRfgM3jDtQAAAIY"]
[Sun Jan 04 01:40:49.009955 2026] [proxy_fcgi:error] [pid 49229:tid 49270] [client 20.205.104.108:15505] AH01071: Got error 'Primary script unknown'
[Sun Jan 04 01:40:55.348972 2026] [autoindex:error] [pid 49319:tid 49326] [client 20.205.104.108:15594] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 01:40:56.804143 2026] [:error] [pid 49319:tid 49330] [client 20.205.104.108:4093] [client 20.205.104.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVlUqLcNXYLFZOiX4cQ_dAAAAMk"]
[Sun Jan 04 01:40:59.593516 2026] [autoindex:error] [pid 49230:tid 49308] [client 20.205.104.108:15580] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 01:41:43.531724 2026] [:error] [pid 49228:tid 49241] [client 20.205.104.108:15501] [client 20.205.104.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.205.104.108, incrementing brute counter"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aVlU13CPk2c4rRZq2JT9ZwAAAAg"]
[Sun Jan 04 01:41:43.535903 2026] [proxy_fcgi:error] [pid 49228:tid 49241] [client 20.205.104.108:15501] AH01071: Got error 'Primary script unknown'
[Sun Jan 04 01:41:47.166265 2026] [autoindex:error] [pid 49228:tid 49237] [client 20.205.104.108:4041] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 01:41:47.803018 2026] [:error] [pid 49228:tid 49234] [client 20.205.104.108:4041] [client 20.205.104.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/index.php"] [unique_id "aVlU23CPk2c4rRZq2JT9dQAAAAE"]
[Sun Jan 04 01:42:01.664843 2026] [:error] [pid 49228:tid 49243] [client 20.205.104.108:4061] [client 20.205.104.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aVlU6XCPk2c4rRZq2JT9kQAAAAo"]
[Sun Jan 04 01:42:02.397438 2026] [:error] [pid 49229:tid 49285] [client 20.205.104.108:4070] [client 20.205.104.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/widgets/index.php"] [unique_id "aVlU6lCM4R1akb8JNI609gAAAFg"]
[Sun Jan 04 05:00:10.834898 2026] [:error] [pid 37536:tid 37554] [client 104.28.246.116:24707] [client 104.28.246.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/style.php"] [unique_id "aVmDWm-iKLialy_3rkvpCgAAAA4"]
[Sun Jan 04 05:00:11.258902 2026] [:error] [pid 37536:tid 37542] [client 104.28.246.116:28885] [client 104.28.246.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/style.php"] [unique_id "aVmDW2-iKLialy_3rkvpCwAAAAI"]
[Sun Jan 04 05:00:11.677501 2026] [:error] [pid 37636:tid 37655] [client 104.28.246.116:49664] [client 104.28.246.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/style.php"] [unique_id "aVmDWy3kmZpEf9yy2b0x8AAAAM8"]
[Sun Jan 04 05:00:12.097941 2026] [:error] [pid 37636:tid 37646] [client 104.28.246.116:39659] [client 104.28.246.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/style.php"] [unique_id "aVmDXC3kmZpEf9yy2b0x9gAAAMY"]
[Mon Jan 05 21:36:14.781312 2026] [:error] [pid 28407:tid 28432] [client 74.225.197.166:49124] [client 74.225.197.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVu-Ttercd3ptydUzM1dpAAAAZU"]
[Mon Jan 05 21:36:16.368696 2026] [:error] [pid 28407:tid 28415] [client 74.225.197.166:11321] [client 74.225.197.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVu-UNercd3ptydUzM1dpwAAAYU"]
[Mon Jan 05 21:36:20.078830 2026] [:error] [pid 28407:tid 28420] [client 74.225.197.166:11266] [client 74.225.197.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVu-VNercd3ptydUzM1duQAAAYk"]
[Mon Jan 05 21:36:26.915135 2026] [:error] [pid 54081:tid 54087] [client 74.225.197.166:49150] [client 74.225.197.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVu-WlL4jLgtF-b9w4eZKgAAAUM"]
[Tue Jan 06 23:19:48.915888 2026] [:error] [pid 44904:tid 44958] [client 4.247.167.136:4620] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oFDtieuI1BJEZcvdZ-AAAAFE"]
[Tue Jan 06 23:19:55.122918 2026] [:error] [pid 44904:tid 44950] [client 4.247.167.136:5016] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oGztieuI1BJEZcvdaNgAAAEk"]
[Tue Jan 06 23:48:53.810434 2026] [:error] [pid 44903:tid 44932] [client 4.241.192.219:15307] [client 4.241.192.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "aV0u5dhHqjs38zbkQPBIvAAAABc"]
[Wed Jan 07 13:24:57.066160 2026] [:error] [pid 30720:tid 30731] [client 195.178.110.161:34308] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aV3uKYdgcpQjqzUi9WY7sAAAAUk"]
[Wed Jan 07 14:03:52.277977 2026] [:error] [pid 30632:tid 30645] [client 195.178.110.161:46370] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aV33SOd3_LCpBJzo02e4gAAAAAk"]
[Thu Jan 08 04:24:14.118830 2026] [autoindex:error] [pid 15358:tid 15390] [client 4.241.224.33:26927] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 04:24:48.710876 2026] [:error] [pid 15265:tid 15341] [client 4.241.224.33:26841] [client 4.241.224.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aV7BEKE6VBKhew2LTFR-NwAAAI8"]
[Thu Jan 08 04:25:35.194131 2026] [:error] [pid 15263:tid 15276] [client 4.241.224.33:26910] [client 4.241.224.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aV7BP9v61bxum7WG_e89GgAAAAQ"]
[Thu Jan 08 04:25:37.951991 2026] [:error] [pid 15358:tid 15388] [client 4.241.224.33:26928] [client 4.241.224.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aV7BQSoRk9xWJ3toSBKfwQAAANI"]
[Thu Jan 08 04:25:41.176525 2026] [autoindex:error] [pid 15265:tid 15333] [client 4.241.224.33:2031] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 04:25:41.292695 2026] [:error] [pid 15265:tid 15331] [client 4.241.224.33:2031] [client 4.241.224.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aV7BRaE6VBKhew2LTFR-pQAAAIU"]
[Thu Jan 08 04:25:45.177522 2026] [:error] [pid 15358:tid 15384] [client 4.241.224.33:26899] [client 4.241.224.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aV7BSSoRk9xWJ3toSBKfzAAAAM4"]
[Thu Jan 08 04:25:49.634400 2026] [proxy_fcgi:error] [pid 15265:tid 15329] [client 4.241.224.33:2010] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:26:01.887745 2026] [autoindex:error] [pid 15264:tid 15316] [client 4.241.224.33:26843] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 04:26:02.944827 2026] [:error] [pid 15358:tid 15372] [client 4.241.224.33:26863] [client 4.241.224.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aV7BWioRk9xWJ3toSBKf7QAAAMI"]
[Thu Jan 08 04:26:06.624654 2026] [autoindex:error] [pid 15265:tid 15343] [client 4.241.224.33:26916] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 04:26:15.248331 2026] [:error] [pid 15264:tid 15300] [client 4.241.224.33:26883] [client 4.241.224.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aV7BZ4ov6_kvS0Owh-pgEQAAAEE"]
[Thu Jan 08 04:26:15.722889 2026] [:error] [pid 15265:tid 15340] [client 4.241.224.33:1872] [client 4.241.224.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aV7BZ6E6VBKhew2LTFR-1QAAAI4"]
[Fri Jan 09 00:15:56.370189 2026] [:error] [pid 2424:tid 2449] [client 13.75.69.16:4899] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/x1na.php"] [unique_id "aV_YPLTDJR8aofkBk9RW_gAAARc"]
[Fri Jan 09 00:15:58.115232 2026] [:error] [pid 15264:tid 15322] [client 13.75.69.16:30185] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/x1na.php"] [unique_id "aV_YPoov6_kvS0Owh-oxBgAAAFc"]
[Fri Jan 09 00:15:58.935102 2026] [:error] [pid 7586:tid 7604] [client 13.75.69.16:48958] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/x1na.php"] [unique_id "aV_YPsJyk37GdXP5TmWPTAAAAc4"]
[Fri Jan 09 00:16:03.795758 2026] [:error] [pid 15358:tid 15381] [client 13.75.69.16:5000] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/x1na.php"] [unique_id "aV_YQyoRk9xWJ3toSBKlogAAAMs"]
[Fri Jan 09 00:16:06.120934 2026] [:error] [pid 15263:tid 15285] [client 13.75.69.16:54985] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ss.php"] [unique_id "aV_YRtv61bxum7WG_e8lTAAAAA0"]
[Fri Jan 09 00:16:08.079658 2026] [:error] [pid 15358:tid 15378] [client 13.75.69.16:55025] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ss.php"] [unique_id "aV_YSCoRk9xWJ3toSBKlqAAAAMg"]
[Fri Jan 09 00:16:10.758398 2026] [:error] [pid 15263:tid 15290] [client 13.75.69.16:50164] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ss.php"] [unique_id "aV_YStv61bxum7WG_e8lTwAAABI"]
[Fri Jan 09 00:16:11.606337 2026] [:error] [pid 7586:tid 7609] [client 13.75.69.16:49535] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ss.php"] [unique_id "aV_YS8Jyk37GdXP5TmWPWwAAAdM"]
[Fri Jan 09 00:16:13.761502 2026] [:error] [pid 17404:tid 17426] [client 13.75.69.16:50135] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/56c53.php"] [unique_id "aV_YTWVd_oH193N6AnXixgAAAZQ"]
[Fri Jan 09 00:16:17.137009 2026] [:error] [pid 17404:tid 17412] [client 13.75.69.16:4107] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/56c53.php"] [unique_id "aV_YUWVd_oH193N6AnXi0AAAAYY"]
[Fri Jan 09 00:16:18.078814 2026] [:error] [pid 15264:tid 15310] [client 13.75.69.16:49495] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/56c53.php"] [unique_id "aV_YUoov6_kvS0Owh-oxHwAAAEs"]
[Fri Jan 09 00:16:21.136220 2026] [:error] [pid 2484:tid 2495] [client 13.75.69.16:4776] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/56c53.php"] [unique_id "aV_YVTiDlnlaQQK_AEPDAQAAAUg"]
[Fri Jan 09 00:16:21.988745 2026] [:error] [pid 17404:tid 17408] [client 13.75.69.16:4154] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wps.php"] [unique_id "aV_YVWVd_oH193N6AnXi3gAAAYI"]
[Fri Jan 09 00:16:23.214901 2026] [:error] [pid 2484:tid 2503] [client 13.75.69.16:49524] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wps.php"] [unique_id "aV_YVziDlnlaQQK_AEPDDgAAAU8"]
[Fri Jan 09 00:16:25.473775 2026] [:error] [pid 2484:tid 2495] [client 13.75.69.16:4779] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wps.php"] [unique_id "aV_YWTiDlnlaQQK_AEPDEwAAAUg"]
[Fri Jan 09 00:16:28.140132 2026] [:error] [pid 2484:tid 2486] [client 13.75.69.16:4540] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wps.php"] [unique_id "aV_YXDiDlnlaQQK_AEPDGQAAAUA"]
[Fri Jan 09 00:16:30.063194 2026] [:error] [pid 17404:tid 17424] [client 13.75.69.16:4795] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-sid.php"] [unique_id "aV_YXmVd_oH193N6AnXi7wAAAZI"]
[Fri Jan 09 00:16:30.838266 2026] [:error] [pid 7586:tid 7609] [client 13.75.69.16:60068] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-sid.php"] [unique_id "aV_YXsJyk37GdXP5TmWPewAAAdM"]
[Fri Jan 09 00:16:32.453150 2026] [:error] [pid 7586:tid 7592] [client 13.75.69.16:19025] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-sid.php"] [unique_id "aV_YYMJyk37GdXP5TmWPgAAAAcQ"]
[Fri Jan 09 00:16:34.286838 2026] [:error] [pid 7586:tid 7589] [client 13.75.69.16:19040] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-sid.php"] [unique_id "aV_YYsJyk37GdXP5TmWPhAAAAcE"]
[Fri Jan 09 00:16:35.092257 2026] [:error] [pid 17404:tid 17407] [client 13.75.69.16:60087] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-Blogs.php"] [unique_id "aV_YY2Vd_oH193N6AnXi-AAAAYE"]
[Fri Jan 09 00:16:36.622203 2026] [:error] [pid 15265:tid 15332] [client 13.75.69.16:50092] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-Blogs.php"] [unique_id "aV_YZKE6VBKhew2LTFRupQAAAIY"]
[Fri Jan 09 00:16:37.069824 2026] [:error] [pid 7586:tid 7594] [client 13.75.69.16:50090] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-Blogs.php"] [unique_id "aV_YZcJyk37GdXP5TmWPiQAAAcY"]
[Fri Jan 09 00:16:38.774596 2026] [:error] [pid 15265:tid 15338] [client 13.75.69.16:19057] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-Blogs.php"] [unique_id "aV_YZqE6VBKhew2LTFRuqwAAAIw"]
[Fri Jan 09 00:16:39.168247 2026] [:error] [pid 2424:tid 2436] [client 13.75.69.16:4320] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-blog.php"] [unique_id "aV_YZ7TDJR8aofkBk9RXRAAAAQo"]
[Fri Jan 09 00:16:42.368775 2026] [:error] [pid 7586:tid 7596] [client 13.75.69.16:19043] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-blog.php"] [unique_id "aV_YasJyk37GdXP5TmWPlQAAAcg"]
[Fri Jan 09 00:16:42.792904 2026] [:error] [pid 15263:tid 15287] [client 13.75.69.16:19035] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-blog.php"] [unique_id "aV_Yatv61bxum7WG_e8lXAAAAA8"]
[Fri Jan 09 00:16:43.638916 2026] [:error] [pid 15265:tid 15335] [client 13.75.69.16:4744] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-blog.php"] [unique_id "aV_Ya6E6VBKhew2LTFRusgAAAIk"]
[Fri Jan 09 00:16:44.954070 2026] [:error] [pid 2484:tid 2487] [client 13.75.69.16:60034] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nucqsqeg.php"] [unique_id "aV_YbDiDlnlaQQK_AEPDPwAAAUE"]
[Fri Jan 09 00:16:46.982734 2026] [:error] [pid 15358:tid 15394] [client 13.75.69.16:19068] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nucqsqeg.php"] [unique_id "aV_YbioRk9xWJ3toSBKlzwAAANg"]
[Fri Jan 09 00:16:48.211730 2026] [:error] [pid 2484:tid 2490] [client 13.75.69.16:50734] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nucqsqeg.php"] [unique_id "aV_YcDiDlnlaQQK_AEPDRwAAAUQ"]
[Fri Jan 09 00:16:49.228392 2026] [:error] [pid 17404:tid 17417] [client 13.75.69.16:50745] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nucqsqeg.php"] [unique_id "aV_YcWVd_oH193N6AnXjCAAAAYs"]
[Fri Jan 09 00:16:50.035599 2026] [:error] [pid 15264:tid 15311] [client 13.75.69.16:60056] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/jdlqi.php"] [unique_id "aV_Ycoov6_kvS0Owh-oxSQAAAEw"]
[Fri Jan 09 00:16:52.470318 2026] [:error] [pid 17404:tid 17410] [client 13.75.69.16:19059] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/jdlqi.php"] [unique_id "aV_YdGVd_oH193N6AnXjEwAAAYQ"]
[Fri Jan 09 00:16:53.100786 2026] [:error] [pid 17404:tid 17422] [client 13.75.69.16:4507] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/jdlqi.php"] [unique_id "aV_YdWVd_oH193N6AnXjFQAAAZA"]
[Fri Jan 09 10:08:14.130724 2026] [:error] [pid 30113:tid 30121] [client 167.99.210.137:35430] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aWBjDqsz80DbrolLWsHkcwAAAQU"]
[Fri Jan 09 10:08:21.750781 2026] [authz_core:error] [pid 30021:tid 30101] [client 167.99.210.137:35488] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Fri Jan 09 10:08:24.637566 2026] [:error] [pid 30113:tid 30138] [client 167.99.210.137:56754] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aWBjGKsz80DbrolLWsHkgAAAARY"]
[Fri Jan 09 10:23:32.597417 2026] [:error] [pid 30020:tid 30073] [client 165.22.235.3:55866] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aWBmpMrjc66qOisG6L17EAAAAJM"]
[Fri Jan 09 10:23:39.986012 2026] [authz_core:error] [pid 30020:tid 30071] [client 165.22.235.3:33208] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Fri Jan 09 10:23:42.641387 2026] [:error] [pid 30019:tid 30030] [client 165.22.235.3:33230] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aWBmrkz3igHGwX5f7IptXQAAAAY"]
[Fri Jan 09 15:02:55.291279 2026] [:error] [pid 30021:tid 30102] [client 167.172.158.128:42952] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aWCoHw_M8aRtsTog5J9gCgAAANU"]
[Fri Jan 09 15:03:02.514566 2026] [authz_core:error] [pid 1366:tid 1384] [client 167.172.158.128:44174] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Fri Jan 09 15:03:05.295156 2026] [:error] [pid 1366:tid 1384] [client 167.172.158.128:44198] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aWCoKRmasveKu8_ec1ULiQAAAY8"]
[Fri Jan 09 22:40:28.070438 2026] [:error] [pid 14872:tid 14891] [client 64.227.178.26:59621] [client 64.227.178.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.178.26, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aWETXKIUELhgYLNp1sZPiAAAAtE"]
[Fri Jan 09 22:40:29.327829 2026] [:error] [pid 14801:tid 14827] [client 64.227.178.26:60048] [client 64.227.178.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.178.26, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aWETXd8UWXrz_OQYgF14hwAAAlg"]
[Fri Jan 09 22:48:18.463473 2026] [:error] [pid 30019:tid 30028] [client 139.59.3.66:50588] [client 139.59.3.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.3.66, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aWEVMkz3igHGwX5f7IoCiQAAAAQ"]
[Fri Jan 09 22:48:19.929995 2026] [:error] [pid 30021:tid 30087] [client 139.59.3.66:50945] [client 139.59.3.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.3.66, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aWEVMw_M8aRtsTog5J-58QAAAMY"]
[Fri Jan 09 23:15:39.871848 2026] [:error] [pid 30020:tid 30078] [client 139.59.3.66:63988] [client 139.59.3.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.3.66, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aWEbm8rjc66qOisG6L3x9AAAAJg"]
[Fri Jan 09 23:20:28.379918 2026] [:error] [pid 14739:tid 14765] [client 139.59.3.66:56573] [client 139.59.3.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.3.66, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aWEcvF63M6_PkLt_IJKC0AAAAdg"]
[Fri Jan 09 23:25:17.133711 2026] [:error] [pid 44848:tid 44852] [client 139.59.3.66:49659] [client 139.59.3.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.3.66, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aWEd3ajajoTJAbEk87zyIgAAAEI"]
[Sat Jan 10 02:11:55.874618 2026] [:error] [pid 14831:tid 14853] [client 216.81.248.151:37006] [client 216.81.248.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aWFE6_aKOMCmJcAyBm1qPwAAApQ"]
[Sat Jan 10 03:53:06.134426 2026] [:error] [pid 20647:tid 20696] [client 34.74.8.140:53576] [client 34.74.8.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aWFcoqvb0x69MarUHzCDtQAAAE4"]
[Sat Jan 10 07:11:10.451641 2026] [:error] [pid 31369:tid 31385] [client 45.127.32.74:44688] [client 45.127.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/livewire/livewire.js"] [unique_id "aWGLDrgqeMKgT1uTxuIBXgAAAU4"]
[Sat Jan 10 07:11:11.760299 2026] [:error] [pid 31369:tid 31378] [client 45.127.32.74:44704] [client 45.127.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/livewire/message"] [unique_id "aWGLD7gqeMKgT1uTxuIBYAAAAUc"]
[Sat Jan 10 07:11:13.068611 2026] [:error] [pid 31369:tid 31392] [client 45.127.32.74:44708] [client 45.127.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/livewire/components"] [unique_id "aWGLEbgqeMKgT1uTxuIBYwAAAVU"]
[Sat Jan 10 07:11:14.377441 2026] [:error] [pid 20647:tid 20697] [client 45.127.32.74:44722] [client 45.127.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aWGLEqvb0x69MarUHzC3MAAAAE8"]
[Sun Jan 11 19:21:24.297112 2026] [autoindex:error] [pid 40191:tid 40205] [client 20.89.217.245:11421] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 11 19:21:24.823916 2026] [autoindex:error] [pid 40191:tid 40216] [client 20.89.217.245:11421] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 11 19:21:37.516567 2026] [:error] [pid 5272:tid 5275] [client 20.89.217.245:11495] [client 20.89.217.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/moon.php"] [unique_id "aWOHwVp55bCsukUvYGZjuAAAAME"]
[Sun Jan 11 19:22:01.602391 2026] [proxy_fcgi:error] [pid 5153:tid 5211] [client 20.89.217.245:11478] AH01071: Got error 'PHP message: PHP Warning:  Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/crosscen/public_html/wp-includes/blocks/index.php on line 8PHP message: PHP Warning:  Use of undefined constant WPINC - assumed 'WPINC' (this will throw an Error in a future version of PHP) in /home/crosscen/public_html/wp-includes/blocks/index.php on line 8PHP message: PHP Warning:  require(ABSPATHWPINC/blocks/legacy-widget.php): failed to open stream: No such file or directory in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11PHP message: PHP Warning:  require(ABSPATHWPINC/blocks/legacy-widget.php): failed to open stream: No such file or directory in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11PHP message: PHP Fatal error:  require(): Failed opening required 'ABSPATHWPINC/blocks/legacy-widget.php' (include_path='.:') in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11'
[Sun Jan 11 19:22:13.412352 2026] [:error] [pid 35730:tid 35733] [client 20.89.217.245:4056] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/images/2008.php"] [unique_id "aWOH5Ti7U_mfHtESQHlGOwAAAcE"]
[Sun Jan 11 19:22:13.655056 2026] [:error] [pid 5155:tid 5225] [client 20.89.217.245:4034] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/images/2008.php"] [unique_id "aWOH5VgEKFpNs0_zLGkQ0gAAAIk"]
[Sun Jan 11 19:22:13.894604 2026] [:error] [pid 11747:tid 11759] [client 20.89.217.245:4067] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/images/2008.php"] [unique_id "aWOH5aRFw84LNpZSk7nW4QAAAUg"]
[Sun Jan 11 19:22:14.134451 2026] [:error] [pid 40191:tid 40214] [client 20.89.217.245:4033] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/images/2008.php"] [unique_id "aWOH5km2BH1CV1p0EUHHAgAAAtU"]
[Sun Jan 11 19:22:14.398418 2026] [:error] [pid 40191:tid 40199] [client 20.89.217.245:11405] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.cache/x.php"] [unique_id "aWOH5km2BH1CV1p0EUHHBAAAAsY"]
[Sun Jan 11 19:22:14.642768 2026] [:error] [pid 40191:tid 40210] [client 20.89.217.245:11459] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.cache/x.php"] [unique_id "aWOH5km2BH1CV1p0EUHHBQAAAtE"]
[Sun Jan 11 19:22:14.882705 2026] [:error] [pid 40191:tid 40208] [client 20.89.217.245:11393] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.cache/x.php"] [unique_id "aWOH5km2BH1CV1p0EUHHBgAAAs8"]
[Sun Jan 11 19:22:15.123065 2026] [:error] [pid 35730:tid 35741] [client 20.89.217.245:11414] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.cache/x.php"] [unique_id "aWOH5zi7U_mfHtESQHlGPgAAAck"]
[Sun Jan 11 19:22:15.365939 2026] [:error] [pid 11748:tid 11799] [client 20.89.217.245:4036] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pow.php"] [unique_id "aWOH5wC5xybrWOCNnob1LQAAAZU"]
[Sun Jan 11 19:22:15.606163 2026] [:error] [pid 11747:tid 11761] [client 20.89.217.245:4070] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pow.php"] [unique_id "aWOH56RFw84LNpZSk7nW4gAAAUo"]
[Sun Jan 11 19:22:15.847689 2026] [:error] [pid 5153:tid 5200] [client 20.89.217.245:4083] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pow.php"] [unique_id "aWOH581QbNSPD9bRi77AVAAAAEs"]
[Sun Jan 11 19:22:16.090317 2026] [:error] [pid 11748:tid 11784] [client 20.89.217.245:4053] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pow.php"] [unique_id "aWOH6AC5xybrWOCNnob1LgAAAYY"]
[Sun Jan 11 19:22:16.340792 2026] [:error] [pid 11747:tid 11755] [client 20.89.217.245:11410] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dop.php"] [unique_id "aWOH6KRFw84LNpZSk7nW5AAAAUQ"]
[Sun Jan 11 19:22:16.583122 2026] [:error] [pid 40191:tid 40213] [client 20.89.217.245:11427] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dop.php"] [unique_id "aWOH6Em2BH1CV1p0EUHHBwAAAtQ"]
[Sun Jan 11 19:22:16.825405 2026] [:error] [pid 5153:tid 5205] [client 20.89.217.245:11511] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dop.php"] [unique_id "aWOH6M1QbNSPD9bRi77AVQAAAFA"]
[Sun Jan 11 19:22:17.065303 2026] [:error] [pid 11747:tid 11762] [client 20.89.217.245:11470] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dop.php"] [unique_id "aWOH6aRFw84LNpZSk7nW5QAAAUs"]
[Sun Jan 11 19:22:17.309612 2026] [:error] [pid 40191:tid 40203] [client 20.89.217.245:4009] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/"] [unique_id "aWOH6Um2BH1CV1p0EUHHCQAAAso"]
[Sun Jan 11 19:22:17.550222 2026] [:error] [pid 40191:tid 40215] [client 20.89.217.245:3971] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/"] [unique_id "aWOH6Um2BH1CV1p0EUHHCgAAAtY"]
[Sun Jan 11 19:22:17.790351 2026] [:error] [pid 36611:tid 36630] [client 20.89.217.245:3978] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/"] [unique_id "aWOH6T8oZoZHsoTdjhhWrwAAAlE"]
[Sun Jan 11 19:22:18.031307 2026] [:error] [pid 11747:tid 11772] [client 20.89.217.245:11475] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/"] [unique_id "aWOH6qRFw84LNpZSk7nW5gAAAVU"]
[Sun Jan 11 19:22:18.272848 2026] [:error] [pid 35730:tid 35755] [client 20.89.217.245:11509] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lv.php"] [unique_id "aWOH6ji7U_mfHtESQHlGPwAAAdc"]
[Sun Jan 11 19:22:18.513637 2026] [:error] [pid 36611:tid 36629] [client 20.89.217.245:11512] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lv.php"] [unique_id "aWOH6j8oZoZHsoTdjhhWsAAAAlA"]
[Sun Jan 11 19:22:18.757194 2026] [:error] [pid 11747:tid 11767] [client 20.89.217.245:4092] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lv.php"] [unique_id "aWOH6qRFw84LNpZSk7nW6AAAAVA"]
[Sun Jan 11 19:22:18.998533 2026] [:error] [pid 5155:tid 5232] [client 20.89.217.245:3985] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lv.php"] [unique_id "aWOH6lgEKFpNs0_zLGkQ1AAAAJA"]
[Sun Jan 11 19:22:19.238981 2026] [:error] [pid 36611:tid 36621] [client 20.89.217.245:4020] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/MTOS/byp.php"] [unique_id "aWOH6z8oZoZHsoTdjhhWsgAAAkg"]
[Sun Jan 11 19:22:19.496829 2026] [:error] [pid 36611:tid 36636] [client 20.89.217.245:4091] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/MTOS/byp.php"] [unique_id "aWOH6z8oZoZHsoTdjhhWswAAAlc"]
[Sun Jan 11 19:22:19.741466 2026] [:error] [pid 5155:tid 5236] [client 20.89.217.245:4059] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/MTOS/byp.php"] [unique_id "aWOH61gEKFpNs0_zLGkQ1QAAAJQ"]
[Sun Jan 11 19:22:19.985903 2026] [:error] [pid 11748:tid 11796] [client 20.89.217.245:3994] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/MTOS/byp.php"] [unique_id "aWOH6wC5xybrWOCNnob1MgAAAZI"]
[Sun Jan 11 19:22:20.232493 2026] [:error] [pid 5153:tid 5211] [client 20.89.217.245:3990] [client 20.89.217.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aWOH7M1QbNSPD9bRi77AWAAAAFY"]
[Sun Jan 11 19:22:20.474340 2026] [:error] [pid 11747:tid 11775] [client 20.89.217.245:4064] [client 20.89.217.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aWOH7KRFw84LNpZSk7nW7AAAAVg"]
[Sun Jan 11 19:22:20.718308 2026] [:error] [pid 5153:tid 5210] [client 20.89.217.245:4094] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pkmoj.php"] [unique_id "aWOH7M1QbNSPD9bRi77AWQAAAFU"]
[Sun Jan 11 19:22:20.969633 2026] [:error] [pid 5155:tid 5229] [client 20.89.217.245:11424] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pkmoj.php"] [unique_id "aWOH7FgEKFpNs0_zLGkQ1gAAAI0"]
[Sun Jan 11 19:22:21.209859 2026] [:error] [pid 5152:tid 5183] [client 20.89.217.245:11461] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pkmoj.php"] [unique_id "aWOH7Rm0axGMFrpuXHCL-wAAABU"]
[Sun Jan 11 19:22:21.455071 2026] [:error] [pid 5153:tid 5196] [client 20.89.217.245:11465] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uploads/upload2.php"] [unique_id "aWOH7c1QbNSPD9bRi77AWgAAAEc"]
[Sun Jan 11 19:22:21.710019 2026] [:error] [pid 5155:tid 5228] [client 20.89.217.245:11437] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uploads/upload2.php"] [unique_id "aWOH7VgEKFpNs0_zLGkQ2AAAAIw"]
[Sun Jan 11 19:22:21.949304 2026] [:error] [pid 5153:tid 5199] [client 20.89.217.245:3936] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uploads/upload2.php"] [unique_id "aWOH7c1QbNSPD9bRi77AXAAAAEo"]
[Sun Jan 11 19:22:22.190114 2026] [:error] [pid 11747:tid 11751] [client 20.89.217.245:4078] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uploads/upload2.php"] [unique_id "aWOH7qRFw84LNpZSk7nW7QAAAUA"]
[Sun Jan 11 19:22:22.440067 2026] [:error] [pid 5153:tid 5197] [client 20.89.217.245:4060] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/hehehehe.php"] [unique_id "aWOH7s1QbNSPD9bRi77AXgAAAEg"]
[Sun Jan 11 19:22:22.687210 2026] [:error] [pid 5272:tid 5292] [client 20.89.217.245:11401] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/hehehehe.php"] [unique_id "aWOH7lp55bCsukUvYGZjzgAAANI"]
[Sun Jan 11 19:22:22.929118 2026] [:error] [pid 11748:tid 11781] [client 20.89.217.245:3970] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/hehehehe.php"] [unique_id "aWOH7gC5xybrWOCNnob1MwAAAYM"]
[Sun Jan 11 19:22:23.168564 2026] [:error] [pid 11748:tid 11798] [client 20.89.217.245:3982] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/hehehehe.php"] [unique_id "aWOH7wC5xybrWOCNnob1NAAAAZQ"]
[Sun Jan 11 19:22:23.411136 2026] [:error] [pid 35977:tid 35985] [client 20.89.217.245:4049] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fss.php"] [unique_id "aWOH77DST5RMqStLeP1qdAAAAgU"]
[Sun Jan 11 19:22:23.651266 2026] [:error] [pid 5272:tid 5289] [client 20.89.217.245:4002] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fss.php"] [unique_id "aWOH71p55bCsukUvYGZj0QAAAM8"]
[Sun Jan 11 19:22:23.905587 2026] [:error] [pid 5155:tid 5216] [client 20.89.217.245:11514] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fss.php"] [unique_id "aWOH71gEKFpNs0_zLGkQ3AAAAIA"]
[Sun Jan 11 19:22:24.144919 2026] [:error] [pid 35977:tid 35987] [client 20.89.217.245:11392] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fss.php"] [unique_id "aWOH8LDST5RMqStLeP1qdQAAAgc"]
[Sun Jan 11 19:22:24.384754 2026] [:error] [pid 5155:tid 5221] [client 20.89.217.245:3998] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wwr.php"] [unique_id "aWOH8FgEKFpNs0_zLGkQ3gAAAIU"]
[Sun Jan 11 19:22:24.625261 2026] [:error] [pid 11747:tid 11765] [client 20.89.217.245:11501] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wwr.php"] [unique_id "aWOH8KRFw84LNpZSk7nW7wAAAU4"]
[Sun Jan 11 19:22:24.866862 2026] [:error] [pid 40191:tid 40201] [client 20.89.217.245:4084] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wwr.php"] [unique_id "aWOH8Em2BH1CV1p0EUHHDwAAAsg"]
[Sun Jan 11 19:22:25.106593 2026] [:error] [pid 11748:tid 11793] [client 20.89.217.245:11432] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wwr.php"] [unique_id "aWOH8QC5xybrWOCNnob1OQAAAY8"]
[Sun Jan 11 19:22:25.346646 2026] [:error] [pid 5153:tid 5190] [client 20.89.217.245:11453] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/content.php"] [unique_id "aWOH8c1QbNSPD9bRi77AYgAAAEE"]
[Sun Jan 11 19:22:25.587123 2026] [:error] [pid 11748:tid 11799] [client 20.89.217.245:11510] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/content.php"] [unique_id "aWOH8QC5xybrWOCNnob1PAAAAZU"]
[Sun Jan 11 19:22:25.827605 2026] [:error] [pid 5272:tid 5295] [client 20.89.217.245:11433] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/content.php"] [unique_id "aWOH8Vp55bCsukUvYGZj1AAAANU"]
[Sun Jan 11 19:22:26.075898 2026] [:error] [pid 5152:tid 5182] [client 20.89.217.245:11442] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/content.php"] [unique_id "aWOH8hm0axGMFrpuXHCMAAAAABQ"]
[Sun Jan 11 19:22:26.318468 2026] [:error] [pid 5272:tid 5283] [client 20.89.217.245:4017] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/kj.php"] [unique_id "aWOH8lp55bCsukUvYGZj1gAAAMk"]
[Sun Jan 11 19:22:26.578884 2026] [:error] [pid 5272:tid 5297] [client 20.89.217.245:3942] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/kj.php"] [unique_id "aWOH8lp55bCsukUvYGZj1wAAANc"]
[Sun Jan 11 19:22:26.821342 2026] [:error] [pid 11747:tid 11769] [client 20.89.217.245:11416] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/kj.php"] [unique_id "aWOH8qRFw84LNpZSk7nW8AAAAVI"]
[Sun Jan 11 19:22:27.066938 2026] [:error] [pid 35977:tid 35980] [client 20.89.217.245:4088] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/kj.php"] [unique_id "aWOH87DST5RMqStLeP1qdwAAAgA"]
[Sun Jan 11 19:22:27.307185 2026] [:error] [pid 36611:tid 36623] [client 20.89.217.245:11436] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/update/wpupex.php"] [unique_id "aWOH8z8oZoZHsoTdjhhWtgAAAko"]
[Sun Jan 11 19:22:27.547782 2026] [:error] [pid 5272:tid 5277] [client 20.89.217.245:4039] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/update/wpupex.php"] [unique_id "aWOH81p55bCsukUvYGZj2QAAAMM"]
[Sun Jan 11 19:22:27.790252 2026] [:error] [pid 11747:tid 11753] [client 20.89.217.245:3996] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/update/wpupex.php"] [unique_id "aWOH86RFw84LNpZSk7nW8QAAAUI"]
[Sun Jan 11 19:22:28.043940 2026] [:error] [pid 5272:tid 5290] [client 20.89.217.245:11426] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/update/wpupex.php"] [unique_id "aWOH9Fp55bCsukUvYGZj2gAAANA"]
[Sun Jan 11 19:22:28.285913 2026] [:error] [pid 40191:tid 40214] [client 20.89.217.245:4086] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/install.php"] [unique_id "aWOH9Em2BH1CV1p0EUHHFAAAAtU"]
[Sun Jan 11 19:22:28.531466 2026] [:error] [pid 5153:tid 5193] [client 20.89.217.245:11429] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/install.php"] [unique_id "aWOH9M1QbNSPD9bRi77AYwAAAEQ"]
[Sun Jan 11 19:22:28.771303 2026] [:error] [pid 11748:tid 11788] [client 20.89.217.245:4026] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/install.php"] [unique_id "aWOH9AC5xybrWOCNnob1PgAAAYo"]
[Sun Jan 11 19:22:29.011423 2026] [:error] [pid 36611:tid 36614] [client 20.89.217.245:3972] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/install.php"] [unique_id "aWOH9T8oZoZHsoTdjhhWuAAAAkE"]
[Sun Jan 11 19:22:29.251140 2026] [:error] [pid 11748:tid 11802] [client 20.89.217.245:11452] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/kopyw.php"] [unique_id "aWOH9QC5xybrWOCNnob1PwAAAZg"]
[Sun Jan 11 19:22:29.496757 2026] [:error] [pid 35730:tid 35749] [client 20.89.217.245:11451] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/kopyw.php"] [unique_id "aWOH9Ti7U_mfHtESQHlGQQAAAdE"]
[Sun Jan 11 19:22:29.740410 2026] [:error] [pid 11748:tid 11794] [client 20.89.217.245:3951] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/kopyw.php"] [unique_id "aWOH9QC5xybrWOCNnob1QQAAAZA"]
[Sun Jan 11 19:22:29.980264 2026] [:error] [pid 11748:tid 11780] [client 20.89.217.245:4065] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/kopyw.php"] [unique_id "aWOH9QC5xybrWOCNnob1QgAAAYI"]
[Sun Jan 11 19:22:30.220886 2026] [:error] [pid 5153:tid 5189] [client 20.89.217.245:11412] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aWOH9s1QbNSPD9bRi77AZAAAAEA"]
[Sun Jan 11 19:22:30.462223 2026] [:error] [pid 40191:tid 40208] [client 20.89.217.245:3908] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aWOH9km2BH1CV1p0EUHHFgAAAs8"]
[Sun Jan 11 19:22:30.704134 2026] [:error] [pid 36611:tid 36618] [client 20.89.217.245:3912] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aWOH9j8oZoZHsoTdjhhWuwAAAkU"]
[Sun Jan 11 19:22:30.943922 2026] [:error] [pid 40191:tid 40207] [client 20.89.217.245:4068] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aWOH9km2BH1CV1p0EUHHGAAAAs4"]
[Sun Jan 11 19:22:31.187110 2026] [:error] [pid 36611:tid 36624] [client 20.89.217.245:11444] [client 20.89.217.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/about.php"] [unique_id "aWOH9z8oZoZHsoTdjhhWvAAAAks"]
[Sun Jan 11 19:22:31.429150 2026] [:error] [pid 11748:tid 11785] [client 20.89.217.245:4090] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shop.php"] [unique_id "aWOH9wC5xybrWOCNnob1QwAAAYc"]
[Sun Jan 11 19:22:31.702963 2026] [:error] [pid 5272:tid 5291] [client 20.89.217.245:11507] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shop.php"] [unique_id "aWOH91p55bCsukUvYGZj3gAAANE"]
[Sun Jan 11 19:22:31.979443 2026] [:error] [pid 36611:tid 36622] [client 20.89.217.245:3992] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shop.php"] [unique_id "aWOH9z8oZoZHsoTdjhhWvQAAAkk"]
[Sun Jan 11 19:22:32.222564 2026] [:error] [pid 5152:tid 5162] [client 20.89.217.245:4015] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lla.php"] [unique_id "aWOH-Bm0axGMFrpuXHCMBAAAAAA"]
[Sun Jan 11 19:22:32.462651 2026] [:error] [pid 5272:tid 5284] [client 20.89.217.245:4093] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lla.php"] [unique_id "aWOH-Fp55bCsukUvYGZj3wAAAMo"]
[Sun Jan 11 19:22:32.706916 2026] [:error] [pid 35977:tid 36002] [client 20.89.217.245:11476] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lla.php"] [unique_id "aWOH-LDST5RMqStLeP1qeAAAAhY"]
[Sun Jan 11 19:22:32.947103 2026] [:error] [pid 40191:tid 40203] [client 20.89.217.245:4051] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lla.php"] [unique_id "aWOH-Em2BH1CV1p0EUHHGwAAAso"]
[Sun Jan 11 19:22:33.187865 2026] [:error] [pid 11748:tid 11781] [client 20.89.217.245:4080] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nok.php"] [unique_id "aWOH-QC5xybrWOCNnob1RQAAAYM"]
[Sun Jan 11 19:22:33.442634 2026] [:error] [pid 5272:tid 5285] [client 20.89.217.245:4031] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nok.php"] [unique_id "aWOH-Vp55bCsukUvYGZj4AAAAMs"]
[Sun Jan 11 19:22:33.685372 2026] [:error] [pid 5272:tid 5288] [client 20.89.217.245:4055] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nok.php"] [unique_id "aWOH-Vp55bCsukUvYGZj4QAAAM4"]
[Sun Jan 11 19:22:33.938778 2026] [:error] [pid 5152:tid 5170] [client 20.89.217.245:11428] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nok.php"] [unique_id "aWOH-Rm0axGMFrpuXHCMBwAAAAg"]
[Sun Jan 11 19:22:34.178906 2026] [:error] [pid 11748:tid 11782] [client 20.89.217.245:3983] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/2024/dodo.php"] [unique_id "aWOH-gC5xybrWOCNnob1RgAAAYQ"]
[Sun Jan 11 19:22:34.423748 2026] [:error] [pid 40191:tid 40216] [client 20.89.217.245:4003] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/2024/dodo.php"] [unique_id "aWOH-km2BH1CV1p0EUHHHQAAAtc"]
[Sun Jan 11 19:22:34.667865 2026] [:error] [pid 35730:tid 35751] [client 20.89.217.245:11454] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/2024/dodo.php"] [unique_id "aWOH-ji7U_mfHtESQHlGRQAAAdM"]
[Sun Jan 11 19:22:34.919664 2026] [:error] [pid 11748:tid 11779] [client 20.89.217.245:4077] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/2024/dodo.php"] [unique_id "aWOH-gC5xybrWOCNnob1RwAAAYE"]
[Sun Jan 11 19:22:35.205241 2026] [:error] [pid 11747:tid 11770] [client 20.89.217.245:4054] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ker.php"] [unique_id "aWOH-6RFw84LNpZSk7nW8wAAAVM"]
[Sun Jan 11 19:22:35.464016 2026] [:error] [pid 5272:tid 5282] [client 20.89.217.245:4030] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ker.php"] [unique_id "aWOH-1p55bCsukUvYGZj5AAAAMg"]
[Sun Jan 11 19:22:35.707397 2026] [:error] [pid 40191:tid 40211] [client 20.89.217.245:11443] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ker.php"] [unique_id "aWOH-0m2BH1CV1p0EUHHHwAAAtI"]
[Sun Jan 11 19:22:35.994107 2026] [:error] [pid 35977:tid 35986] [client 20.89.217.245:3968] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ker.php"] [unique_id "aWOH-7DST5RMqStLeP1qeQAAAgY"]
[Sun Jan 11 19:22:36.334889 2026] [:error] [pid 35730:tid 35754] [client 20.89.217.245:4074] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dropdown.php"] [unique_id "aWOH_Di7U_mfHtESQHlGRgAAAdY"]
[Sun Jan 11 19:22:36.585877 2026] [:error] [pid 35730:tid 35744] [client 20.89.217.245:11447] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dropdown.php"] [unique_id "aWOH_Di7U_mfHtESQHlGRwAAAcw"]
[Sun Jan 11 19:22:36.851678 2026] [:error] [pid 35730:tid 35756] [client 20.89.217.245:11517] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dropdown.php"] [unique_id "aWOH_Di7U_mfHtESQHlGSAAAAdg"]
[Sun Jan 11 19:22:37.104959 2026] [:error] [pid 11748:tid 11790] [client 20.89.217.245:3981] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dropdown.php"] [unique_id "aWOH_QC5xybrWOCNnob1SAAAAYw"]
[Sun Jan 11 19:22:37.349723 2026] [:error] [pid 11747:tid 11763] [client 20.89.217.245:4082] [client 20.89.217.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/403.php"] [unique_id "aWOH_aRFw84LNpZSk7nW9QAAAUw"]
[Sun Jan 11 19:22:37.605702 2026] [:error] [pid 11748:tid 11791] [client 20.89.217.245:3915] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/~elliotimformatiq/sxp.php"] [unique_id "aWOH_QC5xybrWOCNnob1SQAAAY0"]
[Sun Jan 11 19:22:37.845924 2026] [:error] [pid 40191:tid 40202] [client 20.89.217.245:11455] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/~elliotimformatiq/sxp.php"] [unique_id "aWOH_Um2BH1CV1p0EUHHIQAAAsk"]
[Sun Jan 11 19:22:38.085770 2026] [:error] [pid 11747:tid 11760] [client 20.89.217.245:4087] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/~elliotimformatiq/sxp.php"] [unique_id "aWOH_qRFw84LNpZSk7nW9gAAAUk"]
[Sun Jan 11 19:22:38.333412 2026] [:error] [pid 11748:tid 11793] [client 20.89.217.245:3933] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/qfvqu.php"] [unique_id "aWOH_gC5xybrWOCNnob1SgAAAY8"]
[Sun Jan 11 19:22:38.580449 2026] [:error] [pid 5153:tid 5198] [client 20.89.217.245:11395] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/qfvqu.php"] [unique_id "aWOH_s1QbNSPD9bRi77AZQAAAEk"]
[Sun Jan 11 19:22:38.822860 2026] [:error] [pid 40191:tid 40198] [client 20.89.217.245:11450] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/qfvqu.php"] [unique_id "aWOH_km2BH1CV1p0EUHHIgAAAsU"]
[Sun Jan 11 19:22:39.067680 2026] [:error] [pid 11748:tid 11778] [client 20.89.217.245:3974] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/qfvqu.php"] [unique_id "aWOH_wC5xybrWOCNnob1SwAAAYA"]
[Sun Jan 11 19:22:39.325008 2026] [:error] [pid 35730:tid 35748] [client 20.89.217.245:3914] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/crt.php"] [unique_id "aWOH_zi7U_mfHtESQHlGSQAAAdA"]
[Sun Jan 11 19:22:39.588800 2026] [:error] [pid 5272:tid 5295] [client 20.89.217.245:3920] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/crt.php"] [unique_id "aWOH_1p55bCsukUvYGZj5wAAANU"]
[Sun Jan 11 19:22:39.834887 2026] [:error] [pid 40191:tid 40201] [client 20.89.217.245:4089] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/crt.php"] [unique_id "aWOH_0m2BH1CV1p0EUHHIwAAAsg"]
[Sun Jan 11 19:22:40.101164 2026] [:error] [pid 5153:tid 5213] [client 20.89.217.245:3986] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/crt.php"] [unique_id "aWOIAM1QbNSPD9bRi77AZgAAAFg"]
[Sun Jan 11 19:22:40.353114 2026] [:error] [pid 36611:tid 36635] [client 20.89.217.245:3993] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/2eaa2.php"] [unique_id "aWOIAD8oZoZHsoTdjhhWwQAAAlY"]
[Sun Jan 11 19:22:40.593232 2026] [:error] [pid 35977:tid 35983] [client 20.89.217.245:3921] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/2eaa2.php"] [unique_id "aWOIALDST5RMqStLeP1qewAAAgM"]
[Sun Jan 11 19:22:40.832747 2026] [:error] [pid 35977:tid 35995] [client 20.89.217.245:4035] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/2eaa2.php"] [unique_id "aWOIALDST5RMqStLeP1qfAAAAg8"]
[Sun Jan 11 19:22:41.081432 2026] [:error] [pid 35977:tid 35996] [client 20.89.217.245:3940] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/2eaa2.php"] [unique_id "aWOIAbDST5RMqStLeP1qfQAAAhA"]
[Sun Jan 11 19:22:41.333484 2026] [:error] [pid 11748:tid 11797] [client 20.89.217.245:11496] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/"] [unique_id "aWOIAQC5xybrWOCNnob1TQAAAZM"]
[Sun Jan 11 19:22:41.579680 2026] [:error] [pid 40191:tid 40214] [client 20.89.217.245:3909] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/"] [unique_id "aWOIAUm2BH1CV1p0EUHHJwAAAtU"]
[Sun Jan 11 19:22:41.872998 2026] [:error] [pid 11747:tid 11764] [client 20.89.217.245:4050] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/"] [unique_id "aWOIAaRFw84LNpZSk7nW9wAAAU0"]
[Sun Jan 11 19:22:42.117692 2026] [:error] [pid 5272:tid 5279] [client 20.89.217.245:4057] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/"] [unique_id "aWOIAlp55bCsukUvYGZj6QAAAMU"]
[Sun Jan 11 19:22:42.360971 2026] [:error] [pid 5153:tid 5200] [client 20.89.217.245:3980] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/has.php"] [unique_id "aWOIAs1QbNSPD9bRi77AZwAAAEs"]
[Sun Jan 11 19:22:42.617909 2026] [:error] [pid 40191:tid 40200] [client 20.89.217.245:11503] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/has.php"] [unique_id "aWOIAkm2BH1CV1p0EUHHKAAAAsc"]
[Sun Jan 11 19:22:42.865065 2026] [:error] [pid 5272:tid 5276] [client 20.89.217.245:4025] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/has.php"] [unique_id "aWOIAlp55bCsukUvYGZj6wAAAMI"]
[Sun Jan 11 19:22:43.107035 2026] [:error] [pid 35730:tid 35733] [client 20.89.217.245:11446] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/has.php"] [unique_id "aWOIAzi7U_mfHtESQHlGSwAAAcE"]
[Sun Jan 11 19:22:43.366023 2026] [:error] [pid 5155:tid 5240] [client 20.89.217.245:11483] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nka.php"] [unique_id "aWOIA1gEKFpNs0_zLGkQ3wAAAJg"]
[Sun Jan 11 19:22:43.616243 2026] [:error] [pid 36611:tid 36627] [client 20.89.217.245:3991] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nka.php"] [unique_id "aWOIAz8oZoZHsoTdjhhWwgAAAk4"]
[Sun Jan 11 19:22:43.859996 2026] [:error] [pid 11748:tid 11799] [client 20.89.217.245:4058] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nka.php"] [unique_id "aWOIAwC5xybrWOCNnob1UAAAAZU"]
[Sun Jan 11 19:22:44.119101 2026] [:error] [pid 11748:tid 11787] [client 20.89.217.245:4018] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nka.php"] [unique_id "aWOIBAC5xybrWOCNnob1UQAAAYk"]
[Sun Jan 11 19:22:44.384609 2026] [:error] [pid 11748:tid 11784] [client 20.89.217.245:4000] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/"] [unique_id "aWOIBAC5xybrWOCNnob1UgAAAYY"]
[Sun Jan 11 19:22:44.629628 2026] [:error] [pid 40191:tid 40197] [client 20.89.217.245:3995] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/"] [unique_id "aWOIBEm2BH1CV1p0EUHHKQAAAsQ"]
[Sun Jan 11 19:22:44.875763 2026] [:error] [pid 36611:tid 36636] [client 20.89.217.245:3929] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/"] [unique_id "aWOIBD8oZoZHsoTdjhhWwwAAAlc"]
[Sun Jan 11 19:22:45.121675 2026] [:error] [pid 5155:tid 5222] [client 20.89.217.245:4062] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/"] [unique_id "aWOIBVgEKFpNs0_zLGkQ4QAAAIY"]
[Sun Jan 11 19:22:45.387526 2026] [:error] [pid 5155:tid 5238] [client 20.89.217.245:3999] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dropdown.php"] [unique_id "aWOIBVgEKFpNs0_zLGkQ4gAAAJY"]
[Sun Jan 11 19:22:45.648066 2026] [:error] [pid 5155:tid 5231] [client 20.89.217.245:3969] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dropdown.php"] [unique_id "aWOIBVgEKFpNs0_zLGkQ4wAAAI8"]
[Sun Jan 11 19:22:45.891986 2026] [:error] [pid 11748:tid 11783] [client 20.89.217.245:3962] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dropdown.php"] [unique_id "aWOIBQC5xybrWOCNnob1VgAAAYU"]
[Sun Jan 11 19:22:46.132505 2026] [:error] [pid 11748:tid 11785] [client 20.89.217.245:4071] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dropdown.php"] [unique_id "aWOIBgC5xybrWOCNnob1VwAAAYc"]
[Sun Jan 11 19:22:46.391811 2026] [:error] [pid 5155:tid 5234] [client 20.89.217.245:3928] [client 20.89.217.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aWOIBlgEKFpNs0_zLGkQ5AAAAJI"]
[Sun Jan 11 19:22:46.633512 2026] [:error] [pid 35730:tid 35755] [client 20.89.217.245:3927] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aWOIBji7U_mfHtESQHlGUAAAAdc"]
[Sun Jan 11 19:22:46.872957 2026] [:error] [pid 5152:tid 5166] [client 20.89.217.245:4066] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aWOIBhm0axGMFrpuXHCMEwAAAAQ"]
[Sun Jan 11 19:22:47.114229 2026] [:error] [pid 5272:tid 5291] [client 20.89.217.245:4005] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aWOIB1p55bCsukUvYGZj7wAAANE"]
[Sun Jan 11 19:22:47.354686 2026] [:error] [pid 35730:tid 35752] [client 20.89.217.245:4021] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/jvcpa.php"] [unique_id "aWOIBzi7U_mfHtESQHlGUQAAAdQ"]
[Sun Jan 11 19:22:47.595828 2026] [:error] [pid 35977:tid 35985] [client 20.89.217.245:3859] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/jvcpa.php"] [unique_id "aWOIB7DST5RMqStLeP1qhAAAAgU"]
[Sun Jan 11 19:22:47.835923 2026] [:error] [pid 11747:tid 11767] [client 20.89.217.245:4029] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/jvcpa.php"] [unique_id "aWOIB6RFw84LNpZSk7nW-QAAAVA"]
[Sun Jan 11 19:22:48.081269 2026] [:error] [pid 11747:tid 11757] [client 20.89.217.245:3977] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/jvcpa.php"] [unique_id "aWOICKRFw84LNpZSk7nW-gAAAUY"]
[Sun Jan 11 19:22:48.332254 2026] [:error] [pid 5152:tid 5178] [client 20.89.217.245:3911] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/zil.php"] [unique_id "aWOICBm0axGMFrpuXHCMFAAAABA"]
[Sun Jan 11 19:22:48.606801 2026] [:error] [pid 36611:tid 36628] [client 20.89.217.245:3997] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/zil.php"] [unique_id "aWOICD8oZoZHsoTdjhhWxQAAAk8"]
[Sun Jan 11 19:22:48.866822 2026] [:error] [pid 40191:tid 40207] [client 20.89.217.245:4006] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/zil.php"] [unique_id "aWOICEm2BH1CV1p0EUHHKgAAAs4"]
[Sun Jan 11 19:22:49.109226 2026] [:error] [pid 35730:tid 35749] [client 20.89.217.245:4076] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/zil.php"] [unique_id "aWOICTi7U_mfHtESQHlGUwAAAdE"]
[Sun Jan 11 19:22:49.348746 2026] [:error] [pid 35730:tid 35746] [client 20.89.217.245:3862] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/images/uploadform.php"] [unique_id "aWOICTi7U_mfHtESQHlGVAAAAc4"]
[Sun Jan 11 19:22:49.609036 2026] [:error] [pid 5155:tid 5228] [client 20.89.217.245:11484] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/images/uploadform.php"] [unique_id "aWOICVgEKFpNs0_zLGkQ5wAAAIw"]
[Sun Jan 11 19:22:49.848692 2026] [:error] [pid 35977:tid 36000] [client 20.89.217.245:4012] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/images/uploadform.php"] [unique_id "aWOICbDST5RMqStLeP1qhwAAAhQ"]
[Sun Jan 11 19:22:50.096327 2026] [:error] [pid 40191:tid 40203] [client 20.89.217.245:3959] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/images/uploadform.php"] [unique_id "aWOICkm2BH1CV1p0EUHHLAAAAso"]
[Sun Jan 11 19:22:50.339565 2026] [:error] [pid 35977:tid 35980] [client 20.89.217.245:3938] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/system_log.php"] [unique_id "aWOICrDST5RMqStLeP1qiAAAAgA"]
[Sun Jan 11 19:22:50.603078 2026] [:error] [pid 5155:tid 5237] [client 20.89.217.245:3905] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/system_log.php"] [unique_id "aWOIClgEKFpNs0_zLGkQ6QAAAJU"]
[Sun Jan 11 19:22:50.844183 2026] [:error] [pid 5155:tid 5224] [client 20.89.217.245:3973] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/system_log.php"] [unique_id "aWOIClgEKFpNs0_zLGkQ6gAAAIg"]
[Sun Jan 11 19:22:51.088700 2026] [:error] [pid 5155:tid 5235] [client 20.89.217.245:11488] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/system_log.php"] [unique_id "aWOIC1gEKFpNs0_zLGkQ6wAAAJM"]
[Sun Jan 11 19:22:51.336130 2026] [:error] [pid 5155:tid 5218] [client 20.89.217.245:4004] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wordpress/clo.php"] [unique_id "aWOIC1gEKFpNs0_zLGkQ7QAAAII"]
[Sun Jan 11 19:22:51.609036 2026] [:error] [pid 5155:tid 5227] [client 20.89.217.245:4014] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wordpress/clo.php"] [unique_id "aWOIC1gEKFpNs0_zLGkQ7gAAAIs"]
[Sun Jan 11 19:22:51.866299 2026] [:error] [pid 5153:tid 5199] [client 20.89.217.245:3967] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wordpress/clo.php"] [unique_id "aWOIC81QbNSPD9bRi77AagAAAEo"]
[Sun Jan 11 19:22:52.108458 2026] [:error] [pid 5152:tid 5171] [client 20.89.217.245:3989] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wordpress/clo.php"] [unique_id "aWOIDBm0axGMFrpuXHCMFQAAAAk"]
[Sun Jan 11 19:22:52.388520 2026] [:error] [pid 35977:tid 35981] [client 20.89.217.245:3952] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/zip.php"] [unique_id "aWOIDLDST5RMqStLeP1qigAAAgE"]
[Sun Jan 11 19:22:52.657974 2026] [:error] [pid 35977:tid 35995] [client 20.89.217.245:3918] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/zip.php"] [unique_id "aWOIDLDST5RMqStLeP1qiwAAAg8"]
[Sun Jan 11 19:22:52.911886 2026] [:error] [pid 5272:tid 5294] [client 20.89.217.245:3898] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/zip.php"] [unique_id "aWOIDFp55bCsukUvYGZj8QAAANQ"]
[Sun Jan 11 19:22:53.163793 2026] [:error] [pid 35977:tid 35997] [client 20.89.217.245:3987] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/zip.php"] [unique_id "aWOIDbDST5RMqStLeP1qjQAAAhE"]
[Sun Jan 11 19:22:53.416606 2026] [:error] [pid 35977:tid 35989] [client 20.89.217.245:3925] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ar.php"] [unique_id "aWOIDbDST5RMqStLeP1qjwAAAgk"]
[Sun Jan 11 19:22:53.661496 2026] [:error] [pid 5155:tid 5240] [client 20.89.217.245:4061] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ar.php"] [unique_id "aWOIDVgEKFpNs0_zLGkQ8wAAAJg"]
[Sun Jan 11 19:22:53.901118 2026] [:error] [pid 5153:tid 5197] [client 20.89.217.245:3957] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ar.php"] [unique_id "aWOIDc1QbNSPD9bRi77AbAAAAEg"]
[Sun Jan 11 19:22:54.162457 2026] [:error] [pid 5152:tid 5164] [client 20.89.217.245:3930] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ar.php"] [unique_id "aWOIDhm0axGMFrpuXHCMFwAAAAI"]
[Sun Jan 11 19:22:54.404876 2026] [:error] [pid 40191:tid 40205] [client 20.89.217.245:4085] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shelp.php"] [unique_id "aWOIDkm2BH1CV1p0EUHHMAAAAsw"]
[Sun Jan 11 19:22:54.646841 2026] [:error] [pid 11747:tid 11773] [client 20.89.217.245:3953] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shelp.php"] [unique_id "aWOIDqRFw84LNpZSk7nW_AAAAVY"]
[Sun Jan 11 19:22:54.896105 2026] [:error] [pid 5152:tid 5181] [client 20.89.217.245:3784] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shelp.php"] [unique_id "aWOIDhm0axGMFrpuXHCMGAAAABM"]
[Sun Jan 11 19:22:55.136948 2026] [:error] [pid 36611:tid 36614] [client 20.89.217.245:3794] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shelp.php"] [unique_id "aWOIDz8oZoZHsoTdjhhWyAAAAkE"]
[Sun Jan 11 19:22:55.395443 2026] [:error] [pid 11747:tid 11775] [client 20.89.217.245:3894] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wordpress/yts.php"] [unique_id "aWOID6RFw84LNpZSk7nW_QAAAVg"]
[Sun Jan 11 19:22:55.637436 2026] [:error] [pid 11747:tid 11766] [client 20.89.217.245:3946] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wordpress/yts.php"] [unique_id "aWOID6RFw84LNpZSk7nW_gAAAU8"]
[Sun Jan 11 19:22:55.881323 2026] [:error] [pid 40191:tid 40196] [client 20.89.217.245:3934] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wordpress/yts.php"] [unique_id "aWOID0m2BH1CV1p0EUHHMwAAAsM"]
[Sun Jan 11 19:22:56.126172 2026] [:error] [pid 35730:tid 35740] [client 20.89.217.245:3945] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wordpress/yts.php"] [unique_id "aWOIEDi7U_mfHtESQHlGVwAAAcg"]
[Sun Jan 11 19:22:56.386281 2026] [:error] [pid 35730:tid 35745] [client 20.89.217.245:3924] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/file.php"] [unique_id "aWOIEDi7U_mfHtESQHlGWAAAAc0"]
[Sun Jan 11 19:22:56.648055 2026] [:error] [pid 5272:tid 5295] [client 20.89.217.245:3965] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/file.php"] [unique_id "aWOIEFp55bCsukUvYGZj9QAAANU"]
[Sun Jan 11 19:22:56.895403 2026] [:error] [pid 5155:tid 5236] [client 20.89.217.245:3785] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/file.php"] [unique_id "aWOIEFgEKFpNs0_zLGkQ9wAAAJQ"]
[Sun Jan 11 19:22:57.136631 2026] [:error] [pid 36611:tid 36617] [client 20.89.217.245:3941] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/file.php"] [unique_id "aWOIET8oZoZHsoTdjhhWzQAAAkQ"]
[Sun Jan 11 19:22:57.380903 2026] [:error] [pid 11747:tid 11768] [client 20.89.217.245:3949] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/Mhbgf.php"] [unique_id "aWOIEaRFw84LNpZSk7nW_wAAAVE"]
[Sun Jan 11 19:22:57.622440 2026] [:error] [pid 11747:tid 11751] [client 20.89.217.245:4028] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/Mhbgf.php"] [unique_id "aWOIEaRFw84LNpZSk7nXAQAAAUA"]
[Sun Jan 11 19:22:57.862707 2026] [:error] [pid 5272:tid 5297] [client 20.89.217.245:3871] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/Mhbgf.php"] [unique_id "aWOIEVp55bCsukUvYGZj-QAAANc"]
[Sun Jan 11 19:22:58.103440 2026] [:error] [pid 5272:tid 5296] [client 20.89.217.245:3881] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/Mhbgf.php"] [unique_id "aWOIElp55bCsukUvYGZj_QAAANY"]
[Sun Jan 11 19:22:58.342816 2026] [:error] [pid 36611:tid 36631] [client 20.89.217.245:4081] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/"] [unique_id "aWOIEj8oZoZHsoTdjhhWzgAAAlI"]
[Sun Jan 11 19:22:58.582421 2026] [:error] [pid 5152:tid 5186] [client 20.89.217.245:3907] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/"] [unique_id "aWOIEhm0axGMFrpuXHCMHAAAABg"]
[Sun Jan 11 19:22:58.829351 2026] [:error] [pid 11747:tid 11769] [client 20.89.217.245:4023] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/"] [unique_id "aWOIEqRFw84LNpZSk7nXAwAAAVI"]
[Sun Jan 11 19:22:59.069407 2026] [:error] [pid 11747:tid 11758] [client 20.89.217.245:3868] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/"] [unique_id "aWOIE6RFw84LNpZSk7nXBAAAAUc"]
[Sun Jan 11 19:22:59.311129 2026] [:error] [pid 5272:tid 5278] [client 20.89.217.245:3932] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/first.php"] [unique_id "aWOIE1p55bCsukUvYGZj_gAAAMQ"]
[Sun Jan 11 19:22:59.552362 2026] [:error] [pid 5155:tid 5230] [client 20.89.217.245:3939] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/first.php"] [unique_id "aWOIE1gEKFpNs0_zLGkQ-gAAAI4"]
[Sun Jan 11 19:22:59.792579 2026] [:error] [pid 5272:tid 5294] [client 20.89.217.245:3874] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/first.php"] [unique_id "aWOIE1p55bCsukUvYGZkAQAAANQ"]
[Sun Jan 11 19:23:00.035969 2026] [:error] [pid 36611:tid 36627] [client 20.89.217.245:3917] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/first.php"] [unique_id "aWOIFD8oZoZHsoTdjhhW0QAAAk4"]
[Sun Jan 11 19:23:00.275953 2026] [:error] [pid 5152:tid 5167] [client 20.89.217.245:3822] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin/function.php"] [unique_id "aWOIFBm0axGMFrpuXHCMIQAAAAU"]
[Sun Jan 11 19:23:00.523179 2026] [:error] [pid 35977:tid 35999] [client 20.89.217.245:4040] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin/function.php"] [unique_id "aWOIFLDST5RMqStLeP1qkgAAAhM"]
[Sun Jan 11 19:23:00.771079 2026] [:error] [pid 11747:tid 11761] [client 20.89.217.245:3988] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin/function.php"] [unique_id "aWOIFKRFw84LNpZSk7nXCAAAAUo"]
[Sun Jan 11 19:23:01.013125 2026] [:error] [pid 11747:tid 11756] [client 20.89.217.245:3844] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin/function.php"] [unique_id "aWOIFaRFw84LNpZSk7nXCgAAAUU"]
[Sun Jan 11 19:23:01.257045 2026] [:error] [pid 40191:tid 40194] [client 20.89.217.245:4022] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "aWOIFUm2BH1CV1p0EUHHNQAAAsE"]
[Sun Jan 11 19:23:01.518982 2026] [:error] [pid 5272:tid 5289] [client 20.89.217.245:3955] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "aWOIFVp55bCsukUvYGZkAwAAAM8"]
[Sun Jan 11 19:23:01.759788 2026] [:error] [pid 5272:tid 5292] [client 20.89.217.245:3926] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "aWOIFVp55bCsukUvYGZkBAAAANI"]
[Sun Jan 11 19:23:02.001363 2026] [:error] [pid 40191:tid 40214] [client 20.89.217.245:4095] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "aWOIFkm2BH1CV1p0EUHHNgAAAtU"]
[Sun Jan 11 19:23:02.242076 2026] [:error] [pid 35977:tid 36004] [client 20.89.217.245:3979] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp/wp-includes//index.php"] [unique_id "aWOIFrDST5RMqStLeP1qkwAAAhg"]
[Sun Jan 11 19:23:02.484692 2026] [:error] [pid 35977:tid 36003] [client 20.89.217.245:3950] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp/wp-includes//index.php"] [unique_id "aWOIFrDST5RMqStLeP1qlgAAAhc"]
[Sun Jan 11 19:23:02.727057 2026] [:error] [pid 35730:tid 35753] [client 20.89.217.245:11425] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp/wp-includes//index.php"] [unique_id "aWOIFji7U_mfHtESQHlGXgAAAdU"]
[Sun Jan 11 19:23:02.975525 2026] [:error] [pid 35730:tid 35737] [client 20.89.217.245:3947] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp/wp-includes//index.php"] [unique_id "aWOIFji7U_mfHtESQHlGXwAAAcU"]
[Sun Jan 11 19:23:03.215309 2026] [:error] [pid 5272:tid 5283] [client 20.89.217.245:3806] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/museu/yhweq.php"] [unique_id "aWOIF1p55bCsukUvYGZkBwAAAMk"]
[Sun Jan 11 19:23:03.456295 2026] [:error] [pid 35977:tid 36000] [client 20.89.217.245:3782] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/museu/yhweq.php"] [unique_id "aWOIF7DST5RMqStLeP1qlwAAAhQ"]
[Sun Jan 11 19:23:03.705333 2026] [:error] [pid 11747:tid 11768] [client 20.89.217.245:3845] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/museu/yhweq.php"] [unique_id "aWOIF6RFw84LNpZSk7nXEgAAAVE"]
[Sun Jan 11 19:23:03.945238 2026] [:error] [pid 5272:tid 5281] [client 20.89.217.245:3848] [client 20.89.217.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/museu/yhweq.php"] [unique_id "aWOIF1p55bCsukUvYGZkCQAAAMc"]
[Mon Jan 12 00:01:43.083851 2026] [:error] [pid 36611:tid 36620] [client 4.213.155.173:20831] [client 4.213.155.173] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".phpquebecoils.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/info.phpquebecoils.com"] [unique_id "aWPJZz8oZoZHsoTdjhh-BgAAAkc"]
[Mon Jan 12 22:56:55.955987 2026] [:error] [pid 51956:tid 51958] [client 195.178.110.161:37024] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aWULt0b_j3zpZfEgGM81kAAAAsA"]
[Tue Jan 13 08:25:42.322644 2026] [:error] [pid 26395:tid 26406] [client 4.189.128.246:14931] [client 4.189.128.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aWWRBphRkuVub9GmnFg1cQAAAQk"]
[Tue Jan 13 08:25:42.806712 2026] [:error] [pid 57660:tid 57721] [client 4.189.128.246:14182] [client 4.189.128.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aWWRBtMDflPZjoqTTeF52gAAAIQ"]
[Tue Jan 13 08:25:44.657711 2026] [:error] [pid 57756:tid 57776] [client 4.189.128.246:14974] [client 4.189.128.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aWWRCBb7B3uqOEHw10ndwwAAANI"]
[Tue Jan 13 08:25:46.790081 2026] [:error] [pid 57756:tid 57770] [client 4.189.128.246:14966] [client 4.189.128.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aWWRChb7B3uqOEHw10ndyAAAAMw"]
[Wed Jan 14 06:35:59.114789 2026] [:error] [pid 58699:tid 58705] [client 4.213.64.52:11895] [client 4.213.64.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "aWbIz-YdPBtkMLK2Sdq3pAAAAQM"]
[Wed Jan 14 06:36:22.406710 2026] [autoindex:error] [pid 24710:tid 24713] [client 4.213.64.52:11857] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 06:36:23.199204 2026] [autoindex:error] [pid 24601:tid 24631] [client 4.213.64.52:11808] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 07:40:34.245151 2026] [:error] [pid 24602:tid 24660] [client 104.28.152.248:32695] [client 104.28.152.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/style.php"] [unique_id "aWbX8kooYwabcb9R9fxJQgAAAFY"]
[Thu Jan 15 07:28:35.842460 2026] [:error] [pid 5290:tid 5309] [client 195.178.110.191:3654] [client 195.178.110.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aWgmoziQRfcmyoePXPfQhAAAAAo"]
[Fri Jan 16 11:41:02.643991 2026] [:error] [pid 9260:tid 9275] [client 64.225.75.246:55790] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aWmzTl3AAooR8oZsCwlfDAAAAA0"]
[Fri Jan 16 11:41:11.627866 2026] [authz_core:error] [pid 9171:tid 9252] [client 64.225.75.246:47524] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Fri Jan 16 11:41:15.544300 2026] [:error] [pid 9171:tid 9236] [client 64.225.75.246:47560] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aWmzW4J9Drgq4A3ZjfP--AAAAUg"]
[Fri Jan 16 11:41:17.544078 2026] [:error] [pid 29908:tid 29911] [client 64.225.75.246:52828] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aWmzXWVs7GIQKAJ2aTV-lgAAAEE"]
[Sat Jan 17 06:15:56.113990 2026] [:error] [pid 31223:tid 31251] [client 146.190.242.161:39282] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aWq4nEMnpeq0T1sEOlJafgAAABI"]
[Sat Jan 17 06:16:04.356691 2026] [authz_core:error] [pid 31698:tid 31708] [client 146.190.242.161:35194] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Sat Jan 17 06:16:08.115479 2026] [:error] [pid 31224:tid 31277] [client 146.190.242.161:35232] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aWq4qDgpVpEMk8-OQkh5UwAAAFA"]
[Sat Jan 17 06:16:10.116444 2026] [:error] [pid 31224:tid 31271] [client 146.190.242.161:35242] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aWq4qjgpVpEMk8-OQkh5VAAAAEo"]
[Sat Jan 17 20:26:35.533203 2026] [:error] [pid 31225:tid 31292] [client 104.28.161.73:44763] [client 104.28.161.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/style.php"] [unique_id "aWt_--nu2L2yWFDbzyUDmAAAAIQ"]
[Mon Jan 19 09:50:30.416291 2026] [:error] [pid 1630:tid 1652] [client 173.214.167.46:57435] [client 173.214.167.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aW2N5i8jxjHcpcfYtKnKPwAAANQ"]
[Mon Jan 19 11:40:09.249191 2026] [:error] [pid 26514:tid 26548] [client 136.144.19.153:51021] [client 136.144.19.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.153, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nmXAKgmfGWE6X22B3FQAAAEI"], referer: https://www.google.com/
[Mon Jan 19 11:40:11.368088 2026] [:error] [pid 28281:tid 28289] [client 193.36.224.9:30965] [client 193.36.224.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.9, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nm7EEqHn6hpXZwZug5AAAAQU"], referer: https://www.google.com/
[Mon Jan 19 11:40:13.259365 2026] [:error] [pid 26516:tid 26588] [client 216.24.219.171:37541] [client 216.24.219.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.24.219.171, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nnScxkMpglAenpvVbiwAAAI8"], referer: https://www.google.com/
[Mon Jan 19 11:40:15.158761 2026] [:error] [pid 26516:tid 26593] [client 104.234.19.9:26857] [client 104.234.19.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.9, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nnycxkMpglAenpvVbjgAAAJQ"], referer: https://www.google.com/
[Mon Jan 19 11:40:17.159169 2026] [:error] [pid 26513:tid 26526] [client 136.144.19.143:58841] [client 136.144.19.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.143, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2noWtcP8UVP577s5jbKwAAAAg"], referer: https://www.google.com/
[Mon Jan 19 11:40:18.652237 2026] [:error] [pid 26514:tid 26558] [client 193.36.224.4:40973] [client 193.36.224.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.4, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nonAKgmfGWE6X22B3GgAAAEw"], referer: https://www.google.com/
[Mon Jan 19 11:40:20.355677 2026] [:error] [pid 26513:tid 26520] [client 193.36.224.8:34495] [client 193.36.224.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.8, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2npGtcP8UVP577s5jbMwAAAAI"], referer: https://www.google.com/
[Mon Jan 19 11:40:21.859908 2026] [:error] [pid 26514:tid 26563] [client 136.144.19.139:65163] [client 136.144.19.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.139, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2npXAKgmfGWE6X22B3IQAAAFE"], referer: https://www.google.com/
[Mon Jan 19 11:40:23.365197 2026] [:error] [pid 29446:tid 29456] [client 136.144.19.230:36401] [client 136.144.19.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.230, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2np1rKNBtLUD1rTV-zogAAAUg"], referer: https://www.google.com/
[Mon Jan 19 11:40:25.067922 2026] [:error] [pid 26516:tid 26578] [client 136.144.19.159:30495] [client 136.144.19.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.159, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nqScxkMpglAenpvVbkQAAAIU"], referer: https://www.google.com/
[Mon Jan 19 11:40:26.754450 2026] [:error] [pid 29446:tid 29451] [client 104.234.19.8:20235] [client 104.234.19.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.8, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nqlrKNBtLUD1rTV-zpgAAAUM"], referer: https://www.google.com/
[Mon Jan 19 11:40:29.161855 2026] [:error] [pid 26604:tid 26620] [client 136.144.19.138:28087] [client 136.144.19.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.138, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nrblAs5zRa8359s3MMAAAAM0"], referer: https://www.google.com/
[Mon Jan 19 11:40:30.880326 2026] [:error] [pid 26513:tid 26521] [client 104.234.19.15:23825] [client 104.234.19.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.15, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nrmtcP8UVP577s5jbPQAAAAM"], referer: https://www.google.com/
[Mon Jan 19 11:40:34.665163 2026] [:error] [pid 26604:tid 26607] [client 136.144.19.157:57275] [client 136.144.19.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.157, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nsrlAs5zRa8359s3MNQAAAMA"], referer: https://www.google.com/
[Mon Jan 19 11:40:38.769316 2026] [:error] [pid 26516:tid 26578] [client 104.234.19.8:50171] [client 104.234.19.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.8, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nticxkMpglAenpvVbnAAAAIU"], referer: https://www.google.com/
[Mon Jan 19 11:40:40.365574 2026] [:error] [pid 26516:tid 26592] [client 136.144.19.168:47779] [client 136.144.19.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.168, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nuCcxkMpglAenpvVbngAAAJM"], referer: https://www.google.com/
[Mon Jan 19 11:40:41.960117 2026] [:error] [pid 28281:tid 28302] [client 193.36.224.2:65241] [client 193.36.224.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.2, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nubEEqHn6hpXZwZuhGQAAARI"], referer: https://www.google.com/
[Mon Jan 19 11:40:43.393703 2026] [:error] [pid 29446:tid 29457] [client 193.36.224.1:35343] [client 193.36.224.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.1, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nu1rKNBtLUD1rTV-zvgAAAUk"], referer: https://www.google.com/
[Mon Jan 19 11:40:44.894499 2026] [:error] [pid 26516:tid 26587] [client 136.144.19.168:64129] [client 136.144.19.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.168, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nvCcxkMpglAenpvVboQAAAI4"], referer: https://www.google.com/
[Mon Jan 19 11:40:46.468372 2026] [:error] [pid 26513:tid 26542] [client 104.234.19.16:30881] [client 104.234.19.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.16, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nvmtcP8UVP577s5jbTgAAABg"], referer: https://www.google.com/
[Mon Jan 19 11:40:47.956075 2026] [:error] [pid 26513:tid 26519] [client 136.144.19.142:36877] [client 136.144.19.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.142, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nv2tcP8UVP577s5jbUgAAAAE"], referer: https://www.google.com/
[Mon Jan 19 11:40:49.474285 2026] [:error] [pid 26516:tid 26588] [client 136.144.19.153:60437] [client 136.144.19.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.153, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nwScxkMpglAenpvVbpQAAAI8"], referer: https://www.google.com/
[Mon Jan 19 11:40:50.949978 2026] [:error] [pid 29446:tid 29466] [client 193.36.224.6:59537] [client 193.36.224.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.6, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nwlrKNBtLUD1rTV-zxQAAAVI"], referer: https://www.google.com/
[Mon Jan 19 11:40:52.450027 2026] [:error] [pid 29446:tid 29469] [client 193.36.224.5:50543] [client 193.36.224.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.5, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nxFrKNBtLUD1rTV-zygAAAVU"], referer: https://www.google.com/
[Mon Jan 19 11:40:53.991764 2026] [:error] [pid 26516:tid 26597] [client 136.144.19.136:48079] [client 136.144.19.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.136, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nxScxkMpglAenpvVbqgAAAJg"], referer: https://www.google.com/
[Mon Jan 19 11:40:55.456468 2026] [:error] [pid 29446:tid 29460] [client 193.36.224.123:28709] [client 193.36.224.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.123, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nx1rKNBtLUD1rTV-z0gAAAUw"], referer: https://www.google.com/
[Mon Jan 19 11:40:57.190728 2026] [:error] [pid 28281:tid 28304] [client 104.234.19.12:51073] [client 104.234.19.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.12, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2nybEEqHn6hpXZwZuhJwAAARQ"], referer: https://www.google.com/
[Mon Jan 19 11:41:28.950246 2026] [:error] [pid 45561:tid 45587] [client 136.144.19.137:39987] [client 136.144.19.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.137, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2n6K4ONSZn4nkTayLKigAAABU"], referer: https://www.google.com/
[Mon Jan 19 11:41:30.563946 2026] [:error] [pid 45562:tid 45602] [client 136.144.19.224:31881] [client 136.144.19.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.224, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2n6joUil_kwpvtDW5AywAAAEg"], referer: https://www.google.com/
[Mon Jan 19 11:41:32.058822 2026] [:error] [pid 45562:tid 45608] [client 193.36.224.9:43871] [client 193.36.224.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.9, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2n7DoUil_kwpvtDW5AzAAAAE4"], referer: https://www.google.com/
[Mon Jan 19 11:41:33.759411 2026] [:error] [pid 45657:tid 45681] [client 136.144.19.150:63479] [client 136.144.19.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.150, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2n7Q4XFYp2OcwCx-DONwAAANY"], referer: https://www.google.com/
[Mon Jan 19 11:41:35.269943 2026] [:error] [pid 45561:tid 45573] [client 193.36.224.2:64563] [client 193.36.224.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.2, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2n764ONSZn4nkTayLKkwAAAAc"], referer: https://www.google.com/
[Mon Jan 19 11:41:36.957722 2026] [:error] [pid 45562:tid 45595] [client 136.144.19.144:48833] [client 136.144.19.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.144, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2n8DoUil_kwpvtDW5A1QAAAEE"], referer: https://www.google.com/
[Mon Jan 19 11:41:39.366887 2026] [:error] [pid 45657:tid 45676] [client 104.234.19.13:49891] [client 104.234.19.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.13, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2n8w4XFYp2OcwCx-DOOwAAANE"], referer: https://www.google.com/
[Mon Jan 19 11:41:41.052142 2026] [:error] [pid 45657:tid 45661] [client 104.234.19.16:42691] [client 104.234.19.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.16, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2n9Q4XFYp2OcwCx-DOPAAAAMI"], referer: https://www.google.com/
[Mon Jan 19 11:41:42.672205 2026] [:error] [pid 45563:tid 45631] [client 104.234.19.17:37355] [client 104.234.19.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.17, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2n9pI4--OKA-Pqumzz6wAAAIo"], referer: https://www.google.com/
[Mon Jan 19 11:41:44.392315 2026] [:error] [pid 45563:tid 45639] [client 136.144.19.168:51547] [client 136.144.19.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.168, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2n-JI4--OKA-Pqumzz7wAAAJI"], referer: https://www.google.com/
[Mon Jan 19 11:41:46.052287 2026] [:error] [pid 45561:tid 45578] [client 193.36.224.6:64115] [client 193.36.224.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.6, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2n-q4ONSZn4nkTayLKsgAAAAw"], referer: https://www.google.com/
[Mon Jan 19 11:41:48.752584 2026] [:error] [pid 45563:tid 45641] [client 136.144.19.144:27439] [client 136.144.19.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.144, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2n_JI4--OKA-Pqumzz9wAAAJQ"], referer: https://www.google.com/
[Mon Jan 19 11:41:54.750493 2026] [:error] [pid 45562:tid 45611] [client 136.144.19.140:50453] [client 136.144.19.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.140, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oAjoUil_kwpvtDW5A6AAAAFE"], referer: https://www.google.com/
[Mon Jan 19 11:41:56.257770 2026] [:error] [pid 45563:tid 45637] [client 136.144.19.144:43281] [client 136.144.19.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.144, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oBJI4--OKA-Pqumzz-gAAAJA"], referer: https://www.google.com/
[Mon Jan 19 11:41:57.758369 2026] [:error] [pid 45563:tid 45631] [client 193.36.224.2:43791] [client 193.36.224.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.2, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oBZI4--OKA-Pqumzz-wAAAIo"], referer: https://www.google.com/
[Mon Jan 19 11:41:59.559832 2026] [:error] [pid 45657:tid 45671] [client 193.36.224.6:35515] [client 193.36.224.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.6, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oBw4XFYp2OcwCx-DOVwAAAMw"], referer: https://www.google.com/
[Mon Jan 19 11:42:01.168979 2026] [:error] [pid 45657:tid 45670] [client 136.144.19.167:44077] [client 136.144.19.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.167, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oCQ4XFYp2OcwCx-DOWgAAAMs"], referer: https://www.google.com/
[Mon Jan 19 11:42:33.860543 2026] [:error] [pid 45562:tid 45611] [client 193.36.224.1:53153] [client 193.36.224.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.1, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oKToUil_kwpvtDW5BDQAAAFE"], referer: https://www.google.com/
[Mon Jan 19 11:42:37.291870 2026] [:error] [pid 45561:tid 45573] [client 193.36.224.8:53965] [client 193.36.224.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.8, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oLa4ONSZn4nkTayLLCgAAAAc"], referer: https://www.google.com/
[Mon Jan 19 11:42:39.262036 2026] [:error] [pid 45657:tid 45680] [client 136.144.19.157:25425] [client 136.144.19.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.157, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oLw4XFYp2OcwCx-DOlQAAANU"], referer: https://www.google.com/
[Mon Jan 19 11:42:41.068103 2026] [:error] [pid 45563:tid 45640] [client 104.234.19.11:46467] [client 104.234.19.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.11, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oMZI4--OKA-Pqumz0HwAAAJM"], referer: https://www.google.com/
[Mon Jan 19 11:42:42.590395 2026] [:error] [pid 45657:tid 45670] [client 193.36.224.7:47861] [client 193.36.224.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.7, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oMg4XFYp2OcwCx-DOpAAAAMs"], referer: https://www.google.com/
[Mon Jan 19 11:42:44.163170 2026] [:error] [pid 45657:tid 45674] [client 136.144.19.153:59187] [client 136.144.19.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.153, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oNA4XFYp2OcwCx-DOrgAAAM8"], referer: https://www.google.com/
[Mon Jan 19 11:42:45.777218 2026] [:error] [pid 45563:tid 45623] [client 193.36.224.2:37457] [client 193.36.224.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.2, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oNZI4--OKA-Pqumz0KwAAAII"], referer: https://www.google.com/
[Mon Jan 19 11:42:47.352421 2026] [:error] [pid 45657:tid 45669] [client 136.144.19.168:60173] [client 136.144.19.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.168, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oNw4XFYp2OcwCx-DOuQAAAMo"], referer: https://www.google.com/
[Mon Jan 19 11:42:48.952049 2026] [:error] [pid 45561:tid 45584] [client 104.234.19.14:33841] [client 104.234.19.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.14, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oOK4ONSZn4nkTayLLHgAAABI"], referer: https://www.google.com/
[Mon Jan 19 11:42:50.563491 2026] [:error] [pid 45657:tid 45664] [client 136.144.19.165:42197] [client 136.144.19.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.165, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oOg4XFYp2OcwCx-DOxgAAAMU"], referer: https://www.google.com/
[Mon Jan 19 11:42:52.064838 2026] [:error] [pid 45657:tid 45680] [client 136.144.19.170:42013] [client 136.144.19.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.170, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oPA4XFYp2OcwCx-DO0gAAANU"], referer: https://www.google.com/
[Mon Jan 19 11:42:53.572690 2026] [:error] [pid 45563:tid 45637] [client 136.144.19.152:58767] [client 136.144.19.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.152, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oPZI4--OKA-Pqumz0OwAAAJA"], referer: https://www.google.com/
[Mon Jan 19 11:42:55.658150 2026] [:error] [pid 45657:tid 45663] [client 136.144.19.144:41149] [client 136.144.19.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.144, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oPw4XFYp2OcwCx-DO5AAAAMQ"], referer: https://www.google.com/
[Mon Jan 19 11:42:57.260677 2026] [:error] [pid 45657:tid 45682] [client 136.144.19.138:52375] [client 136.144.19.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.138, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oQQ4XFYp2OcwCx-DO6gAAANc"], referer: https://www.google.com/
[Mon Jan 19 11:42:58.790500 2026] [:error] [pid 45657:tid 45669] [client 193.36.224.6:27807] [client 193.36.224.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.6, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oQg4XFYp2OcwCx-DO8wAAAMo"], referer: https://www.google.com/
[Mon Jan 19 11:43:00.186927 2026] [:error] [pid 45561:tid 45576] [client 136.144.19.140:41649] [client 136.144.19.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.140, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oRK4ONSZn4nkTayLLLQAAAAo"], referer: https://www.google.com/
[Mon Jan 19 11:43:01.661366 2026] [:error] [pid 45563:tid 45641] [client 136.144.19.159:38353] [client 136.144.19.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.159, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oRZI4--OKA-Pqumz0RAAAAJQ"], referer: https://www.google.com/
[Mon Jan 19 11:43:03.167888 2026] [:error] [pid 45562:tid 45609] [client 136.144.19.137:27703] [client 136.144.19.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.137, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oRzoUil_kwpvtDW5BKQAAAE8"], referer: https://www.google.com/
[Mon Jan 19 11:43:04.653299 2026] [:error] [pid 45562:tid 45612] [client 136.144.19.161:50877] [client 136.144.19.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.161, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oSDoUil_kwpvtDW5BKwAAAFI"], referer: https://www.google.com/
[Mon Jan 19 11:43:06.049774 2026] [:error] [pid 45563:tid 45623] [client 136.144.19.142:31867] [client 136.144.19.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.142, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oSpI4--OKA-Pqumz0SgAAAII"], referer: https://www.google.com/
[Mon Jan 19 11:43:07.651496 2026] [:error] [pid 45561:tid 45568] [client 193.36.224.8:49145] [client 193.36.224.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.8, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oS64ONSZn4nkTayLLOgAAAAI"], referer: https://www.google.com/
[Mon Jan 19 11:43:09.262061 2026] [:error] [pid 45562:tid 45612] [client 136.144.19.167:60227] [client 136.144.19.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.167, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oTToUil_kwpvtDW5BOAAAAFI"], referer: https://www.google.com/
[Mon Jan 19 11:43:10.724143 2026] [:error] [pid 45561:tid 45566] [client 136.144.19.165:30423] [client 136.144.19.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.165, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oTq4ONSZn4nkTayLLPwAAAAA"], referer: https://www.google.com/
[Mon Jan 19 11:43:12.190989 2026] [:error] [pid 45657:tid 45681] [client 136.144.19.251:38487] [client 136.144.19.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.251, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oUA4XFYp2OcwCx-DPBwAAANY"], referer: https://www.google.com/
[Mon Jan 19 11:43:13.667123 2026] [:error] [pid 45562:tid 45599] [client 136.144.19.153:41835] [client 136.144.19.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.153, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oUToUil_kwpvtDW5BQgAAAEU"], referer: https://www.google.com/
[Mon Jan 19 11:43:15.065260 2026] [:error] [pid 45562:tid 45608] [client 136.144.19.156:46005] [client 136.144.19.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.156, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oUzoUil_kwpvtDW5BRgAAAE4"], referer: https://www.google.com/
[Mon Jan 19 11:43:16.556102 2026] [:error] [pid 45561:tid 45587] [client 136.144.19.169:38531] [client 136.144.19.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.169, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oVK4ONSZn4nkTayLLTAAAABU"], referer: https://www.google.com/
[Mon Jan 19 11:43:18.069190 2026] [:error] [pid 45657:tid 45677] [client 136.144.19.150:46741] [client 136.144.19.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.150, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oVg4XFYp2OcwCx-DPEwAAANI"], referer: https://www.google.com/
[Mon Jan 19 11:43:19.656183 2026] [:error] [pid 45562:tid 45597] [client 104.234.19.17:24999] [client 104.234.19.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.17, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oVzoUil_kwpvtDW5BSQAAAEM"], referer: https://www.google.com/
[Mon Jan 19 11:43:21.059447 2026] [:error] [pid 45563:tid 45632] [client 136.144.19.156:58375] [client 136.144.19.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.156, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oWZI4--OKA-Pqumz0VwAAAIs"], referer: https://www.google.com/
[Mon Jan 19 11:43:22.475976 2026] [:error] [pid 45657:tid 45666] [client 136.144.19.137:61033] [client 136.144.19.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.137, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oWg4XFYp2OcwCx-DPGQAAAMc"], referer: https://www.google.com/
[Mon Jan 19 11:43:23.878853 2026] [:error] [pid 45561:tid 45573] [client 136.144.19.150:23689] [client 136.144.19.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.150, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oW64ONSZn4nkTayLLXQAAAAc"], referer: https://www.google.com/
[Mon Jan 19 11:43:25.448965 2026] [:error] [pid 45657:tid 45668] [client 104.234.19.13:21341] [client 104.234.19.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.13, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oXQ4XFYp2OcwCx-DPIgAAAMk"], referer: https://www.google.com/
[Mon Jan 19 11:43:57.057318 2026] [:error] [pid 45563:tid 45643] [client 193.36.224.1:27107] [client 193.36.224.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.1, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2ofZI4--OKA-Pqumz0oAAAAJY"], referer: https://www.google.com/
[Mon Jan 19 11:43:58.861554 2026] [:error] [pid 45657:tid 45682] [client 104.234.19.10:29253] [client 104.234.19.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.10, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2ofg4XFYp2OcwCx-DPagAAANc"], referer: https://www.google.com/
[Mon Jan 19 11:44:00.358786 2026] [:error] [pid 45562:tid 45610] [client 193.36.224.5:64545] [client 193.36.224.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.5, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2ogDoUil_kwpvtDW5BfAAAAFA"], referer: https://www.google.com/
[Mon Jan 19 11:44:01.966774 2026] [:error] [pid 45563:tid 45628] [client 136.144.19.170:25889] [client 136.144.19.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.170, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2ogZI4--OKA-Pqumz0qwAAAIc"], referer: https://www.google.com/
[Mon Jan 19 11:44:04.552768 2026] [:error] [pid 45561:tid 45587] [client 104.234.19.12:37837] [client 104.234.19.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.12, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2ohK4ONSZn4nkTayLLrAAAABU"], referer: https://www.google.com/
[Mon Jan 19 11:44:05.988995 2026] [:error] [pid 45562:tid 45613] [client 216.24.219.171:21541] [client 216.24.219.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.24.219.171, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2ohToUil_kwpvtDW5BhAAAAFM"], referer: https://www.google.com/
[Mon Jan 19 11:44:07.651615 2026] [:error] [pid 45563:tid 45636] [client 136.144.19.152:29705] [client 136.144.19.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.152, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oh5I4--OKA-Pqumz0zQAAAI8"], referer: https://www.google.com/
[Mon Jan 19 11:44:10.091136 2026] [:error] [pid 45563:tid 45622] [client 193.36.224.6:48085] [client 193.36.224.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.6, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oipI4--OKA-Pqumz04wAAAIE"], referer: https://www.google.com/
[Mon Jan 19 11:44:11.463136 2026] [:error] [pid 45561:tid 45586] [client 136.144.19.136:59979] [client 136.144.19.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.136, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oi64ONSZn4nkTayLLwQAAABQ"], referer: https://www.google.com/
[Mon Jan 19 11:44:12.951204 2026] [:error] [pid 45657:tid 45662] [client 136.144.19.161:52503] [client 136.144.19.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.161, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2ojA4XFYp2OcwCx-DPhAAAAMM"], referer: https://www.google.com/
[Mon Jan 19 11:44:14.354857 2026] [:error] [pid 45562:tid 45617] [client 104.234.19.12:34015] [client 104.234.19.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.12, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2ojjoUil_kwpvtDW5BkgAAAFc"], referer: https://www.google.com/
[Mon Jan 19 11:44:15.795228 2026] [:error] [pid 45563:tid 45644] [client 136.144.19.142:49157] [client 136.144.19.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.142, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2oj5I4--OKA-Pqumz07AAAAJc"], referer: https://www.google.com/
[Mon Jan 19 11:44:17.299913 2026] [:error] [pid 45657:tid 45673] [client 193.36.224.7:58035] [client 193.36.224.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.7, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2okQ4XFYp2OcwCx-DPiAAAAM4"], referer: https://www.google.com/
[Mon Jan 19 11:44:18.691819 2026] [:error] [pid 45562:tid 45605] [client 104.234.19.17:22263] [client 104.234.19.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.234.19.17, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2okjoUil_kwpvtDW5BmgAAAEs"], referer: https://www.google.com/
[Mon Jan 19 11:44:20.252985 2026] [:error] [pid 45562:tid 45599] [client 136.144.19.137:39233] [client 136.144.19.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.137, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2olDoUil_kwpvtDW5BngAAAEU"], referer: https://www.google.com/
[Mon Jan 19 11:44:21.690355 2026] [:error] [pid 45562:tid 45617] [client 136.144.19.157:33343] [client 136.144.19.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.19.157, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2olToUil_kwpvtDW5BowAAAFc"], referer: https://www.google.com/
[Mon Jan 19 11:44:23.092566 2026] [:error] [pid 45561:tid 45579] [client 193.36.224.8:42383] [client 193.36.224.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.36.224.8, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aW2ol64ONSZn4nkTayLL0wAAAA0"], referer: https://www.google.com/
[Mon Jan 19 23:35:26.148740 2026] [:error] [pid 45561:tid 45585] [client 136.144.19.150:46425] [client 136.144.19.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.150, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aW5PPq4ONSZn4nkTayKJ1wAAABM"]
[Mon Jan 19 23:35:27.553116 2026] [:error] [pid 36216:tid 36239] [client 104.234.19.14:40363] [client 104.234.19.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.14, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aW5PP8IpfKKs9fzB-yDS4wAAAVU"]
[Tue Jan 20 00:23:54.427946 2026] [:error] [pid 45563:tid 45622] [client 104.28.246.115:14253] [client 104.28.246.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/style.php"] [unique_id "aW5ampI4--OKA-PqumzmwgAAAIE"]
[Tue Jan 20 00:23:57.868009 2026] [:error] [pid 36216:tid 36227] [client 104.28.246.115:14224] [client 104.28.246.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/style.php"] [unique_id "aW5ancIpfKKs9fzB-yDiSwAAAUk"]
[Tue Jan 20 00:24:05.325856 2026] [:error] [pid 45563:tid 45638] [client 104.28.246.115:44055] [client 104.28.246.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/style.php"] [unique_id "aW5apZI4--OKA-PqumzmwwAAAJE"]
[Tue Jan 20 15:21:36.454871 2026] [:error] [pid 54259:tid 54287] [client 157.15.40.62:62699] [client 157.15.40.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/txets.php"] [unique_id "aW8tAA2q1USrePnOoFTEtgAAAIo"]
[Tue Jan 20 15:21:37.087202 2026] [:error] [pid 56291:tid 56313] [client 157.15.40.62:62731] [client 157.15.40.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/txets.php"] [unique_id "aW8tAbXgW_1T5Nikxa3HswAAAFI"]
[Tue Jan 20 15:21:37.705062 2026] [:error] [pid 63647:tid 63670] [client 157.15.40.62:62771] [client 157.15.40.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/txets.php"] [unique_id "aW8tAVUaYw1xHOoaFFLVqAAAAhU"]
[Tue Jan 20 15:21:41.598725 2026] [:error] [pid 54259:tid 54278] [client 157.15.40.62:62893] [client 157.15.40.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/txets.php"] [unique_id "aW8tBQ2q1USrePnOoFTEuQAAAIE"]
[Tue Jan 20 16:16:05.579435 2026] [:error] [pid 54261:tid 54339] [client 64.225.8.2:64163] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.vscode/sftp-config.json"] [unique_id "aW85xQESZyr5alDl9TvLRgAAAcQ"]
[Tue Jan 20 16:16:24.765515 2026] [:error] [pid 54261:tid 54347] [client 64.225.8.2:53796] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/sftp-config.json"] [unique_id "aW852AESZyr5alDl9TvLSgAAAcw"]
[Wed Jan 21 00:14:07.793453 2026] [:error] [pid 56291:tid 56300] [client 64.225.8.2:60673] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.vscode/sftp-config.json"] [unique_id "aW-pz7XgW_1T5Nikxa0XdwAAAEU"]
[Wed Jan 21 00:14:23.140229 2026] [:error] [pid 54382:tid 54400] [client 64.225.8.2:52498] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/sftp-config.json"] [unique_id "aW-p30TJlZ9SJ6sBOEve0AAAAA8"]
[Wed Jan 21 10:41:02.306343 2026] [:error] [pid 21454:tid 21465] [client 96.44.136.159:42890] [client 96.44.136.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||southerncrosscentre.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aXA8vjwp5UZmMFzY2bq6VQAAAAE"], referer: https://www.google.com
[Thu Jan 22 06:17:46.990460 2026] [:error] [pid 52556:tid 52575] [client 85.203.23.87:22981] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-confiq.php"] [unique_id "aXFQiug4y1NKM4AgfjBxngAAANE"]
[Thu Jan 22 06:17:47.359888 2026] [:error] [pid 52446:tid 52498] [client 85.203.23.106:47629] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/nrhogjyecktixbal0fnt5Cakc.php"] [unique_id "aXFQi7J6clMw4kdrHYFW3AAAAFA"]
[Thu Jan 22 06:17:47.732426 2026] [:error] [pid 52447:tid 52531] [client 85.203.23.86:60609] [client 85.203.23.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/manager.php"] [unique_id "aXFQi3RLA2NsdGqJzotFgwAAAJY"]
[Thu Jan 22 06:17:48.109344 2026] [:error] [pid 52445:tid 52475] [client 85.203.23.87:55151] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/znv3hcxz6mwjdz1jwxrxiCakc.php"] [unique_id "aXFQjOvMmsFgpSSb5L2TGgAAABU"]
[Thu Jan 22 06:17:48.472258 2026] [:error] [pid 52445:tid 52455] [client 85.203.23.89:60029] [client 85.203.23.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ioxi-o.php"] [unique_id "aXFQjOvMmsFgpSSb5L2THAAAAAE"]
[Thu Jan 22 06:17:48.838211 2026] [:error] [pid 52556:tid 52558] [client 85.203.23.83:35013] [client 85.203.23.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/form.php"] [unique_id "aXFQjOg4y1NKM4AgfjBxogAAAMA"]
[Thu Jan 22 06:17:49.207966 2026] [:error] [pid 52556:tid 52577] [client 85.203.23.76:21293] [client 85.203.23.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-links-opml.php"] [unique_id "aXFQjeg4y1NKM4AgfjBxpAAAANM"]
[Thu Jan 22 06:17:49.575588 2026] [:error] [pid 52445:tid 52478] [client 85.203.23.60:26761] [client 85.203.23.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/new4.php"] [unique_id "aXFQjevMmsFgpSSb5L2TIAAAABg"]
[Thu Jan 22 06:17:49.945942 2026] [:error] [pid 52447:tid 52518] [client 85.203.23.65:44013] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "aXFQjXRLA2NsdGqJzotFhQAAAIk"]
[Thu Jan 22 06:17:50.310243 2026] [:error] [pid 36083:tid 36086] [client 85.203.23.74:30999] [client 85.203.23.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/uk5pqv0wksbuaourleCakc.php"] [unique_id "aXFQjpCng2nQoR5iqwqv4AAAAUA"]
[Thu Jan 22 06:17:52.065557 2026] [:error] [pid 52445:tid 52468] [client 85.203.23.91:33107] [client 85.203.23.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/aa.php"] [unique_id "aXFQkOvMmsFgpSSb5L2TJAAAAA4"]
[Thu Jan 22 06:17:52.432177 2026] [:error] [pid 52445:tid 52470] [client 85.203.23.56:53867] [client 85.203.23.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aXFQkOvMmsFgpSSb5L2TJgAAABA"]
[Thu Jan 22 06:17:52.795980 2026] [:error] [pid 52445:tid 52464] [client 85.203.23.58:48647] [client 85.203.23.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/shell.php"] [unique_id "aXFQkOvMmsFgpSSb5L2TKAAAAAo"]
[Thu Jan 22 06:17:53.161673 2026] [:error] [pid 52556:tid 52575] [client 85.203.23.63:47117] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/new.php"] [unique_id "aXFQkeg4y1NKM4AgfjBxrgAAANE"]
[Thu Jan 22 06:17:53.523480 2026] [:error] [pid 36083:tid 36099] [client 85.203.23.88:64609] [client 85.203.23.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/themes.php"] [unique_id "aXFQkZCng2nQoR5iqwqv5AAAAU0"]
[Thu Jan 22 06:17:53.887249 2026] [:error] [pid 52447:tid 52518] [client 85.203.23.57:38517] [client 85.203.23.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/test1.php"] [unique_id "aXFQkXRLA2NsdGqJzotFkQAAAIk"]
[Thu Jan 22 06:17:54.256621 2026] [:error] [pid 52446:tid 52504] [client 85.203.23.72:49257] [client 85.203.23.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/nc4.php"] [unique_id "aXFQkrJ6clMw4kdrHYFW3wAAAFY"]
[Thu Jan 22 06:17:59.620071 2026] [:error] [pid 36083:tid 36099] [client 85.203.23.94:49721] [client 85.203.23.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aXFQl5Cng2nQoR5iqwqv7gAAAU0"]
[Thu Jan 22 06:17:59.985098 2026] [:error] [pid 36083:tid 36109] [client 85.203.23.104:26221] [client 85.203.23.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/"] [unique_id "aXFQl5Cng2nQoR5iqwqv8QAAAVc"]
[Thu Jan 22 06:18:00.362080 2026] [:error] [pid 52447:tid 52520] [client 85.203.23.97:49345] [client 85.203.23.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/aatdgetgdg/main.php"] [unique_id "aXFQmHRLA2NsdGqJzotFkgAAAIs"]
[Thu Jan 22 06:18:00.727389 2026] [:error] [pid 52446:tid 52493] [client 85.203.23.66:64459] [client 85.203.23.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aXFQmLJ6clMw4kdrHYFW5wAAAEs"]
[Thu Jan 22 06:18:01.087856 2026] [:error] [pid 27550:tid 27575] [client 85.203.23.67:40081] [client 85.203.23.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "aXFQmeOQDPzfV5R2LYRGDwAAARc"]
[Thu Jan 22 06:18:01.456996 2026] [:error] [pid 52446:tid 52487] [client 85.203.23.102:49439] [client 85.203.23.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/network/cache/"] [unique_id "aXFQmbJ6clMw4kdrHYFW6AAAAEU"]
[Thu Jan 22 06:18:01.838678 2026] [:error] [pid 36083:tid 36100] [client 85.203.23.87:52737] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "aXFQmZCng2nQoR5iqwqv9QAAAU4"]
[Thu Jan 22 06:18:02.215783 2026] [:error] [pid 36083:tid 36097] [client 85.203.23.100:41839] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/upload/"] [unique_id "aXFQmpCng2nQoR5iqwqv9wAAAUs"]
[Thu Jan 22 06:18:02.655973 2026] [:error] [pid 52447:tid 52529] [client 85.203.23.81:30463] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ioxi-o.php"] [unique_id "aXFQmnRLA2NsdGqJzotFlAAAAJQ"]
[Thu Jan 22 06:18:03.029891 2026] [:error] [pid 52447:tid 52515] [client 85.203.23.88:52249] [client 85.203.23.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/file.php"] [unique_id "aXFQm3RLA2NsdGqJzotFlgAAAIY"]
[Thu Jan 22 06:18:03.389770 2026] [:error] [pid 52446:tid 52489] [client 85.203.23.66:32089] [client 85.203.23.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/"] [unique_id "aXFQm7J6clMw4kdrHYFW6wAAAEc"]
[Thu Jan 22 06:18:03.763478 2026] [:error] [pid 52556:tid 52570] [client 85.203.23.106:45051] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/admin.php"] [unique_id "aXFQm-g4y1NKM4AgfjBxvQAAAMw"]
[Thu Jan 22 06:18:04.130388 2026] [:error] [pid 52447:tid 52519] [client 85.203.23.63:49749] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/network/"] [unique_id "aXFQnHRLA2NsdGqJzotFlwAAAIo"]
[Thu Jan 22 06:18:04.502022 2026] [:error] [pid 52556:tid 52565] [client 85.203.23.95:38647] [client 85.203.23.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/"] [unique_id "aXFQnOg4y1NKM4AgfjBxvwAAAMc"]
[Thu Jan 22 06:18:04.876578 2026] [:error] [pid 52447:tid 52513] [client 85.203.23.88:29877] [client 85.203.23.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/5PJcpMFsD8B.php"] [unique_id "aXFQnHRLA2NsdGqJzotFmQAAAIQ"]
[Thu Jan 22 06:18:05.249800 2026] [:error] [pid 52446:tid 52506] [client 85.203.23.61:26723] [client 85.203.23.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "aXFQnbJ6clMw4kdrHYFW7AAAAFg"]
[Thu Jan 22 06:18:05.630524 2026] [:error] [pid 27550:tid 27576] [client 85.203.23.59:59749] [client 85.203.23.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aXFQneOQDPzfV5R2LYRGEwAAARg"]
[Thu Jan 22 06:18:05.996882 2026] [:error] [pid 27550:tid 27554] [client 85.203.23.87:34525] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css.php"] [unique_id "aXFQneOQDPzfV5R2LYRGFQAAAQI"]
[Thu Jan 22 06:18:06.367223 2026] [:error] [pid 27550:tid 27573] [client 85.203.23.72:64359] [client 85.203.23.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-good.php"] [unique_id "aXFQnuOQDPzfV5R2LYRGFgAAARU"]
[Thu Jan 22 06:18:06.737910 2026] [:error] [pid 52446:tid 52494] [client 85.203.23.89:30765] [client 85.203.23.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/lock360.php"] [unique_id "aXFQnrJ6clMw4kdrHYFW7QAAAEw"]
[Thu Jan 22 06:18:12.110033 2026] [:error] [pid 27550:tid 27575] [client 85.203.23.63:28083] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/updates.php"] [unique_id "aXFQpOOQDPzfV5R2LYRGHAAAARc"]
[Thu Jan 22 06:18:12.469952 2026] [:error] [pid 36083:tid 36094] [client 85.203.23.75:35423] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aXFQpJCng2nQoR5iqwqwBwAAAUg"]
[Thu Jan 22 06:18:12.840959 2026] [:error] [pid 52445:tid 52457] [client 85.203.23.65:29473] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aXFQpOvMmsFgpSSb5L2TLwAAAAM"]
[Thu Jan 22 06:18:13.207046 2026] [:error] [pid 52556:tid 52579] [client 85.203.23.94:63179] [client 85.203.23.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aXFQpeg4y1NKM4AgfjBxzQAAANU"]
[Thu Jan 22 06:18:13.575248 2026] [:error] [pid 52447:tid 52521] [client 85.203.23.77:57575] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "aXFQpXRLA2NsdGqJzotFogAAAIw"]
[Thu Jan 22 06:18:13.947725 2026] [:error] [pid 52446:tid 52488] [client 85.203.23.88:30239] [client 85.203.23.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/"] [unique_id "aXFQpbJ6clMw4kdrHYFW9AAAAEY"]
[Thu Jan 22 06:18:14.317150 2026] [:error] [pid 52447:tid 52533] [client 85.203.23.82:29291] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/class.api.php"] [unique_id "aXFQpnRLA2NsdGqJzotFowAAAJg"]
[Thu Jan 22 06:18:14.684815 2026] [:error] [pid 52556:tid 52574] [client 85.203.23.66:42473] [client 85.203.23.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "aXFQpug4y1NKM4AgfjBx0gAAANA"]
[Thu Jan 22 06:18:15.054091 2026] [:error] [pid 36083:tid 36100] [client 85.203.23.66:64579] [client 85.203.23.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/bless.php"] [unique_id "aXFQp5Cng2nQoR5iqwqwDAAAAU4"]
[Thu Jan 22 06:18:15.435711 2026] [:error] [pid 36083:tid 36106] [client 85.203.23.78:20109] [client 85.203.23.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/"] [unique_id "aXFQp5Cng2nQoR5iqwqwDgAAAVQ"]
[Thu Jan 22 06:18:15.812491 2026] [:error] [pid 52556:tid 52567] [client 85.203.23.95:53293] [client 85.203.23.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/index/function.php"] [unique_id "aXFQp-g4y1NKM4AgfjBx1AAAAMk"]
[Thu Jan 22 06:18:16.178461 2026] [:error] [pid 52556:tid 52561] [client 85.203.23.61:27717] [client 85.203.23.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-config-sample.php"] [unique_id "aXFQqOg4y1NKM4AgfjBx1QAAAMM"]
[Thu Jan 22 06:18:16.540707 2026] [:error] [pid 52556:tid 52564] [client 85.203.23.83:21597] [client 85.203.23.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/k.php"] [unique_id "aXFQqOg4y1NKM4AgfjBx2QAAAMY"]
[Thu Jan 22 06:18:16.911624 2026] [:error] [pid 52447:tid 52526] [client 85.203.23.89:46673] [client 85.203.23.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aXFQqHRLA2NsdGqJzotFpgAAAJE"]
[Thu Jan 22 06:18:17.282384 2026] [:error] [pid 52447:tid 52529] [client 85.203.23.89:61079] [client 85.203.23.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "aXFQqXRLA2NsdGqJzotFqQAAAJQ"]
[Thu Jan 22 06:18:17.645438 2026] [:error] [pid 27550:tid 27573] [client 85.203.23.63:50467] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/plugins/"] [unique_id "aXFQqeOQDPzfV5R2LYRGIgAAARU"]
[Thu Jan 22 06:18:18.019124 2026] [:error] [pid 52447:tid 52531] [client 85.203.23.95:62005] [client 85.203.23.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/autoload_classmap/function.php"] [unique_id "aXFQqnRLA2NsdGqJzotFqgAAAJY"]
[Thu Jan 22 06:18:18.382204 2026] [:error] [pid 36083:tid 36087] [client 85.203.23.73:42621] [client 85.203.23.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/posts"] [unique_id "aXFQqpCng2nQoR5iqwqwFAAAAUE"]
[Thu Jan 22 06:18:18.753250 2026] [:error] [pid 36083:tid 36101] [client 85.203.23.106:37255] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aXFQqpCng2nQoR5iqwqwFQAAAU8"]
[Thu Jan 22 06:18:24.116130 2026] [:error] [pid 52556:tid 52582] [client 85.203.23.80:21299] [client 85.203.23.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/"] [unique_id "aXFQsOg4y1NKM4AgfjBx6gAAANg"]
[Thu Jan 22 06:18:24.476493 2026] [:error] [pid 52447:tid 52515] [client 85.203.23.95:55129] [client 85.203.23.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/test.php"] [unique_id "aXFQsHRLA2NsdGqJzotFtQAAAIY"]
[Thu Jan 22 06:18:24.837605 2026] [:error] [pid 52446:tid 52493] [client 85.203.23.83:61421] [client 85.203.23.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "aXFQsLJ6clMw4kdrHYFW-AAAAEs"]
[Thu Jan 22 06:18:25.211034 2026] [:error] [pid 36083:tid 36103] [client 85.203.23.67:60527] [client 85.203.23.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aXFQsZCng2nQoR5iqwqwGAAAAVE"]
[Thu Jan 22 06:18:25.595958 2026] [:error] [pid 36083:tid 36087] [client 85.203.23.67:29477] [client 85.203.23.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/adminfuns.php"] [unique_id "aXFQsZCng2nQoR5iqwqwGgAAAUE"]
[Thu Jan 22 06:18:25.958775 2026] [:error] [pid 52445:tid 52457] [client 85.203.23.95:45377] [client 85.203.23.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/shell/"] [unique_id "aXFQsevMmsFgpSSb5L2TNwAAAAM"]
[Thu Jan 22 06:18:26.327473 2026] [:error] [pid 52445:tid 52455] [client 85.203.23.76:49487] [client 85.203.23.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/"] [unique_id "aXFQsuvMmsFgpSSb5L2TOAAAAAE"]
[Thu Jan 22 06:18:31.707707 2026] [:error] [pid 52447:tid 52510] [client 85.203.23.106:39073] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/admin.php"] [unique_id "aXFQt3RLA2NsdGqJzotFywAAAIE"]
[Thu Jan 22 06:18:32.077139 2026] [:error] [pid 52447:tid 52515] [client 85.203.23.87:35397] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/shell.php"] [unique_id "aXFQuHRLA2NsdGqJzotFzwAAAIY"]
[Thu Jan 22 06:18:32.475766 2026] [:error] [pid 52556:tid 52574] [client 85.203.23.96:46937] [client 85.203.23.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/system.php"] [unique_id "aXFQuOg4y1NKM4AgfjBx9QAAANA"]
[Thu Jan 22 06:18:32.849837 2026] [:error] [pid 52445:tid 52461] [client 85.203.23.104:21589] [client 85.203.23.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/mah.php"] [unique_id "aXFQuOvMmsFgpSSb5L2TRQAAAAc"]
[Thu Jan 22 06:18:33.215050 2026] [:error] [pid 52556:tid 52567] [client 85.203.23.81:22219] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/"] [unique_id "aXFQueg4y1NKM4AgfjBx9wAAAMk"]
[Thu Jan 22 06:18:33.575387 2026] [:error] [pid 52556:tid 52566] [client 85.203.23.75:44875] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/network_xo.php"] [unique_id "aXFQueg4y1NKM4AgfjBx-gAAAMg"]
[Thu Jan 22 06:18:33.937469 2026] [:error] [pid 52445:tid 52463] [client 85.203.23.86:50469] [client 85.203.23.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/simple.php"] [unique_id "aXFQuevMmsFgpSSb5L2TRwAAAAk"]
[Thu Jan 22 06:18:34.314783 2026] [:error] [pid 52446:tid 52488] [client 85.203.23.82:47407] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/m.php"] [unique_id "aXFQurJ6clMw4kdrHYFXBAAAAEY"]
[Thu Jan 22 06:18:34.688460 2026] [:error] [pid 52447:tid 52530] [client 85.203.23.67:48129] [client 85.203.23.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/bolt.php"] [unique_id "aXFQunRLA2NsdGqJzotF1QAAAJU"]
[Thu Jan 22 06:18:35.051155 2026] [:error] [pid 52556:tid 52561] [client 85.203.23.73:53713] [client 85.203.23.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/wp-conflg.php"] [unique_id "aXFQu-g4y1NKM4AgfjBx_QAAAMM"]
[Thu Jan 22 06:18:35.422197 2026] [:error] [pid 27550:tid 27568] [client 85.203.23.104:37295] [client 85.203.23.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "aXFQu-OQDPzfV5R2LYRGLQAAARA"]
[Thu Jan 22 06:18:35.793755 2026] [:error] [pid 27550:tid 27563] [client 85.203.23.95:30689] [client 85.203.23.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aXFQu-OQDPzfV5R2LYRGLgAAAQs"]
[Thu Jan 22 06:18:36.162520 2026] [:error] [pid 36083:tid 36090] [client 85.203.23.97:61095] [client 85.203.23.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/function/function.php"] [unique_id "aXFQvJCng2nQoR5iqwqwIgAAAUQ"]
[Thu Jan 22 06:18:36.542083 2026] [:error] [pid 36083:tid 36105] [client 85.203.23.80:50705] [client 85.203.23.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/buy.php"] [unique_id "aXFQvJCng2nQoR5iqwqwJQAAAVM"]
[Thu Jan 22 06:18:36.920932 2026] [:error] [pid 52446:tid 52491] [client 85.203.23.92:61439] [client 85.203.23.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "aXFQvLJ6clMw4kdrHYFXBwAAAEk"]
[Thu Jan 22 06:18:37.287047 2026] [:error] [pid 27550:tid 27570] [client 85.203.23.62:47049] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/areak1.php"] [unique_id "aXFQveOQDPzfV5R2LYRGMQAAARI"]
[Thu Jan 22 06:18:42.728962 2026] [:error] [pid 52446:tid 52498] [client 85.203.23.75:31665] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ufbngowues/main.php"] [unique_id "aXFQwrJ6clMw4kdrHYFXCgAAAFA"]
[Thu Jan 22 06:18:43.096931 2026] [:error] [pid 27550:tid 27571] [client 85.203.23.87:51931] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/shell3.php"] [unique_id "aXFQw-OQDPzfV5R2LYRGOgAAARM"]
[Thu Jan 22 06:18:43.458308 2026] [:error] [pid 52445:tid 52472] [client 85.203.23.104:41245] [client 85.203.23.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/elementor/includes/template-singl-portfolio.php"] [unique_id "aXFQw-vMmsFgpSSb5L2TWAAAABI"]
[Thu Jan 22 06:18:48.823997 2026] [:error] [pid 52445:tid 52462] [client 85.203.23.92:53323] [client 85.203.23.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aXFQyOvMmsFgpSSb5L2TXwAAAAg"]
[Thu Jan 22 06:18:49.205490 2026] [:error] [pid 52447:tid 52523] [client 85.203.23.83:22735] [client 85.203.23.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "aXFQyXRLA2NsdGqJzotF9AAAAI4"]
[Thu Jan 22 06:18:49.579600 2026] [:error] [pid 52445:tid 52463] [client 85.203.23.54:49991] [client 85.203.23.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aXFQyevMmsFgpSSb5L2TYQAAAAk"]
[Thu Jan 22 06:18:49.944338 2026] [:error] [pid 52447:tid 52530] [client 85.203.23.61:40147] [client 85.203.23.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/worksec.php"] [unique_id "aXFQyXRLA2NsdGqJzotF-gAAAJU"]
[Thu Jan 22 06:18:51.735875 2026] [:error] [pid 36083:tid 36088] [client 85.203.23.91:32605] [client 85.203.23.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/info.php"] [unique_id "aXFQy5Cng2nQoR5iqwqwOQAAAUI"]
[Thu Jan 22 06:18:52.111567 2026] [:error] [pid 27550:tid 27567] [client 85.203.23.107:57057] [client 85.203.23.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/we.php"] [unique_id "aXFQzOOQDPzfV5R2LYRGPAAAAQ8"]
[Thu Jan 22 06:18:52.479481 2026] [:error] [pid 52447:tid 52531] [client 85.203.23.89:44183] [client 85.203.23.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-signin.php"] [unique_id "aXFQzHRLA2NsdGqJzotGBwAAAJY"]
[Thu Jan 22 06:18:52.840892 2026] [:error] [pid 52445:tid 52472] [client 85.203.23.54:39265] [client 85.203.23.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aXFQzOvMmsFgpSSb5L2TZAAAABI"]
[Thu Jan 22 06:18:53.204189 2026] [:error] [pid 36083:tid 36095] [client 85.203.23.75:44179] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/admin-header.php"] [unique_id "aXFQzZCng2nQoR5iqwqwPQAAAUk"]
[Thu Jan 22 06:18:53.572794 2026] [:error] [pid 52446:tid 52492] [client 85.203.23.66:21449] [client 85.203.23.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/about.php"] [unique_id "aXFQzbJ6clMw4kdrHYFXFQAAAEo"]
[Thu Jan 22 06:18:53.936311 2026] [:error] [pid 52447:tid 52533] [client 85.203.23.102:50973] [client 85.203.23.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/"] [unique_id "aXFQzXRLA2NsdGqJzotGCQAAAJg"]
[Thu Jan 22 06:18:54.304850 2026] [:error] [pid 36083:tid 36099] [client 85.203.23.81:27235] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/222.php"] [unique_id "aXFQzpCng2nQoR5iqwqwPwAAAU0"]
[Thu Jan 22 06:18:54.692424 2026] [:error] [pid 36083:tid 36090] [client 85.203.23.56:47531] [client 85.203.23.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/s.php"] [unique_id "aXFQzpCng2nQoR5iqwqwQgAAAUQ"]
[Thu Jan 22 06:18:55.061113 2026] [:error] [pid 52447:tid 52521] [client 85.203.23.70:28989] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-conflg.php"] [unique_id "aXFQz3RLA2NsdGqJzotGDQAAAIw"]
[Thu Jan 22 06:18:55.434441 2026] [:error] [pid 52447:tid 52528] [client 85.203.23.100:20221] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/system_log.php"] [unique_id "aXFQz3RLA2NsdGqJzotGEAAAAJM"]
[Thu Jan 22 06:18:55.799466 2026] [:error] [pid 52556:tid 52572] [client 85.203.23.60:55903] [client 85.203.23.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/item.php"] [unique_id "aXFQz-g4y1NKM4AgfjByFgAAAM4"]
[Thu Jan 22 06:18:56.168140 2026] [:error] [pid 52447:tid 52523] [client 85.203.23.65:21737] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aXFQ0HRLA2NsdGqJzotGEgAAAI4"]
[Thu Jan 22 06:18:56.541680 2026] [:error] [pid 52447:tid 52520] [client 85.203.23.63:63437] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/themes/"] [unique_id "aXFQ0HRLA2NsdGqJzotGFQAAAIs"]
[Thu Jan 22 06:18:56.909993 2026] [:error] [pid 52447:tid 52522] [client 85.203.23.96:57165] [client 85.203.23.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aXFQ0HRLA2NsdGqJzotGGAAAAI0"]
[Thu Jan 22 06:18:57.271435 2026] [:error] [pid 52556:tid 52564] [client 85.203.23.61:51673] [client 85.203.23.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "aXFQ0eg4y1NKM4AgfjByGAAAAMY"]
[Thu Jan 22 06:18:57.644988 2026] [:error] [pid 52447:tid 52524] [client 85.203.23.55:33507] [client 85.203.23.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/includes/"] [unique_id "aXFQ0XRLA2NsdGqJzotGGgAAAI8"]
[Thu Jan 22 06:18:58.008496 2026] [:error] [pid 52447:tid 52521] [client 85.203.23.86:23615] [client 85.203.23.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/packed.php"] [unique_id "aXFQ0nRLA2NsdGqJzotGHAAAAIw"]
[Thu Jan 22 06:18:58.377117 2026] [:error] [pid 52447:tid 52527] [client 85.203.23.93:26177] [client 85.203.23.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aXFQ0nRLA2NsdGqJzotGIAAAAJI"]
[Thu Jan 22 06:18:58.746527 2026] [:error] [pid 52447:tid 52525] [client 85.203.23.73:65517] [client 85.203.23.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/404.php"] [unique_id "aXFQ0nRLA2NsdGqJzotGIgAAAJA"]
[Thu Jan 22 06:18:59.146547 2026] [:error] [pid 52556:tid 52578] [client 85.203.23.98:22429] [client 85.203.23.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "aXFQ0-g4y1NKM4AgfjByGgAAANQ"]
[Thu Jan 22 06:18:59.524526 2026] [:error] [pid 52445:tid 52456] [client 85.203.23.65:56239] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/"] [unique_id "aXFQ0-vMmsFgpSSb5L2TbAAAAAI"]
[Thu Jan 22 06:19:04.897782 2026] [:error] [pid 27550:tid 27558] [client 85.203.23.89:65519] [client 85.203.23.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/a.php"] [unique_id "aXFQ2OOQDPzfV5R2LYRGUgAAAQY"]
[Thu Jan 22 06:19:05.264274 2026] [:error] [pid 27550:tid 27559] [client 85.203.23.87:23159] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/"] [unique_id "aXFQ2eOQDPzfV5R2LYRGUwAAAQc"]
[Thu Jan 22 06:19:05.634048 2026] [:error] [pid 36083:tid 36102] [client 85.203.23.96:50765] [client 85.203.23.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aXFQ2ZCng2nQoR5iqwqwVAAAAVA"]
[Thu Jan 22 06:19:05.996600 2026] [:error] [pid 52447:tid 52512] [client 85.203.23.95:54659] [client 85.203.23.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/hplfuns.php"] [unique_id "aXFQ2XRLA2NsdGqJzotGLAAAAIM"]
[Thu Jan 22 06:19:06.365164 2026] [:error] [pid 52447:tid 52529] [client 85.203.23.67:60533] [client 85.203.23.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/"] [unique_id "aXFQ2nRLA2NsdGqJzotGLQAAAJQ"]
[Thu Jan 22 06:19:06.732473 2026] [:error] [pid 52447:tid 52509] [client 85.203.23.58:55597] [client 85.203.23.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/x.php"] [unique_id "aXFQ2nRLA2NsdGqJzotGLgAAAIA"]
[Thu Jan 22 06:19:07.116605 2026] [:error] [pid 52447:tid 52525] [client 85.203.23.65:25261] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aXFQ23RLA2NsdGqJzotGMAAAAJA"]
[Thu Jan 22 06:19:07.485857 2026] [:error] [pid 52447:tid 52513] [client 85.203.23.93:51445] [client 85.203.23.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/about/function.php"] [unique_id "aXFQ23RLA2NsdGqJzotGMgAAAIQ"]
[Thu Jan 22 06:19:12.853962 2026] [:error] [pid 52447:tid 52524] [client 85.203.23.100:44935] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aXFQ4HRLA2NsdGqJzotGPwAAAI8"]
[Thu Jan 22 06:19:13.216816 2026] [:error] [pid 52447:tid 52520] [client 85.203.23.85:47313] [client 85.203.23.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aXFQ4XRLA2NsdGqJzotGQAAAAIs"]
[Thu Jan 22 06:19:13.577686 2026] [:error] [pid 52446:tid 52485] [client 85.203.23.70:41665] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/"] [unique_id "aXFQ4bJ6clMw4kdrHYFXHwAAAEM"]
[Thu Jan 22 06:19:13.948499 2026] [:error] [pid 52556:tid 52578] [client 85.203.23.75:22583] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aXFQ4eg4y1NKM4AgfjByJAAAANQ"]
[Thu Jan 22 06:19:14.312671 2026] [:error] [pid 52447:tid 52531] [client 85.203.23.78:33085] [client 85.203.23.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/2024/"] [unique_id "aXFQ4nRLA2NsdGqJzotGRwAAAJY"]
[Thu Jan 22 06:19:14.681888 2026] [:error] [pid 52446:tid 52506] [client 85.203.23.85:27927] [client 85.203.23.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/"] [unique_id "aXFQ4rJ6clMw4kdrHYFXIQAAAFg"]
[Thu Jan 22 06:19:15.044695 2026] [:error] [pid 36083:tid 36086] [client 85.203.23.59:34555] [client 85.203.23.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/cgi-bin/"] [unique_id "aXFQ45Cng2nQoR5iqwqwcQAAAUA"]
[Thu Jan 22 06:19:15.408692 2026] [:error] [pid 52446:tid 52490] [client 85.203.23.59:35093] [client 85.203.23.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aXFQ47J6clMw4kdrHYFXJAAAAEg"]
[Thu Jan 22 06:19:15.769378 2026] [:error] [pid 52447:tid 52528] [client 85.203.23.68:29711] [client 85.203.23.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aXFQ43RLA2NsdGqJzotGSAAAAJM"]
[Thu Jan 22 06:19:16.144724 2026] [:error] [pid 52556:tid 52574] [client 85.203.23.102:22321] [client 85.203.23.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "aXFQ5Og4y1NKM4AgfjByJgAAANA"]
[Thu Jan 22 06:19:16.518007 2026] [:error] [pid 52447:tid 52514] [client 85.203.23.83:25517] [client 85.203.23.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aXFQ5HRLA2NsdGqJzotGTAAAAIU"]
[Thu Jan 22 06:19:16.889472 2026] [:error] [pid 52556:tid 52570] [client 85.203.23.92:35123] [client 85.203.23.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "aXFQ5Og4y1NKM4AgfjByKAAAAMw"]
[Thu Jan 22 06:19:17.254626 2026] [:error] [pid 52447:tid 52518] [client 85.203.23.65:56127] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "aXFQ5XRLA2NsdGqJzotGTwAAAIk"]
[Thu Jan 22 06:19:17.620030 2026] [:error] [pid 36083:tid 36105] [client 85.203.23.73:44125] [client 85.203.23.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/"] [unique_id "aXFQ5ZCng2nQoR5iqwqwdQAAAVM"]
[Thu Jan 22 06:19:17.983739 2026] [:error] [pid 52446:tid 52501] [client 85.203.23.88:31731] [client 85.203.23.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/column/"] [unique_id "aXFQ5bJ6clMw4kdrHYFXKAAAAFM"]
[Thu Jan 22 06:19:18.351151 2026] [:error] [pid 52447:tid 52511] [client 85.203.23.83:28799] [client 85.203.23.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aXFQ5nRLA2NsdGqJzotGVAAAAII"]
[Thu Jan 22 06:19:18.726981 2026] [:error] [pid 52445:tid 52462] [client 85.203.23.78:44883] [client 85.203.23.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/"] [unique_id "aXFQ5uvMmsFgpSSb5L2ThwAAAAg"]
[Thu Jan 22 06:19:19.088899 2026] [:error] [pid 52446:tid 52487] [client 85.203.23.83:27695] [client 85.203.23.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aXFQ57J6clMw4kdrHYFXKwAAAEU"]
[Thu Jan 22 06:19:19.448470 2026] [:error] [pid 52447:tid 52509] [client 85.203.23.66:23391] [client 85.203.23.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/"] [unique_id "aXFQ53RLA2NsdGqJzotGWgAAAIA"]
[Thu Jan 22 06:19:19.820159 2026] [:error] [pid 36083:tid 36102] [client 85.203.23.65:26765] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aXFQ55Cng2nQoR5iqwqweAAAAVA"]
[Thu Jan 22 06:19:25.191280 2026] [:error] [pid 27550:tid 27576] [client 85.203.23.87:30187] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aXFQ7eOQDPzfV5R2LYRGcQAAARg"]
[Thu Jan 22 06:19:25.556409 2026] [:error] [pid 52556:tid 52570] [client 85.203.23.84:58915] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aXFQ7eg4y1NKM4AgfjByMgAAAMw"]
[Thu Jan 22 06:19:25.923892 2026] [:error] [pid 52556:tid 52575] [client 85.203.23.57:53265] [client 85.203.23.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/"] [unique_id "aXFQ7eg4y1NKM4AgfjByMwAAANE"]
[Thu Jan 22 06:19:26.292216 2026] [:error] [pid 52447:tid 52519] [client 85.203.23.83:34809] [client 85.203.23.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/phpad/as.php"] [unique_id "aXFQ7nRLA2NsdGqJzotGZgAAAIo"]
[Thu Jan 22 06:19:26.661247 2026] [:error] [pid 27550:tid 27564] [client 85.203.23.92:35653] [client 85.203.23.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aXFQ7uOQDPzfV5R2LYRGdQAAAQw"]
[Thu Jan 22 06:19:27.051916 2026] [:error] [pid 27550:tid 27561] [client 85.203.23.100:35627] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content.php"] [unique_id "aXFQ7-OQDPzfV5R2LYRGdgAAAQk"]
[Thu Jan 22 06:19:27.422251 2026] [:error] [pid 52446:tid 52490] [client 85.203.23.84:28855] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/elementor/"] [unique_id "aXFQ77J6clMw4kdrHYFXNgAAAEg"]
[Thu Jan 22 06:19:27.799096 2026] [:error] [pid 52556:tid 52582] [client 85.203.23.62:24225] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXFQ7-g4y1NKM4AgfjByOgAAANg"]
[Thu Jan 22 06:19:28.177424 2026] [:error] [pid 52556:tid 52565] [client 85.203.23.82:64219] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/classwithtostring.php"] [unique_id "aXFQ8Og4y1NKM4AgfjByPgAAAMc"]
[Thu Jan 22 06:19:28.549087 2026] [:error] [pid 36083:tid 36107] [client 85.203.23.87:20211] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aXFQ8JCng2nQoR5iqwqwjQAAAVU"]
[Thu Jan 22 06:19:28.919709 2026] [:error] [pid 52556:tid 52567] [client 85.203.23.92:22985] [client 85.203.23.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-file.php"] [unique_id "aXFQ8Og4y1NKM4AgfjByPwAAAMk"]
[Thu Jan 22 06:19:29.291214 2026] [:error] [pid 27550:tid 27563] [client 85.203.23.73:55199] [client 85.203.23.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/"] [unique_id "aXFQ8eOQDPzfV5R2LYRGfAAAAQs"]
[Thu Jan 22 06:19:29.659640 2026] [:error] [pid 52556:tid 52568] [client 85.203.23.75:54459] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aXFQ8eg4y1NKM4AgfjByRAAAAMo"]
[Thu Jan 22 06:19:30.034391 2026] [:error] [pid 52447:tid 52514] [client 85.203.23.91:61633] [client 85.203.23.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tinyfilemanager.php"] [unique_id "aXFQ8nRLA2NsdGqJzotGbgAAAIU"]
[Thu Jan 22 06:19:30.407511 2026] [:error] [pid 52446:tid 52495] [client 85.203.23.76:48455] [client 85.203.23.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aXFQ8rJ6clMw4kdrHYFXPAAAAE0"]
[Thu Jan 22 06:19:30.776102 2026] [:error] [pid 27550:tid 27570] [client 85.203.23.106:20995] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aXFQ8uOQDPzfV5R2LYRGggAAARI"]
[Thu Jan 22 06:19:31.141735 2026] [:error] [pid 52556:tid 52574] [client 85.203.23.80:64161] [client 85.203.23.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/"] [unique_id "aXFQ8-g4y1NKM4AgfjBySQAAANA"]
[Thu Jan 22 06:19:31.515153 2026] [:error] [pid 27550:tid 27574] [client 85.203.23.74:43529] [client 85.203.23.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aXFQ8-OQDPzfV5R2LYRGhAAAARY"]
[Thu Jan 22 06:19:31.879713 2026] [:error] [pid 52447:tid 52525] [client 85.203.23.75:24567] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-domain.php"] [unique_id "aXFQ83RLA2NsdGqJzotGfAAAAJA"]
[Thu Jan 22 06:19:32.241874 2026] [:error] [pid 52447:tid 52511] [client 85.203.23.83:36543] [client 85.203.23.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aXFQ9HRLA2NsdGqJzotGfwAAAII"]
[Thu Jan 22 06:19:32.608140 2026] [:error] [pid 36083:tid 36106] [client 85.203.23.72:62037] [client 85.203.23.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aXFQ9JCng2nQoR5iqwqwkgAAAVQ"]
[Thu Jan 22 06:19:32.979730 2026] [:error] [pid 52556:tid 52576] [client 85.203.23.82:31761] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aXFQ9Og4y1NKM4AgfjBySgAAANI"]
[Thu Jan 22 06:19:33.351894 2026] [:error] [pid 52445:tid 52471] [client 85.203.23.55:49795] [client 85.203.23.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/admin/function.php"] [unique_id "aXFQ9evMmsFgpSSb5L2TnQAAABE"]
[Thu Jan 22 06:19:33.718033 2026] [:error] [pid 52445:tid 52454] [client 85.203.23.96:50053] [client 85.203.23.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyfive/styles/typography/"] [unique_id "aXFQ9evMmsFgpSSb5L2TnwAAAAA"]
[Thu Jan 22 06:19:34.088976 2026] [:error] [pid 52445:tid 52464] [client 85.203.23.98:40917] [client 85.203.23.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aXFQ9uvMmsFgpSSb5L2TogAAAAo"]
[Thu Jan 22 06:19:34.460005 2026] [:error] [pid 52445:tid 52461] [client 85.203.23.74:53231] [client 85.203.23.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wpforms/"] [unique_id "aXFQ9uvMmsFgpSSb5L2TpAAAAAc"]
[Thu Jan 22 06:19:34.825974 2026] [:error] [pid 52445:tid 52468] [client 85.203.23.69:45077] [client 85.203.23.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/twenty/function.php"] [unique_id "aXFQ9uvMmsFgpSSb5L2TpQAAAA4"]
[Thu Jan 22 06:19:40.200145 2026] [:error] [pid 36083:tid 36092] [client 85.203.23.68:63767] [client 85.203.23.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/cache/et/"] [unique_id "aXFQ_JCng2nQoR5iqwqwowAAAUY"]
[Thu Jan 22 06:19:40.561625 2026] [:error] [pid 52556:tid 52567] [client 85.203.23.61:42075] [client 85.203.23.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/"] [unique_id "aXFQ_Og4y1NKM4AgfjByVQAAAMk"]
[Thu Jan 22 06:19:40.931142 2026] [:error] [pid 52447:tid 52511] [client 85.203.23.61:22691] [client 85.203.23.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aXFQ_HRLA2NsdGqJzotGkgAAAII"]
[Thu Jan 22 06:19:41.304325 2026] [:error] [pid 52447:tid 52519] [client 85.203.23.63:41163] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "aXFQ_XRLA2NsdGqJzotGlwAAAIo"]
[Thu Jan 22 06:19:41.672959 2026] [:error] [pid 52556:tid 52561] [client 85.203.23.54:20533] [client 85.203.23.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "aXFQ_eg4y1NKM4AgfjByWgAAAMM"]
[Thu Jan 22 06:19:42.058483 2026] [:error] [pid 52445:tid 52463] [client 85.203.23.76:27473] [client 85.203.23.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "aXFQ_uvMmsFgpSSb5L2TsgAAAAk"]
[Thu Jan 22 06:19:42.428778 2026] [:error] [pid 27550:tid 27573] [client 85.203.23.88:30149] [client 85.203.23.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/z.php"] [unique_id "aXFQ_uOQDPzfV5R2LYRGjAAAARU"]
[Thu Jan 22 06:19:42.794801 2026] [:error] [pid 36083:tid 36095] [client 85.203.23.100:53921] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aXFQ_pCng2nQoR5iqwqwpwAAAUk"]
[Thu Jan 22 06:19:43.168695 2026] [:error] [pid 52446:tid 52483] [client 85.203.23.91:63657] [client 85.203.23.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-bindings/chosen.php"] [unique_id "aXFQ_7J6clMw4kdrHYFXUAAAAEE"]
[Thu Jan 22 06:19:43.538651 2026] [:error] [pid 27550:tid 27565] [client 85.203.23.73:27407] [client 85.203.23.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aXFQ_-OQDPzfV5R2LYRGjgAAAQ0"]
[Thu Jan 22 06:19:43.903393 2026] [:error] [pid 52447:tid 52513] [client 85.203.23.60:49459] [client 85.203.23.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aXFQ_3RLA2NsdGqJzotGnAAAAIQ"]
[Thu Jan 22 06:19:44.273493 2026] [:error] [pid 52447:tid 52531] [client 85.203.23.107:32273] [client 85.203.23.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/.well-known/"] [unique_id "aXFRAHRLA2NsdGqJzotGngAAAJY"]
[Thu Jan 22 06:19:44.633878 2026] [:error] [pid 27550:tid 27559] [client 85.203.23.76:44121] [client 85.203.23.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/chosen.php"] [unique_id "aXFRAOOQDPzfV5R2LYRGkQAAAQc"]
[Thu Jan 22 06:19:44.999231 2026] [:error] [pid 36083:tid 36096] [client 85.203.23.61:51863] [client 85.203.23.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/mediaelement/"] [unique_id "aXFRAJCng2nQoR5iqwqwqgAAAUo"]
[Thu Jan 22 06:19:45.364880 2026] [:error] [pid 27550:tid 27564] [client 85.203.23.59:27909] [client 85.203.23.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/dropdown.php"] [unique_id "aXFRAeOQDPzfV5R2LYRGkgAAAQw"]
[Thu Jan 22 06:19:45.747731 2026] [:error] [pid 52447:tid 52528] [client 85.203.23.66:28901] [client 85.203.23.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/m.php"] [unique_id "aXFRAXRLA2NsdGqJzotGoQAAAJM"]
[Thu Jan 22 06:19:46.116684 2026] [:error] [pid 27550:tid 27570] [client 85.203.23.58:21971] [client 85.203.23.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/img/fm.php"] [unique_id "aXFRAuOQDPzfV5R2LYRGlQAAARI"]
[Thu Jan 22 06:19:46.480687 2026] [:error] [pid 52556:tid 52571] [client 85.203.23.61:31071] [client 85.203.23.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comments-title/"] [unique_id "aXFRAug4y1NKM4AgfjByYQAAAM0"]
[Thu Jan 22 06:19:46.849973 2026] [:error] [pid 27550:tid 27572] [client 85.203.23.55:38837] [client 85.203.23.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/"] [unique_id "aXFRAuOQDPzfV5R2LYRGlwAAARQ"]
[Thu Jan 22 06:19:47.213269 2026] [:error] [pid 52447:tid 52522] [client 85.203.23.84:41957] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/edit.php"] [unique_id "aXFRA3RLA2NsdGqJzotGogAAAI0"]
[Thu Jan 22 06:19:47.583711 2026] [:error] [pid 52556:tid 52558] [client 85.203.23.75:20495] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/chosen.php"] [unique_id "aXFRA-g4y1NKM4AgfjByZAAAAMA"]
[Thu Jan 22 06:19:47.952987 2026] [:error] [pid 27550:tid 27569] [client 85.203.23.62:34039] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aXFRA-OQDPzfV5R2LYRGnAAAARE"]
[Thu Jan 22 06:19:48.319183 2026] [:error] [pid 27550:tid 27571] [client 85.203.23.88:53877] [client 85.203.23.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/chosen.php"] [unique_id "aXFRBOOQDPzfV5R2LYRGngAAARM"]
[Thu Jan 22 06:19:53.682028 2026] [:error] [pid 52445:tid 52454] [client 85.203.23.106:28655] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "aXFRCevMmsFgpSSb5L2TuwAAAAA"]
[Thu Jan 22 06:19:59.044703 2026] [:error] [pid 36083:tid 36110] [client 85.203.23.63:25931] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aXFRD5Cng2nQoR5iqwqwxgAAAVg"]
[Thu Jan 22 06:19:59.425266 2026] [:error] [pid 52447:tid 52531] [client 85.203.23.80:34069] [client 85.203.23.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aXFRD3RLA2NsdGqJzotGvgAAAJY"]
[Thu Jan 22 06:19:59.792334 2026] [:error] [pid 36083:tid 36094] [client 85.203.23.100:40161] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyfive/patterns/template-singl-portfolio.php"] [unique_id "aXFRD5Cng2nQoR5iqwqwyAAAAUg"]
[Thu Jan 22 06:20:00.160050 2026] [:error] [pid 52447:tid 52529] [client 85.203.23.90:64211] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/"] [unique_id "aXFREHRLA2NsdGqJzotGwAAAAJQ"]
[Thu Jan 22 06:20:00.529566 2026] [:error] [pid 52446:tid 52491] [client 85.203.23.80:21565] [client 85.203.23.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/database.php"] [unique_id "aXFRELJ6clMw4kdrHYFXcQAAAEk"]
[Thu Jan 22 06:20:00.918093 2026] [:error] [pid 36083:tid 36101] [client 85.203.23.102:40009] [client 85.203.23.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/vudel/list.php"] [unique_id "aXFREJCng2nQoR5iqwqwzAAAAU8"]
[Thu Jan 22 06:20:06.294717 2026] [:error] [pid 52445:tid 52457] [client 85.203.23.87:37959] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/hello-elementor/assets/css/lightbox.php"] [unique_id "aXFRFuvMmsFgpSSb5L2TzAAAAAM"]
[Thu Jan 22 06:20:06.661561 2026] [:error] [pid 52556:tid 52572] [client 85.203.23.94:27395] [client 85.203.23.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/advanced-custom-fields/includes/walkers/about.php"] [unique_id "aXFRFug4y1NKM4AgfjByewAAAM4"]
[Thu Jan 22 06:20:07.034419 2026] [:error] [pid 52447:tid 52513] [client 85.203.23.102:28001] [client 85.203.23.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/elementor/includes/controls/about.php"] [unique_id "aXFRF3RLA2NsdGqJzotGzgAAAIQ"]
[Thu Jan 22 06:20:07.427331 2026] [:error] [pid 52445:tid 52472] [client 85.203.23.69:38451] [client 85.203.23.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "aXFRF-vMmsFgpSSb5L2TzwAAABI"]
[Thu Jan 22 06:20:12.798647 2026] [:error] [pid 52446:tid 52484] [client 85.203.23.67:37777] [client 85.203.23.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "aXFRHLJ6clMw4kdrHYFXeQAAAEI"]
[Thu Jan 22 06:20:13.161740 2026] [:error] [pid 36083:tid 36091] [client 85.203.23.82:50069] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "aXFRHZCng2nQoR5iqwqw6gAAAUU"]
[Thu Jan 22 06:20:13.547885 2026] [:error] [pid 27550:tid 27560] [client 85.203.23.57:64393] [client 85.203.23.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aXFRHeOQDPzfV5R2LYRGvgAAAQg"]
[Thu Jan 22 06:20:13.916447 2026] [:error] [pid 52447:tid 52528] [client 85.203.23.77:37661] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/library/SimplePie/Content/Type/222.php"] [unique_id "aXFRHXRLA2NsdGqJzotG3QAAAJM"]
[Thu Jan 22 06:20:14.288475 2026] [:error] [pid 52445:tid 52460] [client 85.203.23.102:63093] [client 85.203.23.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/man.php"] [unique_id "aXFRHuvMmsFgpSSb5L2T1wAAAAY"]
[Thu Jan 22 06:20:14.651428 2026] [:error] [pid 52446:tid 52493] [client 85.203.23.107:52995] [client 85.203.23.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/zoom1.php"] [unique_id "aXFRHrJ6clMw4kdrHYFXfQAAAEs"]
[Thu Jan 22 06:20:15.023183 2026] [:error] [pid 52447:tid 52521] [client 85.203.23.94:39329] [client 85.203.23.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/astra/inc/compatibility/lifterlms/customizer/sections/"] [unique_id "aXFRH3RLA2NsdGqJzotG4QAAAIw"]
[Thu Jan 22 06:20:15.389264 2026] [:error] [pid 52447:tid 52518] [client 85.203.23.55:28829] [client 85.203.23.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/astra/inc/customizer/custom-controls/assets/js/unminified/"] [unique_id "aXFRH3RLA2NsdGqJzotG4wAAAIk"]
[Thu Jan 22 06:20:20.775873 2026] [:error] [pid 52556:tid 52582] [client 85.203.23.86:59425] [client 85.203.23.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/astra/assets/js/"] [unique_id "aXFRJOg4y1NKM4AgfjBynQAAANg"]
[Thu Jan 22 06:20:21.141663 2026] [:error] [pid 52447:tid 52516] [client 85.203.23.69:33885] [client 85.203.23.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/astra-addon/"] [unique_id "aXFRJXRLA2NsdGqJzotG_QAAAIc"]
[Thu Jan 22 06:20:21.502047 2026] [:error] [pid 52445:tid 52468] [client 85.203.23.67:46649] [client 85.203.23.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/wp-mails.php"] [unique_id "aXFRJevMmsFgpSSb5L2T3gAAAA4"]
[Thu Jan 22 06:20:21.864565 2026] [:error] [pid 27550:tid 27564] [client 85.203.23.69:40453] [client 85.203.23.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/new.php"] [unique_id "aXFRJeOQDPzfV5R2LYRG-gAAAQw"]
[Thu Jan 22 06:20:22.225412 2026] [:error] [pid 27550:tid 27561] [client 85.203.23.75:63815] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/group/"] [unique_id "aXFRJuOQDPzfV5R2LYRG-wAAAQk"]
[Thu Jan 22 06:20:22.588342 2026] [:error] [pid 27550:tid 27569] [client 85.203.23.73:59395] [client 85.203.23.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/plugins/js/crd/admin.php"] [unique_id "aXFRJuOQDPzfV5R2LYRG_QAAARE"]
[Thu Jan 22 06:20:22.951227 2026] [:error] [pid 27550:tid 27552] [client 85.203.23.75:41147] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyfour/uploads/isc/"] [unique_id "aXFRJuOQDPzfV5R2LYRG_wAAAQA"]
[Thu Jan 22 06:20:23.336823 2026] [:error] [pid 52447:tid 52510] [client 85.203.23.62:47771] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/thickbox/img/docs/includes/data/tmp/klo/aawl/"] [unique_id "aXFRJ3RLA2NsdGqJzotHAwAAAIE"]
[Thu Jan 22 06:20:23.702142 2026] [:error] [pid 52445:tid 52473] [client 85.203.23.72:61621] [client 85.203.23.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/wp-pridmag/load.php"] [unique_id "aXFRJ-vMmsFgpSSb5L2T4gAAABM"]
[Thu Jan 22 06:20:24.074640 2026] [:error] [pid 52556:tid 52566] [client 85.203.23.89:22441] [client 85.203.23.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-supports/"] [unique_id "aXFRKOg4y1NKM4AgfjBypgAAAMg"]
[Thu Jan 22 06:20:24.440283 2026] [:error] [pid 52445:tid 52476] [client 85.203.23.92:25591] [client 85.203.23.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/social-links/"] [unique_id "aXFRKOvMmsFgpSSb5L2T5wAAABY"]
[Thu Jan 22 06:20:24.803351 2026] [:error] [pid 52447:tid 52515] [client 85.203.23.91:53121] [client 85.203.23.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "aXFRKHRLA2NsdGqJzotHBQAAAIY"]
[Thu Jan 22 06:20:25.165787 2026] [:error] [pid 52447:tid 52516] [client 85.203.23.72:28181] [client 85.203.23.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/list/"] [unique_id "aXFRKXRLA2NsdGqJzotHBgAAAIc"]
[Thu Jan 22 06:20:25.545824 2026] [:error] [pid 52556:tid 52573] [client 85.203.23.96:35359] [client 85.203.23.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/tag-cloud/"] [unique_id "aXFRKeg4y1NKM4AgfjByqQAAAM8"]
[Thu Jan 22 06:20:25.914191 2026] [:error] [pid 52446:tid 52505] [client 85.203.23.100:42083] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/audio/go.php"] [unique_id "aXFRKbJ6clMw4kdrHYFXlgAAAFc"]
[Thu Jan 22 06:20:26.283876 2026] [:error] [pid 27550:tid 27572] [client 85.203.23.75:55025] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/imagess.php"] [unique_id "aXFRKuOQDPzfV5R2LYRHAgAAARQ"]
[Thu Jan 22 06:20:26.665959 2026] [:error] [pid 52556:tid 52558] [client 85.203.23.54:64363] [client 85.203.23.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/network/imagess.php"] [unique_id "aXFRKug4y1NKM4AgfjByrQAAAMA"]
[Thu Jan 22 06:20:32.042195 2026] [:error] [pid 52447:tid 52525] [client 85.203.23.94:54491] [client 85.203.23.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/go.php"] [unique_id "aXFRMHRLA2NsdGqJzotHHgAAAJA"]
[Thu Jan 22 06:20:32.406212 2026] [:error] [pid 52447:tid 52522] [client 85.203.23.69:48049] [client 85.203.23.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/huan.php"] [unique_id "aXFRMHRLA2NsdGqJzotHIgAAAI0"]
[Thu Jan 22 06:20:32.791879 2026] [:error] [pid 52447:tid 52521] [client 85.203.23.87:27537] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aXFRMHRLA2NsdGqJzotHJAAAAIw"]
[Thu Jan 22 06:20:33.153940 2026] [:error] [pid 36083:tid 36101] [client 85.203.23.97:46767] [client 85.203.23.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aXFRMZCng2nQoR5iqwqxSwAAAU8"]
[Thu Jan 22 06:20:43.537366 2026] [:error] [pid 27550:tid 27557] [client 85.203.23.68:57517] [client 85.203.23.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/loarrfh/"] [unique_id "aXFRO-OQDPzfV5R2LYRHKQAAAQU"]
[Thu Jan 22 06:20:43.911732 2026] [:error] [pid 27550:tid 27571] [client 85.203.23.72:62247] [client 85.203.23.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/foogallery/foogallery.php"] [unique_id "aXFRO-OQDPzfV5R2LYRHLgAAARM"]
[Thu Jan 22 06:20:44.285813 2026] [:error] [pid 27550:tid 27576] [client 85.203.23.77:50457] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/404-solution/404-solution.php"] [unique_id "aXFRPOOQDPzfV5R2LYRHMAAAARg"]
[Thu Jan 22 06:20:44.656621 2026] [:error] [pid 52446:tid 52503] [client 85.203.23.62:38481] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/duplicator/src/moon.php"] [unique_id "aXFRPLJ6clMw4kdrHYFXtAAAAFU"]
[Thu Jan 22 06:20:45.049853 2026] [:error] [pid 52446:tid 52498] [client 85.203.23.100:34421] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/admin-menu-search/admin-menu-search.php"] [unique_id "aXFRPbJ6clMw4kdrHYFXuAAAAFA"]
[Thu Jan 22 06:20:45.414920 2026] [:error] [pid 52445:tid 52465] [client 85.203.23.72:58511] [client 85.203.23.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/admin-site-enhancements/admin-site-enhancements.php"] [unique_id "aXFRPevMmsFgpSSb5L2UCQAAAAs"]
[Thu Jan 22 06:20:45.777852 2026] [:error] [pid 52446:tid 52484] [client 85.203.23.74:46903] [client 85.203.23.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/members/members.php"] [unique_id "aXFRPbJ6clMw4kdrHYFXvAAAAEI"]
[Thu Jan 22 06:20:46.206505 2026] [:error] [pid 36083:tid 36089] [client 85.203.23.63:63325] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/performance-lab/load.php"] [unique_id "aXFRPpCng2nQoR5iqwqxVAAAAUM"]
[Thu Jan 22 06:20:46.568600 2026] [:error] [pid 52446:tid 52492] [client 85.203.23.84:52775] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/performance-lab/includes/admin/tags.php"] [unique_id "aXFRPrJ6clMw4kdrHYFXwAAAAEo"]
[Thu Jan 22 06:20:51.942772 2026] [:error] [pid 36083:tid 36105] [client 85.203.23.69:59509] [client 85.203.23.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/fitnessbase/inc/customizer/al.php"] [unique_id "aXFRQ5Cng2nQoR5iqwqxYwAAAVM"]
[Thu Jan 22 06:20:52.304650 2026] [:error] [pid 27550:tid 27569] [client 85.203.23.95:49697] [client 85.203.23.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aXFRROOQDPzfV5R2LYRHPAAAARE"]
[Thu Jan 22 06:20:52.673435 2026] [:error] [pid 52447:tid 52525] [client 85.203.23.78:45757] [client 85.203.23.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/hello-elementor/new.php"] [unique_id "aXFRRHRLA2NsdGqJzotHSgAAAJA"]
[Thu Jan 22 06:20:53.035942 2026] [:error] [pid 36083:tid 36100] [client 85.203.23.80:23083] [client 85.203.23.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aXFRRZCng2nQoR5iqwqxZwAAAU4"]
[Thu Jan 22 06:20:53.407649 2026] [:error] [pid 52556:tid 52580] [client 85.203.23.70:64223] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aXFRReg4y1NKM4AgfjByygAAANY"]
[Thu Jan 22 06:20:53.791490 2026] [:error] [pid 52447:tid 52522] [client 85.203.23.85:25645] [client 85.203.23.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/new.php"] [unique_id "aXFRRXRLA2NsdGqJzotHSwAAAI0"]
[Thu Jan 22 06:20:54.158634 2026] [:error] [pid 52446:tid 52485] [client 85.203.23.91:27215] [client 85.203.23.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/Iitespeed-cache/zczv.php"] [unique_id "aXFRRrJ6clMw4kdrHYFXzQAAAEM"]
[Thu Jan 22 06:20:54.541008 2026] [:error] [pid 52556:tid 52579] [client 85.203.23.84:53423] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/woocommerce_uploads/about.php"] [unique_id "aXFRRug4y1NKM4AgfjByzAAAANU"]
[Thu Jan 22 06:20:54.908182 2026] [:error] [pid 36083:tid 36107] [client 85.203.23.88:53687] [client 85.203.23.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/carousel-slider/templates/loop/classwithtostring.php"] [unique_id "aXFRRpCng2nQoR5iqwqxaQAAAVU"]
[Thu Jan 22 06:20:55.271715 2026] [:error] [pid 52556:tid 52563] [client 85.203.23.80:62163] [client 85.203.23.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/adca.php"] [unique_id "aXFRR-g4y1NKM4AgfjByzQAAAMU"]
[Thu Jan 22 06:20:55.708911 2026] [:error] [pid 36083:tid 36094] [client 85.203.23.95:64611] [client 85.203.23.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/maintenance/bolt.php"] [unique_id "aXFRR5Cng2nQoR5iqwqxawAAAUg"]
[Thu Jan 22 06:20:56.074377 2026] [:error] [pid 52447:tid 52511] [client 85.203.23.56:58437] [client 85.203.23.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/widgets/html-api/about.php"] [unique_id "aXFRSHRLA2NsdGqJzotHTQAAAII"]
[Thu Jan 22 06:20:56.445388 2026] [:error] [pid 52447:tid 52514] [client 85.203.23.88:40755] [client 85.203.23.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/interactivity-api/"] [unique_id "aXFRSHRLA2NsdGqJzotHTgAAAIU"]
[Thu Jan 22 06:20:56.815296 2026] [:error] [pid 52447:tid 52523] [client 85.203.23.81:42351] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/siteorigin-panels/"] [unique_id "aXFRSHRLA2NsdGqJzotHTwAAAI4"]
[Thu Jan 22 06:20:57.188202 2026] [:error] [pid 52447:tid 52528] [client 85.203.23.86:43055] [client 85.203.23.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/includes/nav-menu-trigger.php"] [unique_id "aXFRSXRLA2NsdGqJzotHUQAAAJM"]
[Thu Jan 22 06:20:57.554606 2026] [:error] [pid 27550:tid 27575] [client 85.203.23.98:35393] [client 85.203.23.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aXFRSeOQDPzfV5R2LYRHQgAAARc"]
[Thu Jan 22 06:20:57.924883 2026] [:error] [pid 52447:tid 52519] [client 85.203.23.69:58459] [client 85.203.23.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/hello-elementor/assets/"] [unique_id "aXFRSXRLA2NsdGqJzotHVgAAAIo"]
[Thu Jan 22 06:20:58.286921 2026] [:error] [pid 27550:tid 27565] [client 85.203.23.68:31921] [client 85.203.23.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-author/"] [unique_id "aXFRSuOQDPzfV5R2LYRHRAAAAQ0"]
[Thu Jan 22 06:20:58.658002 2026] [:error] [pid 52446:tid 52487] [client 85.203.23.60:33491] [client 85.203.23.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "aXFRSrJ6clMw4kdrHYFX0gAAAEU"]
[Thu Jan 22 06:20:59.021529 2026] [:error] [pid 36083:tid 36098] [client 85.203.23.84:20913] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aXFRS5Cng2nQoR5iqwqxbQAAAUw"]
[Thu Jan 22 06:20:59.393098 2026] [:error] [pid 52446:tid 52499] [client 85.203.23.80:51431] [client 85.203.23.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-template/lock.php"] [unique_id "aXFRS7J6clMw4kdrHYFX0wAAAFE"]
[Thu Jan 22 06:20:59.858659 2026] [:error] [pid 52447:tid 52528] [client 85.203.23.70:62473] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/components/style-rtl.min_42.php"] [unique_id "aXFRS3RLA2NsdGqJzotHXgAAAJM"]
[Thu Jan 22 06:21:05.225795 2026] [:error] [pid 52445:tid 52457] [client 85.203.23.98:58101] [client 85.203.23.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Credit_74.php"] [unique_id "aXFRUevMmsFgpSSb5L2UKQAAAAM"]
[Thu Jan 22 06:21:05.595483 2026] [:error] [pid 36083:tid 36108] [client 85.203.23.91:50609] [client 85.203.23.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/akismet/_40.php"] [unique_id "aXFRUZCng2nQoR5iqwqxcgAAAVY"]
[Thu Jan 22 06:21:05.969191 2026] [:error] [pid 52447:tid 52517] [client 85.203.23.77:53981] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/coffee/colors_26.php"] [unique_id "aXFRUXRLA2NsdGqJzotHaQAAAIg"]
[Thu Jan 22 06:21:06.341151 2026] [:error] [pid 27550:tid 27576] [client 85.203.23.55:58223] [client 85.203.23.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/wp-conflg.php"] [unique_id "aXFRUuOQDPzfV5R2LYRHUAAAARg"]
[Thu Jan 22 06:21:06.709168 2026] [:error] [pid 36083:tid 36098] [client 85.203.23.100:24261] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aXFRUpCng2nQoR5iqwqxdQAAAUw"]
[Thu Jan 22 06:21:07.085008 2026] [:error] [pid 27550:tid 27561] [client 85.203.23.88:43185] [client 85.203.23.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aXFRU-OQDPzfV5R2LYRHUwAAAQk"]
[Thu Jan 22 06:21:07.454609 2026] [:error] [pid 52556:tid 52559] [client 85.203.23.97:36471] [client 85.203.23.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/video/"] [unique_id "aXFRU-g4y1NKM4AgfjBy1AAAAME"]
[Thu Jan 22 06:21:07.815022 2026] [:error] [pid 27550:tid 27568] [client 85.203.23.69:41021] [client 85.203.23.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/edit-widgets/"] [unique_id "aXFRU-OQDPzfV5R2LYRHVwAAARA"]
[Thu Jan 22 06:21:08.180839 2026] [:error] [pid 27550:tid 27566] [client 85.203.23.58:46885] [client 85.203.23.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aXFRVOOQDPzfV5R2LYRHWAAAAQ4"]
[Thu Jan 22 06:21:08.545235 2026] [:error] [pid 27550:tid 27552] [client 85.203.23.76:64949] [client 85.203.23.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/widgets/classwithtostring.php"] [unique_id "aXFRVOOQDPzfV5R2LYRHWQAAAQA"]
[Thu Jan 22 06:21:08.922663 2026] [:error] [pid 52447:tid 52525] [client 85.203.23.62:23645] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/theme-editor-class.php"] [unique_id "aXFRVHRLA2NsdGqJzotHbAAAAJA"]
[Thu Jan 22 06:21:09.302052 2026] [:error] [pid 36083:tid 36091] [client 85.203.23.94:27655] [client 85.203.23.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/LayerSlider/assets/static/codemirror/addon/hint/about.php"] [unique_id "aXFRVZCng2nQoR5iqwqxgQAAAUU"]
[Thu Jan 22 06:21:09.664025 2026] [:error] [pid 27550:tid 27562] [client 85.203.23.93:48525] [client 85.203.23.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/LayerSlider/assets/static/layerslider/skins/carousel/about.php"] [unique_id "aXFRVeOQDPzfV5R2LYRHWwAAAQo"]
[Thu Jan 22 06:21:10.055280 2026] [:error] [pid 36083:tid 36107] [client 85.203.23.88:20843] [client 85.203.23.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/fusion-core/css/about.php"] [unique_id "aXFRVpCng2nQoR5iqwqxgwAAAVU"]
[Thu Jan 22 06:21:10.417666 2026] [:error] [pid 52556:tid 52567] [client 85.203.23.73:20209] [client 85.203.23.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/themely/img/about.php"] [unique_id "aXFRVug4y1NKM4AgfjBy1wAAAMk"]
[Thu Jan 22 06:21:10.791734 2026] [:error] [pid 52556:tid 52577] [client 85.203.23.85:20573] [client 85.203.23.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/page-list-item/lock.php"] [unique_id "aXFRVug4y1NKM4AgfjBy2AAAANM"]
[Thu Jan 22 06:21:11.162663 2026] [:error] [pid 27550:tid 27565] [client 85.203.23.84:26261] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/amp/vendor/ampproject/amp-toolbox/src/Validator/Spec/DescendantTagList/HeaRk.php"] [unique_id "aXFRV-OQDPzfV5R2LYRHXwAAAQ0"]
[Thu Jan 22 06:21:11.533495 2026] [:error] [pid 52556:tid 52575] [client 85.203.23.82:27799] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/sql.php"] [unique_id "aXFRV-g4y1NKM4AgfjBy2QAAANE"]
[Thu Jan 22 06:21:11.892945 2026] [:error] [pid 52447:tid 52527] [client 85.203.23.107:41433] [client 85.203.23.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/chosen.php"] [unique_id "aXFRV3RLA2NsdGqJzotHcQAAAJI"]
[Thu Jan 22 06:21:12.263741 2026] [:error] [pid 52447:tid 52511] [client 85.203.23.68:56021] [client 85.203.23.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/prayer_intentions.php"] [unique_id "aXFRWHRLA2NsdGqJzotHcgAAAII"]
[Thu Jan 22 06:21:12.625176 2026] [:error] [pid 52447:tid 52516] [client 85.203.23.72:24039] [client 85.203.23.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/images/data.php"] [unique_id "aXFRWHRLA2NsdGqJzotHcwAAAIc"]
[Thu Jan 22 06:21:12.992558 2026] [:error] [pid 27550:tid 27563] [client 85.203.23.75:44765] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aXFRWOOQDPzfV5R2LYRHYgAAAQs"]
[Thu Jan 22 06:21:13.354967 2026] [:error] [pid 36083:tid 36093] [client 85.203.23.63:62723] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-supports/admin.php"] [unique_id "aXFRWZCng2nQoR5iqwqxigAAAUc"]
[Thu Jan 22 06:21:13.719566 2026] [:error] [pid 52447:tid 52533] [client 85.203.23.97:20795] [client 85.203.23.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/lib/v3/dist/build/build/cache.php"] [unique_id "aXFRWXRLA2NsdGqJzotHdQAAAJg"]
[Thu Jan 22 06:21:14.090732 2026] [:error] [pid 52447:tid 52515] [client 85.203.23.88:53211] [client 85.203.23.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/post-views-counter/"] [unique_id "aXFRWnRLA2NsdGqJzotHdwAAAIY"]
[Thu Jan 22 06:21:14.494822 2026] [:error] [pid 52447:tid 52522] [client 85.203.23.100:51517] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/media/dwv/admin.php"] [unique_id "aXFRWnRLA2NsdGqJzotHeQAAAI0"]
[Thu Jan 22 06:21:14.865330 2026] [:error] [pid 52447:tid 52510] [client 85.203.23.65:22995] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/zoom1.php"] [unique_id "aXFRWnRLA2NsdGqJzotHfAAAAIE"]
[Thu Jan 22 06:21:15.235641 2026] [:error] [pid 52447:tid 52523] [client 85.203.23.56:61001] [client 85.203.23.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/fonts/roboto/wp-admins.php"] [unique_id "aXFRW3RLA2NsdGqJzotHfgAAAI4"]
[Thu Jan 22 06:21:15.611735 2026] [:error] [pid 52447:tid 52516] [client 85.203.23.65:45535] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/flatsome/wp-kgg.php"] [unique_id "aXFRW3RLA2NsdGqJzotHgQAAAIc"]
[Thu Jan 22 06:21:15.986531 2026] [:error] [pid 52447:tid 52528] [client 85.203.23.55:34695] [client 85.203.23.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/news-portal/wp-admins.php"] [unique_id "aXFRW3RLA2NsdGqJzotHgwAAAJM"]
[Thu Jan 22 06:21:16.347746 2026] [:error] [pid 27550:tid 27557] [client 85.203.23.62:65137] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "aXFRXOOQDPzfV5R2LYRHZAAAAQU"]
[Thu Jan 22 06:21:16.708161 2026] [:error] [pid 27550:tid 27570] [client 85.203.23.77:46081] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/commands/"] [unique_id "aXFRXOOQDPzfV5R2LYRHZQAAARI"]
[Thu Jan 22 06:21:17.086501 2026] [:error] [pid 27550:tid 27572] [client 85.203.23.58:63423] [client 85.203.23.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/buy.php"] [unique_id "aXFRXeOQDPzfV5R2LYRHZwAAARQ"]
[Thu Jan 22 06:21:17.452931 2026] [:error] [pid 27550:tid 27569] [client 85.203.23.107:25255] [client 85.203.23.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/spacious-pro/js/theia-sticky-sidebar/"] [unique_id "aXFRXeOQDPzfV5R2LYRHaQAAARE"]
[Thu Jan 22 06:21:17.818766 2026] [:error] [pid 36083:tid 36096] [client 85.203.23.80:50751] [client 85.203.23.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/zxasd.php"] [unique_id "aXFRXZCng2nQoR5iqwqxjAAAAUo"]
[Thu Jan 22 06:21:18.186285 2026] [:error] [pid 52556:tid 52566] [client 85.203.23.107:25909] [client 85.203.23.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/database.php"] [unique_id "aXFRXug4y1NKM4AgfjBy5AAAAMg"]
[Thu Jan 22 06:21:18.555680 2026] [:error] [pid 27550:tid 27562] [client 85.203.23.88:27851] [client 85.203.23.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/sql.php"] [unique_id "aXFRXuOQDPzfV5R2LYRHbQAAAQo"]
[Thu Jan 22 06:21:18.921831 2026] [:error] [pid 27550:tid 27558] [client 85.203.23.83:57949] [client 85.203.23.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/ty.php"] [unique_id "aXFRXuOQDPzfV5R2LYRHcAAAAQY"]
[Thu Jan 22 06:21:19.292048 2026] [:error] [pid 36083:tid 36107] [client 85.203.23.104:30517] [client 85.203.23.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/ty.php"] [unique_id "aXFRX5Cng2nQoR5iqwqxkgAAAVU"]
[Thu Jan 22 06:21:19.658257 2026] [:error] [pid 36083:tid 36102] [client 85.203.23.65:57257] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/ty.php"] [unique_id "aXFRX5Cng2nQoR5iqwqxlgAAAVA"]
[Thu Jan 22 06:21:20.039076 2026] [:error] [pid 52556:tid 52573] [client 85.203.23.106:33069] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/a1cord.php"] [unique_id "aXFRYOg4y1NKM4AgfjBy5gAAAM8"]
[Thu Jan 22 06:21:20.401660 2026] [:error] [pid 36083:tid 36103] [client 85.203.23.89:57079] [client 85.203.23.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comment-edit-link/"] [unique_id "aXFRYJCng2nQoR5iqwqxnAAAAVE"]
[Thu Jan 22 06:21:20.772067 2026] [:error] [pid 52446:tid 52502] [client 85.203.23.90:51795] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/xex.php"] [unique_id "aXFRYLJ6clMw4kdrHYFX1gAAAFQ"]
[Thu Jan 22 06:21:21.149736 2026] [:error] [pid 52447:tid 52510] [client 85.203.23.81:39723] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/edit-wolf.php"] [unique_id "aXFRYXRLA2NsdGqJzotHkgAAAIE"]
[Thu Jan 22 06:21:21.524784 2026] [:error] [pid 52447:tid 52512] [client 85.203.23.91:33433] [client 85.203.23.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp_helper_bimfl/shell.php"] [unique_id "aXFRYXRLA2NsdGqJzotHlAAAAIM"]
[Thu Jan 22 06:21:21.899843 2026] [:error] [pid 52447:tid 52525] [client 85.203.23.59:26591] [client 85.203.23.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp_helper_avcdl/shell.php"] [unique_id "aXFRYXRLA2NsdGqJzotHlwAAAJA"]
[Thu Jan 22 06:21:22.268971 2026] [:error] [pid 52447:tid 52520] [client 85.203.23.61:61041] [client 85.203.23.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp_helper_rrvvo/shell.php"] [unique_id "aXFRYnRLA2NsdGqJzotHmQAAAIs"]
[Thu Jan 22 06:21:22.641607 2026] [:error] [pid 52447:tid 52516] [client 85.203.23.56:64421] [client 85.203.23.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/contact-form-7/wp-contact-form-7.php"] [unique_id "aXFRYnRLA2NsdGqJzotHnAAAAIc"]
[Thu Jan 22 06:21:23.022626 2026] [:error] [pid 52447:tid 52515] [client 85.203.23.107:26323] [client 85.203.23.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/wp_theme_ahewl/shell.php"] [unique_id "aXFRY3RLA2NsdGqJzotHngAAAIY"]
[Thu Jan 22 06:21:28.384622 2026] [:error] [pid 52447:tid 52513] [client 85.203.23.81:36053] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jcrop/"] [unique_id "aXFRaHRLA2NsdGqJzotHoQAAAIQ"]
[Thu Jan 22 06:21:28.758915 2026] [:error] [pid 27550:tid 27564] [client 85.203.23.97:31551] [client 85.203.23.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/tx20.php"] [unique_id "aXFRaOOQDPzfV5R2LYRHfAAAAQw"]
[Thu Jan 22 06:21:29.125680 2026] [:error] [pid 52445:tid 52460] [client 85.203.23.98:25321] [client 85.203.23.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ah22.php"] [unique_id "aXFRaevMmsFgpSSb5L2UQAAAAAY"]
[Thu Jan 22 06:21:29.488965 2026] [:error] [pid 52447:tid 52512] [client 85.203.23.59:56965] [client 85.203.23.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/ooo.php"] [unique_id "aXFRaXRLA2NsdGqJzotHpQAAAIM"]
[Thu Jan 22 06:21:34.863350 2026] [:error] [pid 52556:tid 52560] [client 85.203.23.62:26791] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/midnight/resources/dist/includes/img/alw/"] [unique_id "aXFRbug4y1NKM4AgfjBzHAAAAMI"]
[Thu Jan 22 06:21:35.225498 2026] [:error] [pid 52445:tid 52464] [client 85.203.23.81:35559] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/widgets/cache/assets/v3/v3/files/akami/admin.php"] [unique_id "aXFRb-vMmsFgpSSb5L2UawAAAAo"]
[Thu Jan 22 06:21:35.597814 2026] [:error] [pid 36083:tid 36093] [client 85.203.23.84:52443] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/datate.php"] [unique_id "aXFRb5Cng2nQoR5iqwqxvgAAAUc"]
[Thu Jan 22 06:21:35.986447 2026] [:error] [pid 36083:tid 36086] [client 85.203.23.100:20867] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/chosen.php"] [unique_id "aXFRb5Cng2nQoR5iqwqxwAAAAUA"]
[Thu Jan 22 06:21:36.350289 2026] [:error] [pid 52446:tid 52505] [client 85.203.23.66:34501] [client 85.203.23.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/autoload_classmap.php"] [unique_id "aXFRcLJ6clMw4kdrHYFYagAAAFc"]
[Thu Jan 22 06:21:36.720458 2026] [:error] [pid 52446:tid 52504] [client 85.203.23.87:29849] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/call-now-button/admin.php"] [unique_id "aXFRcLJ6clMw4kdrHYFYdAAAAFY"]
[Thu Jan 22 06:21:37.090990 2026] [:error] [pid 36083:tid 36091] [client 85.203.23.102:20827] [client 85.203.23.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/rank-math/mmm.php"] [unique_id "aXFRcZCng2nQoR5iqwqxwwAAAUU"]
[Thu Jan 22 06:21:37.459681 2026] [:error] [pid 52447:tid 52519] [client 85.203.23.57:24417] [client 85.203.23.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/maintenance/assets/mmm.php"] [unique_id "aXFRcXRLA2NsdGqJzotHtwAAAIo"]
[Thu Jan 22 06:21:37.824372 2026] [:error] [pid 27550:tid 27571] [client 85.203.23.56:63197] [client 85.203.23.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/menu.php"] [unique_id "aXFRceOQDPzfV5R2LYRHigAAARM"]
[Thu Jan 22 06:21:38.195779 2026] [:error] [pid 52445:tid 52466] [client 85.203.23.67:29729] [client 85.203.23.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/crop/menu.php"] [unique_id "aXFRcuvMmsFgpSSb5L2UcAAAAAw"]
[Thu Jan 22 06:21:38.563736 2026] [:error] [pid 36083:tid 36101] [client 85.203.23.72:32145] [client 85.203.23.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/todpIbcm.php"] [unique_id "aXFRcpCng2nQoR5iqwqxxQAAAU8"]
[Thu Jan 22 06:21:38.934002 2026] [:error] [pid 27550:tid 27569] [client 85.203.23.73:46315] [client 85.203.23.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/mah/function.php"] [unique_id "aXFRcuOQDPzfV5R2LYRHjAAAARE"]
[Thu Jan 22 06:21:39.295433 2026] [:error] [pid 52447:tid 52512] [client 85.203.23.98:53127] [client 85.203.23.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aXFRc3RLA2NsdGqJzotHuQAAAIM"]
[Thu Jan 22 06:21:41.096030 2026] [:error] [pid 52446:tid 52491] [client 85.203.23.60:52199] [client 85.203.23.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/about/autoload_classmap.php"] [unique_id "aXFRdbJ6clMw4kdrHYFYeQAAAEk"]
[Thu Jan 22 06:21:41.457495 2026] [:error] [pid 52447:tid 52513] [client 85.203.23.97:40655] [client 85.203.23.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/new/update/chosen.php"] [unique_id "aXFRdXRLA2NsdGqJzotHvgAAAIQ"]
[Thu Jan 22 06:21:41.823945 2026] [:error] [pid 52447:tid 52527] [client 85.203.23.93:64321] [client 85.203.23.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/new/wp-2019.php"] [unique_id "aXFRdXRLA2NsdGqJzotHvwAAAJI"]
[Thu Jan 22 06:21:42.198796 2026] [:error] [pid 52446:tid 52503] [client 85.203.23.86:45759] [client 85.203.23.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-2019.php"] [unique_id "aXFRdrJ6clMw4kdrHYFYegAAAFU"]
[Thu Jan 22 06:21:47.566208 2026] [:error] [pid 36083:tid 36093] [client 85.203.23.87:55611] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/as/classwithtostring.php"] [unique_id "aXFRe5Cng2nQoR5iqwqx0gAAAUc"]
[Thu Jan 22 06:21:47.928890 2026] [:error] [pid 36083:tid 36088] [client 85.203.23.60:64577] [client 85.203.23.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-rocket-config/V.php"] [unique_id "aXFRe5Cng2nQoR5iqwqx1AAAAUI"]
[Thu Jan 22 06:21:48.320387 2026] [:error] [pid 52556:tid 52567] [client 85.203.23.90:48829] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-patterns/wp-conflg.php"] [unique_id "aXFRfOg4y1NKM4AgfjBzPAAAAMk"]
[Thu Jan 22 06:21:48.690072 2026] [:error] [pid 36083:tid 36089] [client 85.203.23.84:62751] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/freeform/"] [unique_id "aXFRfJCng2nQoR5iqwqx1QAAAUM"]
[Thu Jan 22 06:21:49.065334 2026] [:error] [pid 36083:tid 36099] [client 85.203.23.83:51839] [client 85.203.23.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/html-api/autoload_classmap.php"] [unique_id "aXFRfZCng2nQoR5iqwqx1gAAAU0"]
[Thu Jan 22 06:21:49.430439 2026] [:error] [pid 27550:tid 27564] [client 85.203.23.106:24477] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/v.php"] [unique_id "aXFRfeOQDPzfV5R2LYRHjwAAAQw"]
[Thu Jan 22 06:21:49.800831 2026] [:error] [pid 52446:tid 52497] [client 85.203.23.65:21111] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/network/chosen.php"] [unique_id "aXFRfbJ6clMw4kdrHYFYfgAAAE8"]
[Thu Jan 22 06:21:50.186398 2026] [:error] [pid 52556:tid 52574] [client 85.203.23.90:40519] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentythree/templates/"] [unique_id "aXFRfug4y1NKM4AgfjBzPwAAANA"]
[Thu Jan 22 06:21:55.555930 2026] [:error] [pid 52446:tid 52502] [client 85.203.23.90:36203] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/separator/"] [unique_id "aXFRg7J6clMw4kdrHYFYgwAAAFQ"]
[Thu Jan 22 06:21:55.931692 2026] [:error] [pid 52556:tid 52566] [client 85.203.23.84:52303] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/endpoints/webix.php"] [unique_id "aXFRg-g4y1NKM4AgfjBzSQAAAMg"]
[Thu Jan 22 06:21:56.294644 2026] [:error] [pid 52445:tid 52456] [client 85.203.23.82:62877] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "aXFRhOvMmsFgpSSb5L2UiwAAAAI"]
[Thu Jan 22 06:22:01.671348 2026] [:error] [pid 52556:tid 52562] [client 85.203.23.54:23047] [client 85.203.23.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aXFRieg4y1NKM4AgfjBzUQAAAMQ"]
[Thu Jan 22 06:22:02.061802 2026] [:error] [pid 52447:tid 52523] [client 85.203.23.91:62935] [client 85.203.23.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/info.php"] [unique_id "aXFRinRLA2NsdGqJzotH6wAAAI4"]
[Thu Jan 22 06:22:02.465222 2026] [:error] [pid 36083:tid 36105] [client 85.203.23.106:30151] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-style.php"] [unique_id "aXFRipCng2nQoR5iqwqx8QAAAVM"]
[Thu Jan 22 06:22:02.835227 2026] [:error] [pid 52445:tid 52454] [client 85.203.23.106:59207] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/xp.php"] [unique_id "aXFRiuvMmsFgpSSb5L2UlAAAAAA"]
[Thu Jan 22 06:22:03.209205 2026] [:error] [pid 52556:tid 52563] [client 85.203.23.70:51745] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/assets/admin/skin/base/mixins/about.php"] [unique_id "aXFRi-g4y1NKM4AgfjBzVgAAAMU"]
[Thu Jan 22 06:22:03.581438 2026] [:error] [pid 52446:tid 52484] [client 85.203.23.56:59565] [client 85.203.23.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Content/"] [unique_id "aXFRi7J6clMw4kdrHYFYigAAAEI"]
[Thu Jan 22 06:22:04.008248 2026] [:error] [pid 27550:tid 27570] [client 85.203.23.74:30953] [client 85.203.23.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "aXFRjOOQDPzfV5R2LYRHmgAAARI"]
[Thu Jan 22 06:22:04.391045 2026] [:error] [pid 52447:tid 52527] [client 85.203.23.72:54055] [client 85.203.23.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/library/min.php"] [unique_id "aXFRjHRLA2NsdGqJzotH8AAAAJI"]
[Thu Jan 22 06:22:04.762308 2026] [:error] [pid 52447:tid 52531] [client 85.203.23.59:62935] [client 85.203.23.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/query-title/"] [unique_id "aXFRjHRLA2NsdGqJzotH8wAAAJY"]
[Thu Jan 22 06:22:05.138803 2026] [:error] [pid 52556:tid 52567] [client 85.203.23.106:49101] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/query-pagination/"] [unique_id "aXFRjeg4y1NKM4AgfjBzWAAAAMk"]
[Thu Jan 22 06:22:05.569239 2026] [:error] [pid 27550:tid 27564] [client 85.203.23.96:48171] [client 85.203.23.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/nux/"] [unique_id "aXFRjeOQDPzfV5R2LYRHmwAAAQw"]
[Thu Jan 22 06:22:05.934221 2026] [:error] [pid 27550:tid 27560] [client 85.203.23.100:65433] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aXFRjeOQDPzfV5R2LYRHnQAAAQg"]
[Thu Jan 22 06:22:11.307057 2026] [:error] [pid 36083:tid 36097] [client 85.203.23.88:37667] [client 85.203.23.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/network/datate.php"] [unique_id "aXFRk5Cng2nQoR5iqwqyAgAAAUs"]
[Thu Jan 22 06:22:11.679812 2026] [:error] [pid 52556:tid 52579] [client 85.203.23.104:43631] [client 85.203.23.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/lib/lock360.php"] [unique_id "aXFRk-g4y1NKM4AgfjBzagAAANU"]
[Thu Jan 22 06:22:12.059197 2026] [:error] [pid 52447:tid 52525] [client 85.203.23.61:32569] [client 85.203.23.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/wp-work.php"] [unique_id "aXFRlHRLA2NsdGqJzotIBAAAAJA"]
[Thu Jan 22 06:22:12.433710 2026] [:error] [pid 52447:tid 52520] [client 85.203.23.66:57535] [client 85.203.23.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/search/admin.php"] [unique_id "aXFRlHRLA2NsdGqJzotICAAAAIs"]
[Thu Jan 22 06:22:12.799236 2026] [:error] [pid 36083:tid 36094] [client 85.203.23.86:20375] [client 85.203.23.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/lifeempore/content-"] [unique_id "aXFRlJCng2nQoR5iqwqyBQAAAUg"]
[Thu Jan 22 06:22:13.161012 2026] [:error] [pid 52445:tid 52454] [client 85.203.23.100:27323] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/lifeempore-v1/content-"] [unique_id "aXFRlevMmsFgpSSb5L2UngAAAAA"]
[Thu Jan 22 06:22:13.538244 2026] [:error] [pid 36083:tid 36105] [client 85.203.23.56:41689] [client 85.203.23.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/lifeempore-v2/content-"] [unique_id "aXFRlZCng2nQoR5iqwqyBwAAAVM"]
[Thu Jan 22 06:22:13.916535 2026] [:error] [pid 36083:tid 36093] [client 85.203.23.55:42717] [client 85.203.23.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentynineteen/content-"] [unique_id "aXFRlZCng2nQoR5iqwqyCwAAAUc"]
[Thu Jan 22 06:22:14.289646 2026] [:error] [pid 52446:tid 52492] [client 85.203.23.100:50193] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-excerpt-constructor.php"] [unique_id "aXFRlrJ6clMw4kdrHYFYowAAAEo"]
[Thu Jan 22 06:22:14.702163 2026] [:error] [pid 27550:tid 27572] [client 85.203.23.102:37347] [client 85.203.23.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/edit.php"] [unique_id "aXFRluOQDPzfV5R2LYRHqAAAARQ"]
[Thu Jan 22 06:22:15.077254 2026] [:error] [pid 52446:tid 52497] [client 85.203.23.56:44811] [client 85.203.23.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/includes/class-ftp-sockets-more.php"] [unique_id "aXFRl7J6clMw4kdrHYFYpwAAAE8"]
[Thu Jan 22 06:22:15.460268 2026] [:error] [pid 36083:tid 36090] [client 85.203.23.82:57171] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/options-privacy-pic.php"] [unique_id "aXFRl5Cng2nQoR5iqwqyEgAAAUQ"]
[Thu Jan 22 06:22:15.831002 2026] [:error] [pid 36083:tid 36110] [client 85.203.23.90:24393] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/post-template-soap.php"] [unique_id "aXFRl5Cng2nQoR5iqwqyFAAAAVg"]
[Thu Jan 22 06:22:16.200438 2026] [:error] [pid 52447:tid 52529] [client 85.203.23.77:27385] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "aXFRmHRLA2NsdGqJzotIHAAAAJQ"]
[Thu Jan 22 06:22:16.568138 2026] [:error] [pid 52447:tid 52521] [client 85.203.23.102:52655] [client 85.203.23.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/privacy-beta.php"] [unique_id "aXFRmHRLA2NsdGqJzotIHwAAAIw"]
[Thu Jan 22 06:22:16.930843 2026] [:error] [pid 52447:tid 52512] [client 85.203.23.106:59223] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/revslider/templates/particle-effect-three/"] [unique_id "aXFRmHRLA2NsdGqJzotIJAAAAIM"]
[Thu Jan 22 06:22:17.327753 2026] [:error] [pid 27550:tid 27567] [client 85.203.23.102:39905] [client 85.203.23.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/revslider/templates/magazineposts/"] [unique_id "aXFRmeOQDPzfV5R2LYRHrgAAAQ8"]
[Thu Jan 22 06:22:17.699031 2026] [:error] [pid 27550:tid 27568] [client 85.203.23.91:60767] [client 85.203.23.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/revslider/templates/landing-page-hero/"] [unique_id "aXFRmeOQDPzfV5R2LYRHsQAAARA"]
[Thu Jan 22 06:22:18.079972 2026] [:error] [pid 27550:tid 27556] [client 85.203.23.69:35503] [client 85.203.23.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/revslider/templates/le-chef-la-carte/"] [unique_id "aXFRmuOQDPzfV5R2LYRHswAAAQQ"]
[Thu Jan 22 06:22:18.461684 2026] [:error] [pid 27550:tid 27552] [client 85.203.23.98:39505] [client 85.203.23.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/flatco/assets/"] [unique_id "aXFRmuOQDPzfV5R2LYRHtgAAAQA"]
[Thu Jan 22 06:22:18.823258 2026] [:error] [pid 27550:tid 27575] [client 85.203.23.81:39569] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/flatco/framework/"] [unique_id "aXFRmuOQDPzfV5R2LYRHugAAARc"]
[Thu Jan 22 06:22:19.187851 2026] [:error] [pid 27550:tid 27568] [client 85.203.23.55:61081] [client 85.203.23.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/Avada/woocommerce/checkout/"] [unique_id "aXFRm-OQDPzfV5R2LYRHvQAAARA"]
[Thu Jan 22 06:22:19.568262 2026] [:error] [pid 52447:tid 52518] [client 85.203.23.70:24911] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/Avada/includes/recaptcha/src/ReCaptcha/"] [unique_id "aXFRm3RLA2NsdGqJzotIKwAAAIk"]
[Thu Jan 22 06:22:20.033358 2026] [:error] [pid 52447:tid 52510] [client 85.203.23.92:40425] [client 85.203.23.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/target/admin/"] [unique_id "aXFRnHRLA2NsdGqJzotILgAAAIE"]
[Thu Jan 22 06:22:20.411806 2026] [:error] [pid 52447:tid 52524] [client 85.203.23.82:42631] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/dt-the7/inc/extensions/options-framework/js/"] [unique_id "aXFRnHRLA2NsdGqJzotIMQAAAI8"]
[Thu Jan 22 06:22:20.790442 2026] [:error] [pid 27550:tid 27565] [client 85.203.23.100:35453] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aXFRnOOQDPzfV5R2LYRHwAAAAQ0"]
[Thu Jan 22 06:22:21.163354 2026] [:error] [pid 52556:tid 52572] [client 85.203.23.74:28789] [client 85.203.23.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "aXFRneg4y1NKM4AgfjBzdAAAAM4"]
[Thu Jan 22 06:22:21.531596 2026] [:error] [pid 27550:tid 27572] [client 85.203.23.86:52423] [client 85.203.23.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/file1.php"] [unique_id "aXFRneOQDPzfV5R2LYRHwwAAARQ"]
[Thu Jan 22 06:22:21.899728 2026] [:error] [pid 52445:tid 52477] [client 85.203.23.77:65427] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/"] [unique_id "aXFRnevMmsFgpSSb5L2UpQAAABc"]
[Thu Jan 22 06:22:22.268918 2026] [:error] [pid 27550:tid 27553] [client 85.203.23.62:29413] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp-includes.php"] [unique_id "aXFRnuOQDPzfV5R2LYRHxgAAAQE"]
[Thu Jan 22 06:22:22.641212 2026] [:error] [pid 52446:tid 52488] [client 85.203.23.82:39657] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-rocket-config/wp-login.php"] [unique_id "aXFRnrJ6clMw4kdrHYFYqgAAAEY"]
[Thu Jan 22 06:22:23.005428 2026] [:error] [pid 52447:tid 52518] [client 85.203.23.88:37739] [client 85.203.23.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/moon.php"] [unique_id "aXFRn3RLA2NsdGqJzotIOQAAAIk"]
[Thu Jan 22 06:22:23.370233 2026] [:error] [pid 36083:tid 36109] [client 85.203.23.84:36879] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-supports/cloud.php"] [unique_id "aXFRn5Cng2nQoR5iqwqyGgAAAVc"]
[Thu Jan 22 06:22:23.738942 2026] [:error] [pid 52445:tid 52458] [client 85.203.23.89:42499] [client 85.203.23.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/termps.php"] [unique_id "aXFRn-vMmsFgpSSb5L2UqAAAAAQ"]
[Thu Jan 22 06:22:24.108181 2026] [:error] [pid 52445:tid 52457] [client 85.203.23.82:63889] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/404.php"] [unique_id "aXFRoOvMmsFgpSSb5L2UqQAAAAM"]
[Thu Jan 22 06:22:24.472749 2026] [:error] [pid 52446:tid 52497] [client 85.203.23.69:65401] [client 85.203.23.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/social-links/atomlib.php"] [unique_id "aXFRoLJ6clMw4kdrHYFYrQAAAE8"]
[Thu Jan 22 06:22:24.844660 2026] [:error] [pid 36083:tid 36097] [client 85.203.23.106:25235] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/man.php"] [unique_id "aXFRoJCng2nQoR5iqwqyHgAAAUs"]
[Thu Jan 22 06:22:25.208218 2026] [:error] [pid 52447:tid 52529] [client 85.203.23.102:59257] [client 85.203.23.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/images/1.php"] [unique_id "aXFRoXRLA2NsdGqJzotIPwAAAJQ"]
[Thu Jan 22 06:22:25.570360 2026] [:error] [pid 52445:tid 52465] [client 85.203.23.96:53123] [client 85.203.23.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/cherry-plugin-master/includes/makeasmtp.php"] [unique_id "aXFRoevMmsFgpSSb5L2UqwAAAAs"]
[Thu Jan 22 06:22:25.949060 2026] [:error] [pid 52446:tid 52501] [client 85.203.23.76:64691] [client 85.203.23.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aXFRobJ6clMw4kdrHYFYrgAAAFM"]
[Thu Jan 22 06:22:26.317688 2026] [:error] [pid 36083:tid 36098] [client 85.203.23.76:33245] [client 85.203.23.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/lock.php"] [unique_id "aXFRopCng2nQoR5iqwqyJAAAAUw"]
[Thu Jan 22 06:22:26.677695 2026] [:error] [pid 52445:tid 52475] [client 85.203.23.85:43417] [client 85.203.23.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/siara-corporate-business/template-parts/header/styles/lock.php"] [unique_id "aXFRouvMmsFgpSSb5L2UrAAAABU"]
[Thu Jan 22 06:22:27.053434 2026] [:error] [pid 52445:tid 52467] [client 85.203.23.87:48733] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wtu_gagal.php"] [unique_id "aXFRo-vMmsFgpSSb5L2UrwAAAA0"]
[Thu Jan 22 06:22:27.415747 2026] [:error] [pid 52556:tid 52573] [client 85.203.23.54:34653] [client 85.203.23.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/pgaas/"] [unique_id "aXFRo-g4y1NKM4AgfjBzdwAAAM8"]
[Thu Jan 22 06:22:32.783787 2026] [:error] [pid 52446:tid 52492] [client 85.203.23.100:25881] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/elementor/modules/atomic-widgets/prop-types/transform/lock.php"] [unique_id "aXFRqLJ6clMw4kdrHYFYswAAAEo"]
[Thu Jan 22 06:22:33.148594 2026] [:error] [pid 36083:tid 36091] [client 85.203.23.89:31535] [client 85.203.23.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/elementor/modules/kit-elements-defaults/import-export-customization/lock.php"] [unique_id "aXFRqZCng2nQoR5iqwqyKwAAAUU"]
[Thu Jan 22 06:22:33.513609 2026] [:error] [pid 36083:tid 36102] [client 85.203.23.59:32101] [client 85.203.23.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/wp-maiI.php"] [unique_id "aXFRqZCng2nQoR5iqwqyLgAAAVA"]
[Thu Jan 22 06:22:33.884140 2026] [:error] [pid 52447:tid 52523] [client 85.203.23.74:45647] [client 85.203.23.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aXFRqXRLA2NsdGqJzotIWwAAAI4"]
[Thu Jan 22 06:22:34.259703 2026] [:error] [pid 36083:tid 36101] [client 85.203.23.98:34711] [client 85.203.23.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wophq/"] [unique_id "aXFRqpCng2nQoR5iqwqyMQAAAU8"]
[Thu Jan 22 06:22:39.623120 2026] [:error] [pid 52556:tid 52565] [client 85.203.23.75:29441] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wordpress-seo-extended/admin/views/admin.php"] [unique_id "aXFRr-g4y1NKM4AgfjBzkQAAAMc"]
[Thu Jan 22 06:22:39.983815 2026] [:error] [pid 52447:tid 52513] [client 85.203.23.61:48307] [client 85.203.23.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-walker-page-dropdown-first.php"] [unique_id "aXFRr3RLA2NsdGqJzotIeQAAAIQ"]
[Thu Jan 22 06:22:40.351725 2026] [:error] [pid 52447:tid 52528] [client 85.203.23.61:63939] [client 85.203.23.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-wp-widget-tag-cloud-new.php"] [unique_id "aXFRsHRLA2NsdGqJzotIfAAAAJM"]
[Thu Jan 22 06:22:40.715731 2026] [:error] [pid 52556:tid 52582] [client 85.203.23.93:31341] [client 85.203.23.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/zer.php"] [unique_id "aXFRsOg4y1NKM4AgfjBzlAAAANg"]
[Thu Jan 22 06:22:41.089396 2026] [:error] [pid 52556:tid 52561] [client 85.203.23.59:45203] [client 85.203.23.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/includes/autoload_classmap.php"] [unique_id "aXFRseg4y1NKM4AgfjBzlgAAAMM"]
[Thu Jan 22 06:22:41.451890 2026] [:error] [pid 36083:tid 36103] [client 85.203.23.81:34305] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/includes/screen-event.php"] [unique_id "aXFRsZCng2nQoR5iqwqyOgAAAVE"]
[Thu Jan 22 06:22:41.814268 2026] [:error] [pid 52446:tid 52490] [client 85.203.23.91:64407] [client 85.203.23.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/network/site-info-client.php"] [unique_id "aXFRsbJ6clMw4kdrHYFYwQAAAEg"]
[Thu Jan 22 06:22:42.186986 2026] [:error] [pid 52446:tid 52483] [client 85.203.23.56:49277] [client 85.203.23.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/wp-mails.php"] [unique_id "aXFRsrJ6clMw4kdrHYFYxAAAAEE"]
[Thu Jan 22 06:22:42.554125 2026] [:error] [pid 52447:tid 52529] [client 85.203.23.80:50439] [client 85.203.23.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aXFRsnRLA2NsdGqJzotIgwAAAJQ"]
[Thu Jan 22 06:22:42.924866 2026] [:error] [pid 52447:tid 52512] [client 85.203.23.73:42827] [client 85.203.23.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/dofault.php"] [unique_id "aXFRsnRLA2NsdGqJzotIhgAAAIM"]
[Thu Jan 22 06:22:43.294433 2026] [:error] [pid 36083:tid 36099] [client 85.203.23.90:28067] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/file-manager.php"] [unique_id "aXFRs5Cng2nQoR5iqwqyPAAAAU0"]
[Thu Jan 22 06:22:43.657044 2026] [:error] [pid 52446:tid 52505] [client 85.203.23.92:61479] [client 85.203.23.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/radio.php"] [unique_id "aXFRs7J6clMw4kdrHYFYywAAAFc"]
[Thu Jan 22 06:22:44.026095 2026] [:error] [pid 52556:tid 52565] [client 85.203.23.70:60661] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aXFRtOg4y1NKM4AgfjBznQAAAMc"]
[Thu Jan 22 06:22:44.397956 2026] [:error] [pid 36083:tid 36094] [client 85.203.23.86:23449] [client 85.203.23.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-bindings/zczv.php"] [unique_id "aXFRtJCng2nQoR5iqwqyQAAAAUg"]
[Thu Jan 22 06:22:44.767862 2026] [:error] [pid 52556:tid 52559] [client 85.203.23.94:35039] [client 85.203.23.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/Iitespeed-cache/drive.php"] [unique_id "aXFRtOg4y1NKM4AgfjBzngAAAME"]
[Thu Jan 22 06:22:45.140148 2026] [:error] [pid 52556:tid 52558] [client 85.203.23.82:49693] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/assets/images/selam.php"] [unique_id "aXFRteg4y1NKM4AgfjBznwAAAMA"]
[Thu Jan 22 06:22:45.508646 2026] [:error] [pid 52556:tid 52571] [client 85.203.23.75:42409] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aXFRteg4y1NKM4AgfjBzogAAAM0"]
[Thu Jan 22 06:22:45.871619 2026] [:error] [pid 27550:tid 27573] [client 85.203.23.106:34809] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "aXFRteOQDPzfV5R2LYRH0wAAARU"]
[Thu Jan 22 22:35:23.664329 2026] [:error] [pid 52556:tid 52580] [client 95.216.63.67:64784] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/acme-challenge/license.php"] [unique_id "aXI1q-g4y1NKM4AgfjCC6AAAANY"], referer: www.google.com
[Thu Jan 22 23:37:18.520532 2026] [:error] [pid 52445:tid 52467] [client 95.216.63.67:50535] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/woocommerce-payments/readme.txt"] [unique_id "aXJELuvMmsFgpSSb5L2jTgAAAA0"], referer: www.google.com
[Thu Jan 22 23:47:33.095737 2026] [:error] [pid 34321:tid 34327] [client 95.216.63.67:65510] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aXJGlRLMkukwqSCtKrDNnQAAAcM"], referer: www.google.com
[Fri Jan 23 05:23:09.533775 2026] [:error] [pid 11732:tid 11740] [client 167.99.181.249:38698] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aXKVPefd54xxq04JKuNKaAAAAMY"]
[Fri Jan 23 05:23:17.763127 2026] [authz_core:error] [pid 11732:tid 11749] [client 167.99.181.249:38782] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Fri Jan 23 05:23:21.533982 2026] [:error] [pid 11732:tid 11750] [client 167.99.181.249:39990] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aXKVSefd54xxq04JKuNKfwAAANA"]
[Fri Jan 23 05:23:23.535645 2026] [:error] [pid 11607:tid 11669] [client 167.99.181.249:39998] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aXKVSwucTAUsUUzKw5cS2AAAAFg"]
[Fri Jan 23 16:57:15.074992 2026] [:error] [pid 64230:tid 64239] [client 167.172.232.142:37348] [client 167.172.232.142] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aXM3662JXmVjD91caKKW0wAAAUY"]
[Fri Jan 23 16:57:23.289902 2026] [authz_core:error] [pid 11608:tid 11693] [client 167.172.232.142:46948] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Fri Jan 23 16:57:27.078343 2026] [:error] [pid 64230:tid 64247] [client 167.172.232.142:47002] [client 167.172.232.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aXM3962JXmVjD91caKKW6AAAAU4"]
[Fri Jan 23 16:57:29.079305 2026] [:error] [pid 64230:tid 64234] [client 167.172.232.142:47008] [client 167.172.232.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aXM3-a2JXmVjD91caKKW6QAAAUE"]
[Sat Jan 24 07:57:16.499774 2026] [:error] [pid 40905:tid 40968] [client 157.15.40.93:52061] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/txets.php"] [unique_id "aXQK3F3rUAneNkh7mXAc2QAAAII"]
[Sat Jan 24 07:57:17.077695 2026] [:error] [pid 41009:tid 41016] [client 157.15.40.93:52270] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/txets.php"] [unique_id "aXQK3WrewfoFUDD3TM2h7wAAAMU"]
[Sat Jan 24 07:57:17.662451 2026] [:error] [pid 40905:tid 40977] [client 157.15.40.93:52341] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/txets.php"] [unique_id "aXQK3V3rUAneNkh7mXAc5gAAAIs"]
[Sat Jan 24 07:57:18.236620 2026] [:error] [pid 41009:tid 41013] [client 157.15.40.93:52450] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/txets.php"] [unique_id "aXQK3mrewfoFUDD3TM2h_gAAAMI"]
[Sat Jan 24 07:57:18.823129 2026] [:error] [pid 40902:tid 40932] [client 157.15.40.93:52528] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/schallfuns.php"] [unique_id "aXQK3gSCceZpurDgOesqFwAAABQ"]
[Sat Jan 24 07:57:19.399767 2026] [:error] [pid 22900:tid 22923] [client 157.15.40.93:52632] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/postnews.php"] [unique_id "aXQK31r6h1PpdlYV7gVOYAAAARQ"]
[Sat Jan 24 07:57:19.981402 2026] [:error] [pid 40902:tid 40936] [client 157.15.40.93:52788] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/postnews.php"] [unique_id "aXQK3wSCceZpurDgOesqLAAAABg"]
[Sat Jan 24 07:57:20.557078 2026] [:error] [pid 40902:tid 40927] [client 157.15.40.93:52882] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/postnews.php"] [unique_id "aXQK4ASCceZpurDgOesqMAAAAA8"]
[Sat Jan 24 07:57:21.134491 2026] [:error] [pid 40905:tid 40969] [client 157.15.40.93:52979] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/postnews.php"] [unique_id "aXQK4V3rUAneNkh7mXAc_AAAAIM"]
[Sun Jan 25 00:57:06.693967 2026] [:error] [pid 40902:tid 40927] [client 64.89.163.25:59142] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aXT54gSCceZpurDgOeseuAAAAA8"]
[Sun Jan 25 00:57:07.335688 2026] [:error] [pid 22900:tid 22918] [client 64.89.163.25:59394] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aXT541r6h1PpdlYV7gUx1gAAAQ8"]
[Sun Jan 25 00:57:07.967753 2026] [:error] [pid 40903:tid 40958] [client 64.89.163.25:59604] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aXT54xxw3xvyqXTcGl_c_AAAAFM"]
[Sun Jan 25 00:57:08.600251 2026] [:error] [pid 60761:tid 60771] [client 64.89.163.25:59839] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aXT55FZQvxLvEbXXh9Kg1wAAAUc"]
[Sun Jan 25 00:57:09.244216 2026] [:error] [pid 14976:tid 14998] [client 64.89.163.25:60005] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aXT55WvdigydYOB2KS-kdAAAAZQ"]
[Sun Jan 25 02:07:49.958963 2026] [:error] [pid 40905:tid 40966] [client 103.62.232.34:54266] [client 103.62.232.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aXUKdV3rUAneNkh7mXAAfAAAAIA"]
[Sun Jan 25 02:07:50.357772 2026] [:error] [pid 40905:tid 40968] [client 103.62.232.34:54280] [client 103.62.232.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aXUKdl3rUAneNkh7mXAAfwAAAII"]
[Mon Jan 26 00:10:39.062022 2026] [:error] [pid 9122:tid 9131] [client 206.81.24.74:40608] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aXZAf2gJ3AtoqtQp2gR1DgAAAYc"]
[Mon Jan 26 00:10:47.265216 2026] [authz_core:error] [pid 9122:tid 9147] [client 206.81.24.74:54840] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Jan 26 00:10:51.058321 2026] [:error] [pid 33687:tid 33692] [client 206.81.24.74:54874] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aXZAi4c6VUyZP5DZSy7NTAAAAQI"]
[Mon Jan 26 00:10:53.059511 2026] [:error] [pid 33847:tid 33860] [client 206.81.24.74:54880] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aXZAjRb-MBjjiRpV5Sdb7gAAAcg"]
[Mon Jan 26 00:54:20.692198 2026] [:error] [pid 48918:tid 48930] [client 57.181.65.7:35721] [client 57.181.65.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.181.65.7, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXZKvLFdNV6RkULOt6EjVgAAAII"]
[Mon Jan 26 01:05:49.329183 2026] [:error] [pid 13569:tid 13634] [client 168.231.100.102:54252] [client 168.231.100.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.231.100.102, incrementing brute counter"] [hostname "www.southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXZNbfjY_vt91DmOz5W70QAAAZY"]
[Mon Jan 26 11:48:50.357404 2026] [:error] [pid 24666:tid 24671] [client 138.68.103.221:64993] [client 138.68.103.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.103.221, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXbkIpmH-L0_jbK3i9FqOQAAAMM"]
[Mon Jan 26 11:48:51.854970 2026] [:error] [pid 24666:tid 24689] [client 138.68.103.221:49365] [client 138.68.103.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.103.221, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXbkI5mH-L0_jbK3i9FqPQAAANU"]
[Mon Jan 26 12:01:39.534039 2026] [:error] [pid 24556:tid 24569] [client 138.68.103.221:50346] [client 138.68.103.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.103.221, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXbnI0yDW1_EbgDa3XKyUQAAAAQ"]
[Mon Jan 26 12:07:48.054009 2026] [:error] [pid 61287:tid 61322] [client 138.68.103.221:58713] [client 138.68.103.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.103.221, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXbolNimZOwAM64CfR79iQAAAYU"]
[Mon Jan 26 12:50:50.641269 2026] [:error] [pid 61286:tid 61295] [client 64.227.147.58:57285] [client 64.227.147.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.147.58, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXbyqsnVt687wYGMPn_SSQAAAUU"]
[Mon Jan 26 12:50:51.983754 2026] [:error] [pid 61287:tid 61322] [client 64.227.147.58:57362] [client 64.227.147.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.147.58, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXbyq9imZOwAM64CfR4HhgAAAYU"]
[Mon Jan 26 13:52:58.534276 2026] [:error] [pid 61252:tid 61275] [client 64.227.147.58:51342] [client 64.227.147.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.147.58, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXcBOrrGlf8FG2etxUA_nAAAARU"]
[Mon Jan 26 17:11:48.004342 2026] [:error] [pid 24556:tid 24589] [client 129.212.232.200:56844] [client 129.212.232.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aXcv1EyDW1_EbgDa3XIXHAAAABg"]
[Mon Jan 26 17:11:53.263216 2026] [:error] [pid 24556:tid 24587] [client 129.212.232.200:56902] [client 129.212.232.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "aXcv2UyDW1_EbgDa3XIXIQAAABY"]
[Mon Jan 26 18:07:43.619797 2026] [:error] [pid 24666:tid 24691] [client 34.182.19.247:50489] [client 34.182.19.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aXc875mH-L0_jbK3i9GzJgAAANc"]
[Mon Jan 26 18:07:43.981558 2026] [:error] [pid 24558:tid 24644] [client 34.182.19.247:60486] [client 34.182.19.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aXc87wo1PXqeJqIMTQaTTgAAAJc"]
[Mon Jan 26 18:07:44.348523 2026] [:error] [pid 61286:tid 61312] [client 34.182.19.247:51856] [client 34.182.19.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aXc88MnVt687wYGMPn8H1QAAAVY"]
[Mon Jan 26 22:31:32.464754 2026] [:error] [pid 24557:tid 24599] [client 139.59.24.172:50024] [client 139.59.24.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.24.172, incrementing brute counter"] [hostname "www.southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXd6xOrlG7Vm9pxV14xDigAAAEU"]
[Mon Jan 26 22:31:33.800529 2026] [:error] [pid 24557:tid 24598] [client 139.59.24.172:50065] [client 139.59.24.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.24.172, incrementing brute counter"] [hostname "www.southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXd6xerlG7Vm9pxV14xDjQAAAEQ"]
[Tue Jan 27 05:44:54.011732 2026] [:error] [pid 7561:tid 7582] [client 138.68.103.221:55508] [client 138.68.103.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.103.221, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXfgVrXGI6mgvHQqkXwRYwAAANI"]
[Tue Jan 27 06:01:00.613744 2026] [:error] [pid 7561:tid 7587] [client 138.68.103.221:57116] [client 138.68.103.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.103.221, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXfkHLXGI6mgvHQqkXwWLgAAANc"]
[Tue Jan 27 06:03:11.472176 2026] [:error] [pid 7561:tid 7567] [client 4.193.105.43:8722] [client 4.193.105.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/fm.php"] [unique_id "aXfkn7XGI6mgvHQqkXwW4gAAAMM"]
[Tue Jan 27 06:03:24.670812 2026] [:error] [pid 7561:tid 7566] [client 4.193.105.43:5451] [client 4.193.105.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.193.105.43, incrementing ddos counter"] [hostname "www.southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aXfkrLXGI6mgvHQqkXwW-QAAAMI"]
[Tue Jan 27 06:17:05.677172 2026] [:error] [pid 7454:tid 7521] [client 138.68.103.221:58744] [client 138.68.103.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.103.221, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXfn4ZltCoZEfMmfl8BvOAAAAIU"]
[Tue Jan 27 06:33:05.325083 2026] [:error] [pid 7561:tid 7587] [client 138.68.103.221:60381] [client 138.68.103.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.103.221, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXfrobXGI6mgvHQqkXwinQAAANc"]
[Tue Jan 27 06:37:25.459406 2026] [:error] [pid 7454:tid 7534] [client 194.26.192.118:49241] [client 194.26.192.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aXfspZltCoZEfMmfl8B7xQAAAJI"]
[Tue Jan 27 06:49:08.772838 2026] [:error] [pid 7454:tid 7533] [client 138.68.103.221:61969] [client 138.68.103.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.103.221, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXfvZJltCoZEfMmfl8CCSAAAAJE"]
[Tue Jan 27 07:05:14.288747 2026] [:error] [pid 7454:tid 7519] [client 138.68.103.221:63596] [client 138.68.103.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.103.221, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXfzKpltCoZEfMmfl8CLXgAAAIM"]
[Tue Jan 27 07:21:30.104846 2026] [:error] [pid 7561:tid 7564] [client 138.68.103.221:65190] [client 138.68.103.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.103.221, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXf2-rXGI6mgvHQqkXw2qgAAAMA"]
[Tue Jan 27 07:37:39.427956 2026] [:error] [pid 7454:tid 7540] [client 138.68.103.221:50442] [client 138.68.103.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.103.221, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXf6w5ltCoZEfMmfl8CeEgAAAJg"]
[Tue Jan 27 07:53:42.056071 2026] [:error] [pid 7453:tid 7495] [client 138.68.103.221:52049] [client 138.68.103.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.103.221, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXf-hhfsyA2ws_ADqui-FgAAAEY"]
[Tue Jan 27 08:09:49.893206 2026] [:error] [pid 7561:tid 7570] [client 138.68.103.221:53653] [client 138.68.103.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.103.221, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXgCTbXGI6mgvHQqkXxROwAAAMY"]
[Tue Jan 27 08:25:59.745590 2026] [:error] [pid 48528:tid 48531] [client 138.68.103.221:55283] [client 138.68.103.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.103.221, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aXgGFwOGRrquT9N7CZoKWgAAAgE"]
[Tue Jan 27 13:58:20.756808 2026] [:error] [pid 48528:tid 48543] [client 45.137.126.48:57805] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/HEAD"] [unique_id "aXhT_AOGRrquT9N7CZpImAAAAg0"]
[Wed Jan 28 22:17:51.816221 2026] [:error] [pid 33490:tid 33547] [client 144.172.112.114:55186] [client 144.172.112.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aXoaj2jexcy58gsBPJHTJQAAAFc"]
[Wed Jan 28 23:15:51.276913 2026] [:error] [pid 33491:tid 33556] [client 213.209.159.151:46218] [client 213.209.159.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aXooJ2P9UY0x3irkINBWQQAAAMU"]
[Thu Jan 29 03:34:06.932128 2026] [:error] [pid 15948:tid 15976] [client 47.90.227.150:53686] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aXpkrss8-GxRVq8LLTWeEQAAAAw"]
[Thu Jan 29 03:34:07.590184 2026] [:error] [pid 15950:tid 16040] [client 47.90.227.150:43368] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aXpkr4JOXwUqBC55abQr5AAAAJU"]
[Thu Jan 29 21:17:26.001867 2026] [:error] [pid 20486:tid 20499] [client 144.172.112.114:37380] [client 144.172.112.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aXtd5ngqSZb6GBx5nnMCvAAAAQo"]
[Thu Jan 29 22:28:35.122783 2026] [:error] [pid 20519:tid 20567] [client 47.90.227.150:44400] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aXtukwo4s4fyROrkyRn97gAAAZM"]
[Thu Jan 29 22:28:35.761194 2026] [:error] [pid 19069:tid 19078] [client 47.90.227.150:60724] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aXtuk_DHsRM4BJ9a4QuBwAAAAAA"]
[Thu Jan 29 23:12:17.827185 2026] [:error] [pid 20580:tid 20691] [client 20.78.145.22:4877] [client 20.78.145.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "aXt40ZCZ5HHdXPmeL59WzQAAApc"]
[Thu Jan 29 23:12:39.263041 2026] [:error] [pid 20576:tid 20596] [client 20.78.145.22:4919] [client 20.78.145.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.78.145.22, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aXt45yrDZws_FlQGi9eQqgAAAco"]
[Thu Jan 29 23:14:02.445322 2026] [:error] [pid 20519:tid 20554] [client 20.78.145.22:4393] [client 20.78.145.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aXt5Ogo4s4fyROrkyRkKUgAAAYY"]
[Fri Jan 30 01:33:16.553464 2026] [:error] [pid 39813:tid 39817] [client 144.172.112.114:38222] [client 144.172.112.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aXuZ3N_AaZSBkqpNK03p3QAAAUI"]
[Sat Jan 31 19:53:26.512803 2026] [:error] [pid 31430:tid 31458] [client 185.93.89.120:52809] [client 185.93.89.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aX3tNscb14YPxXg_g5FCaAAAAFg"]
[Sat Jan 31 19:53:30.384134 2026] [:error] [pid 44532:tid 44560] [client 185.93.89.120:65283] [client 185.93.89.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aX3tOsH-68uYbAtfrZ2BKQAAAVg"]
[Mon Feb 02 01:22:54.809882 2026] [:error] [pid 8965:tid 8972] [client 13.70.7.46:2698] [client 13.70.7.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.70.7.46, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aX-L7uNHEHhgRhn3G7RYHAAAAwQ"]
[Mon Feb 02 01:25:26.849334 2026] [:error] [pid 51610:tid 51626] [client 13.70.7.46:3118] [client 13.70.7.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aX-Mht7GFdNFAqImMQBScAAAAUw"]
[Mon Feb 02 01:25:52.312756 2026] [:error] [pid 10616:tid 10635] [client 13.70.7.46:4352] [client 13.70.7.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tinyfilemanager.php"] [unique_id "aX-MoGd8pZdmVx6pUp4srQAAAM8"]
[Mon Feb 02 01:27:12.557497 2026] [autoindex:error] [pid 8752:tid 8773] [client 13.70.7.46:2883] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 01:27:14.099469 2026] [autoindex:error] [pid 29578:tid 29582] [client 13.70.7.46:2502] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 01:27:27.095906 2026] [autoindex:error] [pid 8780:tid 8797] [client 13.70.7.46:3602] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 01:27:27.221796 2026] [autoindex:error] [pid 8780:tid 8807] [client 13.70.7.46:3602] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 01:27:28.800210 2026] [:error] [pid 10616:tid 10627] [client 13.70.7.46:3197] [client 13.70.7.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aX-NAGd8pZdmVx6pUp4tKgAAAMc"]
[Mon Feb 02 01:27:56.645400 2026] [:error] [pid 8752:tid 8778] [client 13.70.7.46:2030] [client 13.70.7.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aX-NHEFFilE3DptZFco2nQAAAhg"]
[Mon Feb 02 01:28:41.893619 2026] [:error] [pid 8877:tid 8882] [client 13.70.7.46:4511] [client 13.70.7.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aX-NSVjWRgIEkmjg6ounKwAAAsE"]
[Wed Feb 04 17:47:20.061618 2026] [:error] [pid 47404:tid 47422] [client 37.27.119.185:52628] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||southerncrosscentre.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aYMVqFtGjJnGFKjTTub3PwAAAIw"], referer: https://www.theguardian.com
[Wed Feb 04 17:47:20.785335 2026] [:error] [pid 55160:tid 55177] [client 37.27.119.185:53296] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||southerncrosscentre.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aYMVqOTAiAYDLSDaxdcE_AAAAY8"], referer: https://www.soundcloud.com
[Wed Feb 04 17:47:22.524180 2026] [:error] [pid 47404:tid 47413] [client 37.27.119.185:53901] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||southerncrosscentre.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aYMVqltGjJnGFKjTTub3QQAAAIM"], referer: https://www.outlook.com
[Wed Feb 04 17:47:23.262903 2026] [:error] [pid 47500:tid 47509] [client 37.27.119.185:54695] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||southerncrosscentre.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aYMVq7rUat0rhPdY3A3isgAAAUU"], referer: https://www.expedia.com
[Thu Feb 05 04:36:07.160046 2026] [:error] [pid 12188:tid 12243] [client 185.137.164.8:34309] [client 185.137.164.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/HEAD"] [unique_id "aYOttzKWpl9mNO_-qzPR8QAAAFM"]
[Thu Feb 05 13:03:29.037704 2026] [:error] [pid 31833:tid 31846] [client 136.158.79.157:64362] [client 136.158.79.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/wp-json/wc/store/cart"] [unique_id "aYQkoRzypZt5yekRAkHe1QAAAYs"]
[Thu Feb 05 15:18:10.923303 2026] [:error] [pid 33122:tid 33129] [client 34.66.228.94:55448] [client 34.66.228.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/wp-json/wc/store/cart"] [unique_id "aYREMvW0IebAnFB9KDDpbgAAAEU"]
[Fri Feb 06 06:24:53.528373 2026] [:error] [pid 34582:tid 34603] [client 20.230.54.173:10027] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/"] [unique_id "aYUYteDeJq1JGssYG6zMsAAAARI"]
[Fri Feb 06 06:24:54.395831 2026] [:error] [pid 1663:tid 1693] [client 20.230.54.173:4150] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/"] [unique_id "aYUYtl9EQrJaKkABjK_arQAAABQ"]
[Fri Feb 06 06:24:55.713863 2026] [:error] [pid 1664:tid 1709] [client 20.230.54.173:7922] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/"] [unique_id "aYUYt-_0lM6yA3VnvQWuwwAAAEk"]
[Fri Feb 06 06:24:57.002100 2026] [:error] [pid 34582:tid 34606] [client 20.230.54.173:6034] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/"] [unique_id "aYUYueDeJq1JGssYG6zMuwAAARU"]
[Fri Feb 06 06:24:58.820875 2026] [:error] [pid 1773:tid 1796] [client 20.230.54.173:2799] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/oxse.php"] [unique_id "aYUYujYbySBHYmKOdJ_rYgAAAM0"]
[Fri Feb 06 06:25:00.627440 2026] [:error] [pid 1663:tid 1673] [client 20.230.54.173:5464] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/oxse.php"] [unique_id "aYUYvF9EQrJaKkABjK_atgAAAAA"]
[Fri Feb 06 06:25:03.069569 2026] [:error] [pid 1665:tid 1736] [client 20.230.54.173:11278] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/oxse.php"] [unique_id "aYUYvzYZLE6gThXvZMraEQAAAIk"]
[Fri Feb 06 06:25:07.629486 2026] [:error] [pid 1663:tid 1678] [client 20.230.54.173:12585] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/oxse.php"] [unique_id "aYUYw19EQrJaKkABjK_a0AAAAAU"]
[Fri Feb 06 06:25:09.461297 2026] [:error] [pid 34582:tid 34590] [client 20.230.54.173:3279] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dropdown.php"] [unique_id "aYUYxeDeJq1JGssYG6zM9QAAAQU"]
[Fri Feb 06 06:25:10.792423 2026] [:error] [pid 34582:tid 34601] [client 20.230.54.173:9636] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dropdown.php"] [unique_id "aYUYxuDeJq1JGssYG6zM_wAAARA"]
[Fri Feb 06 06:25:13.215541 2026] [:error] [pid 34582:tid 34590] [client 20.230.54.173:3414] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dropdown.php"] [unique_id "aYUYyeDeJq1JGssYG6zNBQAAAQU"]
[Fri Feb 06 06:25:16.053756 2026] [:error] [pid 13650:tid 13654] [client 20.230.54.173:8485] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dropdown.php"] [unique_id "aYUYzBoU-_lpgnGeX7Vt8AAAAUI"]
[Fri Feb 06 06:25:24.712061 2026] [:error] [pid 13650:tid 13668] [client 20.230.54.173:1504] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/AxAo.php"] [unique_id "aYUY1BoU-_lpgnGeX7VuBAAAAVA"]
[Fri Feb 06 06:25:37.684747 2026] [:error] [pid 13650:tid 13662] [client 20.230.54.173:12256] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/assacc.php"] [unique_id "aYUY4RoU-_lpgnGeX7VuVgAAAUo"]
[Fri Feb 06 06:25:39.002417 2026] [:error] [pid 1665:tid 1740] [client 20.230.54.173:9510] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/assacc.php"] [unique_id "aYUY4zYZLE6gThXvZMrajAAAAI0"]
[Fri Feb 06 06:25:40.434513 2026] [:error] [pid 34582:tid 34607] [client 20.230.54.173:3287] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/assacc.php"] [unique_id "aYUY5ODeJq1JGssYG6zNkAAAARY"]
[Fri Feb 06 06:25:41.327364 2026] [:error] [pid 13650:tid 13675] [client 20.230.54.173:11519] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/assacc.php"] [unique_id "aYUY5RoU-_lpgnGeX7VuZQAAAVc"]
[Fri Feb 06 06:25:42.225375 2026] [:error] [pid 34582:tid 34595] [client 20.230.54.173:5487] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/men.php"] [unique_id "aYUY5uDeJq1JGssYG6zNlAAAAQo"]
[Fri Feb 06 06:26:16.990746 2026] [:error] [pid 1663:tid 1696] [client 20.230.54.173:13542] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/whm-cp.php"] [unique_id "aYUZCF9EQrJaKkABjK_bzQAAABc"]
[Fri Feb 06 06:26:21.407765 2026] [:error] [pid 1665:tid 1729] [client 20.230.54.173:9919] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/whm-cp.php"] [unique_id "aYUZDTYZLE6gThXvZMrazwAAAII"]
[Fri Feb 06 06:26:24.414532 2026] [:error] [pid 1664:tid 1707] [client 20.230.54.173:8501] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/whm-cp.php"] [unique_id "aYUZEO_0lM6yA3VnvQWv-AAAAEc"]
[Fri Feb 06 06:26:26.233074 2026] [:error] [pid 1663:tid 1673] [client 20.230.54.173:5778] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/whm-cp.php"] [unique_id "aYUZEl9EQrJaKkABjK_b4QAAAAA"]
[Fri Feb 06 06:26:27.381473 2026] [:error] [pid 13650:tid 13672] [client 20.230.54.173:9495] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pu.php"] [unique_id "aYUZExoU-_lpgnGeX7VupgAAAVQ"]
[Fri Feb 06 06:26:28.942758 2026] [:error] [pid 13650:tid 13674] [client 20.230.54.173:9496] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pu.php"] [unique_id "aYUZFBoU-_lpgnGeX7VuqAAAAVY"]
[Fri Feb 06 06:26:30.542971 2026] [:error] [pid 13650:tid 13658] [client 20.230.54.173:5794] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pu.php"] [unique_id "aYUZFhoU-_lpgnGeX7VusQAAAUY"]
[Fri Feb 06 06:26:32.094977 2026] [:error] [pid 1664:tid 1724] [client 20.230.54.173:8467] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pu.php"] [unique_id "aYUZGO_0lM6yA3VnvQWv_wAAAFg"]
[Fri Feb 06 06:26:33.020728 2026] [:error] [pid 13650:tid 13674] [client 20.230.54.173:9609] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/resp.php"] [unique_id "aYUZGRoU-_lpgnGeX7VvEAAAAVY"]
[Fri Feb 06 06:26:46.493105 2026] [:error] [pid 1663:tid 1690] [client 20.230.54.173:3441] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/resp.php"] [unique_id "aYUZJl9EQrJaKkABjK_cCgAAABE"]
[Fri Feb 06 06:26:48.710951 2026] [:error] [pid 13650:tid 13667] [client 20.230.54.173:12559] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/za2.php"] [unique_id "aYUZKBoU-_lpgnGeX7VvhgAAAU8"]
[Fri Feb 06 06:26:50.554208 2026] [:error] [pid 1665:tid 1743] [client 20.230.54.173:8507] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/za2.php"] [unique_id "aYUZKjYZLE6gThXvZMrbKAAAAJA"]
[Fri Feb 06 06:26:53.860128 2026] [:error] [pid 34582:tid 34585] [client 20.230.54.173:8626] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/za2.php"] [unique_id "aYUZLeDeJq1JGssYG6zN6gAAAQA"]
[Fri Feb 06 06:26:55.722409 2026] [:error] [pid 34582:tid 34595] [client 20.230.54.173:2904] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/za2.php"] [unique_id "aYUZL-DeJq1JGssYG6zN7gAAAQo"]
[Fri Feb 06 06:26:57.024781 2026] [:error] [pid 1664:tid 1707] [client 20.230.54.173:8470] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/z.php"] [unique_id "aYUZMe_0lM6yA3VnvQWwTAAAAEc"]
[Fri Feb 06 06:26:59.187098 2026] [:error] [pid 1665:tid 1729] [client 20.230.54.173:11056] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/z.php"] [unique_id "aYUZMzYZLE6gThXvZMrbOAAAAII"]
[Fri Feb 06 06:27:01.291808 2026] [:error] [pid 34582:tid 34596] [client 20.230.54.173:5868] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/z.php"] [unique_id "aYUZNeDeJq1JGssYG6zN_QAAAQs"]
[Fri Feb 06 06:27:06.343231 2026] [:error] [pid 1664:tid 1700] [client 20.230.54.173:8572] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/z.php"] [unique_id "aYUZOu_0lM6yA3VnvQWwWAAAAEA"]
[Fri Feb 06 06:27:08.985029 2026] [:error] [pid 1665:tid 1728] [client 20.230.54.173:5815] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gmanz.php"] [unique_id "aYUZPDYZLE6gThXvZMrbSQAAAIE"]
[Fri Feb 06 06:27:10.867270 2026] [:error] [pid 1664:tid 1704] [client 20.230.54.173:13541] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gmanz.php"] [unique_id "aYUZPu_0lM6yA3VnvQWwWwAAAEQ"]
[Fri Feb 06 06:27:31.095901 2026] [:error] [pid 1773:tid 1791] [client 20.230.54.173:3310] [client 20.230.54.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aYUZUzYbySBHYmKOdJ_suAAAAMg"]
[Fri Feb 06 06:27:55.960952 2026] [:error] [pid 34582:tid 34593] [client 20.230.54.173:2451] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/jga.php"] [unique_id "aYUZa-DeJq1JGssYG6zOTAAAAQg"]
[Fri Feb 06 06:27:57.482779 2026] [:error] [pid 1665:tid 1737] [client 20.230.54.173:13355] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/jga.php"] [unique_id "aYUZbTYZLE6gThXvZMrb5gAAAIo"]
[Fri Feb 06 06:28:02.709802 2026] [:error] [pid 13650:tid 13652] [client 20.230.54.173:2470] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/jga.php"] [unique_id "aYUZchoU-_lpgnGeX7VwQAAAAUA"]
[Fri Feb 06 06:28:12.276645 2026] [:error] [pid 1773:tid 1784] [client 20.230.54.173:5171] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/an.php"] [unique_id "aYUZfDYbySBHYmKOdJ_s-AAAAMM"]
[Fri Feb 06 06:28:16.225859 2026] [:error] [pid 1773:tid 1788] [client 20.230.54.173:8584] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/an.php"] [unique_id "aYUZgDYbySBHYmKOdJ_s_QAAAMU"]
[Fri Feb 06 06:28:18.106212 2026] [:error] [pid 13650:tid 13660] [client 20.230.54.173:8874] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/an.php"] [unique_id "aYUZghoU-_lpgnGeX7VwXwAAAUg"]
[Fri Feb 06 06:28:19.430517 2026] [:error] [pid 34582:tid 34588] [client 20.230.54.173:6594] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/an.php"] [unique_id "aYUZg-DeJq1JGssYG6zOZAAAAQM"]
[Fri Feb 06 06:28:21.086125 2026] [:error] [pid 13650:tid 13676] [client 20.230.54.173:10006] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bs5.php"] [unique_id "aYUZhRoU-_lpgnGeX7VwZgAAAVg"]
[Fri Feb 06 06:28:23.163869 2026] [:error] [pid 13650:tid 13654] [client 20.230.54.173:13314] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bs5.php"] [unique_id "aYUZhxoU-_lpgnGeX7VwagAAAUI"]
[Fri Feb 06 06:28:24.470612 2026] [:error] [pid 13650:tid 13667] [client 20.230.54.173:10823] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bs5.php"] [unique_id "aYUZiBoU-_lpgnGeX7VwbAAAAU8"]
[Fri Feb 06 06:28:25.453799 2026] [:error] [pid 34582:tid 34604] [client 20.230.54.173:1594] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bs5.php"] [unique_id "aYUZieDeJq1JGssYG6zOaQAAARM"]
[Fri Feb 06 06:28:26.611428 2026] [:error] [pid 1773:tid 1791] [client 20.230.54.173:7932] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ednse.php"] [unique_id "aYUZijYbySBHYmKOdJ_tDgAAAMg"]
[Fri Feb 06 06:28:28.107131 2026] [:error] [pid 1665:tid 1742] [client 20.230.54.173:11498] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ednse.php"] [unique_id "aYUZjDYZLE6gThXvZMrcMwAAAI8"]
[Fri Feb 06 06:28:34.184463 2026] [:error] [pid 34582:tid 34591] [client 20.230.54.173:11488] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ednse.php"] [unique_id "aYUZkuDeJq1JGssYG6zOawAAAQY"]
[Fri Feb 06 06:28:37.309858 2026] [:error] [pid 1663:tid 1686] [client 20.230.54.173:2542] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ednse.php"] [unique_id "aYUZlV9EQrJaKkABjK_c1wAAAA0"]
[Fri Feb 06 06:28:42.093540 2026] [:error] [pid 1773:tid 1790] [client 20.230.54.173:6654] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fs.php"] [unique_id "aYUZmjYbySBHYmKOdJ_tGQAAAMc"]
[Fri Feb 06 06:28:43.106679 2026] [:error] [pid 1664:tid 1721] [client 20.230.54.173:8582] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fs.php"] [unique_id "aYUZm-_0lM6yA3VnvQWwyQAAAFU"]
[Fri Feb 06 06:28:44.852376 2026] [:error] [pid 1663:tid 1690] [client 20.230.54.173:9046] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fs.php"] [unique_id "aYUZnF9EQrJaKkABjK_c4wAAABE"]
[Fri Feb 06 06:28:47.548789 2026] [:error] [pid 1773:tid 1789] [client 20.230.54.173:5603] [client 20.230.54.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fs.php"] [unique_id "aYUZnzYbySBHYmKOdJ_tIAAAAMY"]
[Fri Feb 06 15:11:03.919790 2026] [:error] [pid 3381:tid 3422] [client 63.178.163.68:52728] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aYWUBy81zqRg96ZREgj9GAAAAEk"]
[Fri Feb 06 15:11:05.008450 2026] [:error] [pid 3380:tid 3397] [client 63.178.163.68:39708] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/HEAD"] [unique_id "aYWUCRFAlUvBGSBK2jf2iwAAAA0"]
[Fri Feb 06 15:11:06.097933 2026] [:error] [pid 3380:tid 3390] [client 63.178.163.68:39720] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/credentials"] [unique_id "aYWUChFAlUvBGSBK2jf2lQAAAAY"]
[Fri Feb 06 15:11:07.189767 2026] [:error] [pid 3381:tid 3434] [client 63.178.163.68:39722] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config.bak"] [unique_id "aYWUCy81zqRg96ZREgj9IwAAAFU"]
[Fri Feb 06 15:11:08.280747 2026] [:error] [pid 3382:tid 3448] [client 63.178.163.68:39726] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config.old"] [unique_id "aYWUDMIgU1HR0rhYrE_ZdAAAAIg"]
[Fri Feb 06 15:11:23.763930 2026] [:error] [pid 3513:tid 3527] [client 63.178.163.68:41208] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.production"] [unique_id "aYWUGzSw3-HAlzpqSxxuKQAAAUw"]
[Fri Feb 06 15:11:24.855684 2026] [:error] [pid 3382:tid 3451] [client 63.178.163.68:59036] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.development"] [unique_id "aYWUHMIgU1HR0rhYrE_ZlAAAAIs"]
[Fri Feb 06 15:11:25.946400 2026] [:error] [pid 3380:tid 3399] [client 63.178.163.68:59048] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.staging"] [unique_id "aYWUHRFAlUvBGSBK2jf28wAAAA8"]
[Fri Feb 06 15:11:27.037035 2026] [:error] [pid 3380:tid 3401] [client 63.178.163.68:59064] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.local"] [unique_id "aYWUHxFAlUvBGSBK2jf29wAAABE"]
[Fri Feb 06 15:11:28.129494 2026] [:error] [pid 3380:tid 3384] [client 63.178.163.68:59074] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.test"] [unique_id "aYWUIBFAlUvBGSBK2jf2-QAAAAA"]
[Fri Feb 06 15:11:29.221503 2026] [:error] [pid 3380:tid 3392] [client 63.178.163.68:59082] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.backup"] [unique_id "aYWUIRFAlUvBGSBK2jf3AQAAAAg"]
[Fri Feb 06 15:11:30.312667 2026] [:error] [pid 3382:tid 3457] [client 63.178.163.68:59096] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.old"] [unique_id "aYWUIsIgU1HR0rhYrE_ZlgAAAJE"]
[Fri Feb 06 15:11:31.405508 2026] [:error] [pid 3513:tid 3528] [client 63.178.163.68:59106] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "aYWUIzSw3-HAlzpqSxxuOQAAAU0"]
[Fri Feb 06 15:11:32.496361 2026] [:error] [pid 3513:tid 3530] [client 63.178.163.68:59122] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.dist"] [unique_id "aYWUJDSw3-HAlzpqSxxuPAAAAU8"]
[Fri Feb 06 15:11:33.586987 2026] [:error] [pid 3381:tid 3436] [client 63.178.163.68:59134] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aYWUJS81zqRg96ZREgj9ZgAAAFc"]
[Fri Feb 06 15:11:34.677402 2026] [:error] [pid 3380:tid 3402] [client 63.178.163.68:59140] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.php"] [unique_id "aYWUJhFAlUvBGSBK2jf3FAAAABI"]
[Fri Feb 06 15:11:35.767922 2026] [:error] [pid 3477:tid 3486] [client 63.178.163.68:49664] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.example"] [unique_id "aYWUJ7L0Hdh40C7HYgUAggAAAMc"]
[Fri Feb 06 15:11:36.859261 2026] [:error] [pid 3382:tid 3445] [client 63.178.163.68:49680] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.sample"] [unique_id "aYWUKMIgU1HR0rhYrE_ZoAAAAIU"]
[Fri Feb 06 15:11:37.949460 2026] [:error] [pid 3477:tid 3499] [client 63.178.163.68:49684] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.dev"] [unique_id "aYWUKbL0Hdh40C7HYgUAiAAAANQ"]
[Fri Feb 06 15:11:39.039789 2026] [:error] [pid 3477:tid 3484] [client 63.178.163.68:49686] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.prod"] [unique_id "aYWUK7L0Hdh40C7HYgUAigAAAMU"]
[Fri Feb 06 15:11:40.130712 2026] [:error] [pid 3380:tid 3403] [client 63.178.163.68:49696] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.stage"] [unique_id "aYWULBFAlUvBGSBK2jf3JAAAABM"]
[Fri Feb 06 15:11:41.222826 2026] [:error] [pid 3382:tid 3444] [client 63.178.163.68:49708] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.live"] [unique_id "aYWULcIgU1HR0rhYrE_ZrAAAAIQ"]
[Fri Feb 06 15:11:47.041988 2026] [:error] [pid 3477:tid 3492] [client 63.178.163.68:49718] [client 63.178.163.68] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "45.134.225.250_bb88df44264f21beb7636bba06ed0a7ac4d8d477"): Internal error (specific information not available) [hostname "www.southerncrosscentre.au"] [uri "/index.php"] [unique_id "aYWUL7L0Hdh40C7HYgUAlAAAAM0"]
[Fri Feb 06 15:11:52.261501 2026] [:error] [pid 3381:tid 3418] [client 63.178.163.68:34318] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/phpinfo.php.bak"] [unique_id "aYWUOC81zqRg96ZREgj9iAAAAEU"]
[Fri Feb 06 15:12:14.438922 2026] [:error] [pid 3477:tid 3487] [client 63.178.163.68:59888] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/phpinfo.bak"] [unique_id "aYWUTrL0Hdh40C7HYgUA2gAAAMg"]
[Fri Feb 06 15:12:30.893105 2026] [:error] [pid 3380:tid 3384] [client 63.178.163.68:47944] [client 63.178.163.68] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/phpinfo.php.old"] [unique_id "aYWUXhFAlUvBGSBK2jf3cgAAAAA"]
[Fri Feb 06 16:10:00.228921 2026] [:error] [pid 3477:tid 3482] [client 18.177.82.133:42626] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aYWh2LL0Hdh40C7HYgUdggAAAMM"]
[Fri Feb 06 16:10:00.708497 2026] [:error] [pid 3477:tid 3483] [client 18.177.82.133:42638] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/HEAD"] [unique_id "aYWh2LL0Hdh40C7HYgUdhAAAAMQ"]
[Fri Feb 06 16:10:01.189334 2026] [:error] [pid 3382:tid 3459] [client 18.177.82.133:42648] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/credentials"] [unique_id "aYWh2cIgU1HR0rhYrE_0wQAAAJM"]
[Fri Feb 06 16:10:01.670196 2026] [:error] [pid 3382:tid 3462] [client 18.177.82.133:42664] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config.bak"] [unique_id "aYWh2cIgU1HR0rhYrE_0wgAAAJY"]
[Fri Feb 06 16:10:02.152775 2026] [:error] [pid 3380:tid 3405] [client 18.177.82.133:42666] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config.old"] [unique_id "aYWh2hFAlUvBGSBK2jceDQAAABU"]
[Fri Feb 06 16:10:11.235672 2026] [:error] [pid 3477:tid 3494] [client 18.177.82.133:38882] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.production"] [unique_id "aYWh47L0Hdh40C7HYgUdrwAAAM8"]
[Fri Feb 06 16:10:11.723670 2026] [:error] [pid 3380:tid 3403] [client 18.177.82.133:38886] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.development"] [unique_id "aYWh4xFAlUvBGSBK2jceKQAAABM"]
[Fri Feb 06 16:10:12.207222 2026] [:error] [pid 3380:tid 3393] [client 18.177.82.133:38898] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.staging"] [unique_id "aYWh5BFAlUvBGSBK2jceKgAAAAk"]
[Fri Feb 06 16:10:12.686137 2026] [:error] [pid 3380:tid 3399] [client 18.177.82.133:38904] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.local"] [unique_id "aYWh5BFAlUvBGSBK2jceKwAAAA8"]
[Fri Feb 06 16:10:13.166460 2026] [:error] [pid 3380:tid 3386] [client 18.177.82.133:38920] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.test"] [unique_id "aYWh5RFAlUvBGSBK2jceLwAAAAI"]
[Fri Feb 06 16:10:13.647497 2026] [:error] [pid 3382:tid 3454] [client 18.177.82.133:38922] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.backup"] [unique_id "aYWh5cIgU1HR0rhYrE_01QAAAI4"]
[Fri Feb 06 16:10:14.134370 2026] [:error] [pid 3513:tid 3515] [client 18.177.82.133:38924] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.old"] [unique_id "aYWh5jSw3-HAlzpqSxyMeQAAAUA"]
[Fri Feb 06 16:10:14.613876 2026] [:error] [pid 3382:tid 3456] [client 18.177.82.133:38932] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "aYWh5sIgU1HR0rhYrE_02gAAAJA"]
[Fri Feb 06 16:10:15.091763 2026] [:error] [pid 3381:tid 3437] [client 18.177.82.133:38946] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.dist"] [unique_id "aYWh5y81zqRg96ZREggWigAAAFg"]
[Fri Feb 06 16:10:15.573264 2026] [:error] [pid 3381:tid 3413] [client 18.177.82.133:38952] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aYWh5y81zqRg96ZREggWiwAAAEA"]
[Fri Feb 06 16:10:16.056351 2026] [:error] [pid 3381:tid 3424] [client 18.177.82.133:45680] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.php"] [unique_id "aYWh6C81zqRg96ZREggWjAAAAEs"]
[Fri Feb 06 16:10:16.554234 2026] [:error] [pid 3513:tid 3527] [client 18.177.82.133:45692] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.example"] [unique_id "aYWh6DSw3-HAlzpqSxyMiAAAAUw"]
[Fri Feb 06 16:10:17.036759 2026] [:error] [pid 3382:tid 3455] [client 18.177.82.133:45704] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.sample"] [unique_id "aYWh6cIgU1HR0rhYrE_1AQAAAI8"]
[Fri Feb 06 16:10:17.518664 2026] [:error] [pid 3477:tid 3494] [client 18.177.82.133:45712] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.dev"] [unique_id "aYWh6bL0Hdh40C7HYgUd3AAAAM8"]
[Fri Feb 06 16:10:17.996384 2026] [:error] [pid 3380:tid 3403] [client 18.177.82.133:45724] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.prod"] [unique_id "aYWh6RFAlUvBGSBK2jceYgAAABM"]
[Fri Feb 06 16:10:18.478038 2026] [:error] [pid 3477:tid 3500] [client 18.177.82.133:45734] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.stage"] [unique_id "aYWh6rL0Hdh40C7HYgUd4QAAANU"]
[Fri Feb 06 16:10:18.959947 2026] [:error] [pid 3513:tid 3531] [client 18.177.82.133:45738] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.live"] [unique_id "aYWh6jSw3-HAlzpqSxyMwwAAAVA"]
[Fri Feb 06 16:10:25.048447 2026] [:error] [pid 3382:tid 3457] [client 18.177.82.133:45804] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/phpinfo.php.bak"] [unique_id "aYWh8cIgU1HR0rhYrE_1QwAAAJE"]
[Fri Feb 06 16:10:37.556803 2026] [:error] [pid 3477:tid 3491] [client 18.177.82.133:47044] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/phpinfo.bak"] [unique_id "aYWh_bL0Hdh40C7HYgUeHwAAAMw"]
[Fri Feb 06 16:10:46.835197 2026] [:error] [pid 3477:tid 3488] [client 18.177.82.133:44668] [client 18.177.82.133] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/phpinfo.php.old"] [unique_id "aYWiBrL0Hdh40C7HYgUeQwAAAMk"]
[Fri Feb 06 21:32:31.107568 2026] [:error] [pid 3477:tid 3495] [client 143.110.178.154:62405] [client 143.110.178.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.178.154, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aYXtb7L0Hdh40C7HYgV47wAAANA"]
[Fri Feb 06 21:32:32.417640 2026] [:error] [pid 3382:tid 3458] [client 143.110.178.154:62518] [client 143.110.178.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.178.154, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aYXtcMIgU1HR0rhYrE9dWwAAAJI"]
[Sun Feb 08 11:38:39.693586 2026] [:error] [pid 24423:tid 24507] [client 45.139.104.214:50846] [client 45.139.104.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aYgFP03f9n1Y0TpV5Yb9egAAAJY"]
[Mon Feb 09 16:47:36.185691 2026] [:error] [pid 60508:tid 60516] [client 45.92.1.94:53517] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aYmfKOXDvLC4ADfnEzOkuQAAAYY"]
[Mon Feb 09 16:47:36.763902 2026] [:error] [pid 18303:tid 18322] [client 45.92.1.94:54255] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aYmfKEY7TEaZkFrGG4l65QAAARE"]
[Mon Feb 09 16:47:37.354333 2026] [:error] [pid 18303:tid 18313] [client 45.92.1.94:55027] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aYmfKUY7TEaZkFrGG4l65wAAAQg"]
[Mon Feb 09 16:47:38.608238 2026] [:error] [pid 60678:tid 60747] [client 45.92.1.94:56244] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/txets.php"] [unique_id "aYmfKu8Gd_fDFrcNu4OOoAAAAwg"]
[Mon Feb 09 23:43:22.181096 2026] [:error] [pid 47937:tid 47947] [client 157.15.40.93:55228] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/txets.php"] [unique_id "aYoAms4Fd42MP2DhNrUQUwAAAAE"]
[Mon Feb 09 23:43:23.416875 2026] [:error] [pid 60676:tid 60695] [client 157.15.40.93:55474] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/txets.php"] [unique_id "aYoAm3hKcn7mJYMx5_DBWAAAAos"]
[Mon Feb 09 23:43:23.907053 2026] [:error] [pid 47938:tid 47997] [client 157.15.40.93:55523] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/txets.php"] [unique_id "aYoAm7VCzWE6fQJEkNJjhQAAAFI"]
[Mon Feb 09 23:43:25.221052 2026] [:error] [pid 60619:tid 60647] [client 157.15.40.93:55638] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/txets.php"] [unique_id "aYoAnXEpg0UoeR8kJ-10hgAAAkY"]
[Mon Feb 09 23:43:25.709944 2026] [:error] [pid 60619:tid 60650] [client 157.15.40.93:55675] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/schallfuns.php"] [unique_id "aYoAnXEpg0UoeR8kJ-10jAAAAkg"]
[Mon Feb 09 23:43:29.346615 2026] [:error] [pid 60676:tid 60700] [client 157.15.40.93:55781] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/postnews.php"] [unique_id "aYoAoXhKcn7mJYMx5_DBXwAAApA"]
[Mon Feb 09 23:43:31.401831 2026] [:error] [pid 60677:tid 60716] [client 157.15.40.93:56091] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/postnews.php"] [unique_id "aYoAo1yBgzfmDf6GaesbGQAAAsU"]
[Mon Feb 09 23:43:32.880994 2026] [:error] [pid 60676:tid 60707] [client 157.15.40.93:56128] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/postnews.php"] [unique_id "aYoApHhKcn7mJYMx5_DBYwAAApc"]
[Mon Feb 09 23:43:36.399773 2026] [:error] [pid 18303:tid 18325] [client 157.15.40.93:56436] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/postnews.php"] [unique_id "aYoAqEY7TEaZkFrGG4m8tAAAARQ"]
[Tue Feb 10 05:03:54.991622 2026] [:error] [pid 47831:tid 47884] [client 185.93.89.120:57740] [client 185.93.89.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aYpLuidxbZYarWVkiAAv2QAAAEs"]
[Tue Feb 10 05:04:00.428484 2026] [:error] [pid 47837:tid 47914] [client 185.93.89.120:54383] [client 185.93.89.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aYpLwHFY8KYFPX79Z4nV-QAAAI4"]
[Wed Feb 11 01:01:50.338305 2026] [:error] [pid 14803:tid 14919] [client 185.93.89.110:47746] [client 185.93.89.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/HEAD"] [unique_id "aYtkfrwzY9_NIasL_OXJ4wAAAQI"]
[Wed Feb 11 16:38:50.255242 2026] [:error] [pid 17401:tid 17407] [client 173.239.224.194:62917] [client 173.239.224.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.194, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aYxAGg0lHeayTY40t341ugAAAQQ"]
[Thu Feb 12 15:50:59.983078 2026] [:error] [pid 21433:tid 21471] [client 20.215.216.208:18562] [client 20.215.216.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aY2GY9c_9AdG3uAKpzvGBQAAAYE"]
[Thu Feb 12 17:50:15.368010 2026] [autoindex:error] [pid 63511:tid 63522] [client 51.103.143.156:4181] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 17:50:16.605376 2026] [:error] [pid 63511:tid 63537] [client 51.103.143.156:39050] [client 51.103.143.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aY2iWKQCQbD5BgeyIk3FQAAAABg"]
[Thu Feb 12 17:50:19.477879 2026] [autoindex:error] [pid 63418:tid 63488] [client 51.103.143.156:39560] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 17:50:47.636843 2026] [:error] [pid 63418:tid 63480] [client 51.103.143.156:25533] [client 51.103.143.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aY2id9zjh-bbJnStPZKYWAAAAIQ"]
[Thu Feb 12 17:50:55.033521 2026] [:error] [pid 65064:tid 65074] [client 51.103.143.156:21232] [client 51.103.143.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aY2ifxOvRgscTcqsMBmEsgAAAMc"]
[Thu Feb 12 21:07:52.240400 2026] [:error] [pid 46718:tid 46724] [client 104.28.163.222:39716] [client 104.28.163.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/style.php"] [unique_id "aY3QqEdfX45LelQwruQa3wAAAcM"]
[Thu Feb 12 21:24:27.774106 2026] [:error] [pid 46718:tid 46725] [client 20.203.142.107:28298] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/kdgok.php"] [unique_id "aY3Ui0dfX45LelQwruQg8gAAAcQ"]
[Thu Feb 12 21:24:33.422231 2026] [:error] [pid 63416:tid 63445] [client 20.203.142.107:31570] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/kdgok.php"] [unique_id "aY3Ukb2wmecPaCHcM2_RFAAAAZg"]
[Thu Feb 12 21:24:39.901887 2026] [:error] [pid 46603:tid 46621] [client 20.203.142.107:27643] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/autoload_classmap.php"] [unique_id "aY3Ul_Ei6O39v05JNJd-9gAAARA"]
[Thu Feb 12 21:24:42.046824 2026] [:error] [pid 63511:tid 63514] [client 20.203.142.107:34896] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/autoload_classmap.php"] [unique_id "aY3UmqQCQbD5BgeyIk0phgAAAAE"]
[Thu Feb 12 21:24:45.375830 2026] [:error] [pid 63511:tid 63520] [client 20.203.142.107:31607] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/autoload_classmap.php"] [unique_id "aY3UnaQCQbD5BgeyIk0pjQAAAAc"]
[Thu Feb 12 21:24:46.344943 2026] [:error] [pid 63511:tid 63517] [client 20.203.142.107:31595] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/autoload_classmap.php"] [unique_id "aY3UnqQCQbD5BgeyIk0pkgAAAAQ"]
[Thu Feb 12 21:24:47.083145 2026] [:error] [pid 63417:tid 63464] [client 20.203.142.107:56611] [client 20.203.142.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "aY3Un_8gSb97qRMtXCL2dAAAAE8"]
[Thu Feb 12 21:24:48.158860 2026] [:error] [pid 63418:tid 63479] [client 20.203.142.107:4045] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-act.php"] [unique_id "aY3UoNzjh-bbJnStPZLxDgAAAIM"]
[Thu Feb 12 21:24:49.546891 2026] [:error] [pid 46675:tid 46680] [client 20.203.142.107:34882] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-act.php"] [unique_id "aY3UoTuaQILPonWFiQlwRQAAAUI"]
[Thu Feb 12 21:24:51.079672 2026] [:error] [pid 63418:tid 63476] [client 20.203.142.107:24729] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-act.php"] [unique_id "aY3Uo9zjh-bbJnStPZLxEwAAAIA"]
[Thu Feb 12 21:24:51.686528 2026] [:error] [pid 46603:tid 46615] [client 20.203.142.107:46796] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-act.php"] [unique_id "aY3Uo_Ei6O39v05JNJd_BAAAAQo"]
[Thu Feb 12 21:24:52.658833 2026] [:error] [pid 46675:tid 46701] [client 20.203.142.107:24765] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-file.php"] [unique_id "aY3UpDuaQILPonWFiQlwSQAAAVc"]
[Thu Feb 12 21:24:53.843278 2026] [:error] [pid 63416:tid 63440] [client 20.203.142.107:44092] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-file.php"] [unique_id "aY3Upb2wmecPaCHcM2_RKwAAAZM"]
[Thu Feb 12 21:24:55.345380 2026] [:error] [pid 63511:tid 63531] [client 20.203.142.107:3386] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-file.php"] [unique_id "aY3Up6QCQbD5BgeyIk0pnQAAABI"]
[Thu Feb 12 21:24:56.539931 2026] [:error] [pid 63416:tid 63441] [client 20.203.142.107:36855] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-file.php"] [unique_id "aY3UqL2wmecPaCHcM2_RLwAAAZQ"]
[Thu Feb 12 21:24:57.222295 2026] [:error] [pid 46675:tid 46692] [client 20.203.142.107:22148] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aY3UqTuaQILPonWFiQlwTwAAAU4"]
[Thu Feb 12 21:24:58.637883 2026] [:error] [pid 46603:tid 46621] [client 20.203.142.107:3357] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aY3UqvEi6O39v05JNJd_DAAAARA"]
[Thu Feb 12 21:24:59.739941 2026] [:error] [pid 63418:tid 63500] [client 20.203.142.107:30061] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aY3Uq9zjh-bbJnStPZLxGgAAAJg"]
[Thu Feb 12 21:25:00.573513 2026] [:error] [pid 63418:tid 63486] [client 20.203.142.107:45369] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aY3UrNzjh-bbJnStPZLxHAAAAIo"]
[Thu Feb 12 21:25:01.344701 2026] [:error] [pid 65064:tid 65087] [client 20.203.142.107:4063] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bak.php"] [unique_id "aY3UrROvRgscTcqsMBkFjwAAANQ"]
[Thu Feb 12 21:25:36.123433 2026] [:error] [pid 63418:tid 63499] [client 20.203.142.107:16739] [client 20.203.142.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY3U0Nzjh-bbJnStPZLxUQAAAJc"]
[Thu Feb 12 21:25:39.748651 2026] [:error] [pid 63418:tid 63488] [client 20.203.142.107:37125] [client 20.203.142.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aY3U09zjh-bbJnStPZLxVgAAAIw"]
[Thu Feb 12 21:25:54.571605 2026] [autoindex:error] [pid 46718:tid 46727] [client 20.203.142.107:14680] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 21:25:59.366699 2026] [autoindex:error] [pid 46718:tid 46745] [client 20.203.142.107:51256] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 21:26:26.923974 2026] [:error] [pid 63511:tid 63531] [client 20.203.142.107:49671] [client 20.203.142.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aY3VAqQCQbD5BgeyIk0p5wAAABI"]
[Thu Feb 12 21:26:31.922849 2026] [:error] [pid 63416:tid 63434] [client 20.203.142.107:3217] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xx.php"] [unique_id "aY3VB72wmecPaCHcM2_RlQAAAY0"]
[Thu Feb 12 21:26:33.772663 2026] [:error] [pid 46718:tid 46727] [client 20.203.142.107:19020] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xx.php"] [unique_id "aY3VCUdfX45LelQwruQiBAAAAcY"]
[Thu Feb 12 21:26:34.953057 2026] [:error] [pid 63511:tid 63532] [client 20.203.142.107:3204] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xx.php"] [unique_id "aY3VCqQCQbD5BgeyIk0p7QAAABM"]
[Thu Feb 12 21:26:35.868390 2026] [:error] [pid 65064:tid 65090] [client 20.203.142.107:14378] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xx.php"] [unique_id "aY3VCxOvRgscTcqsMBkF6wAAANc"]
[Thu Feb 12 21:26:37.919271 2026] [:error] [pid 46603:tid 46620] [client 20.203.142.107:27657] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wbbw.php"] [unique_id "aY3VDfEi6O39v05JNJd_eAAAAQ8"]
[Thu Feb 12 21:26:40.063266 2026] [:error] [pid 46603:tid 46613] [client 20.203.142.107:20109] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wbbw.php"] [unique_id "aY3VEPEi6O39v05JNJd_ewAAAQg"]
[Thu Feb 12 21:26:42.246329 2026] [:error] [pid 46718:tid 46738] [client 20.203.142.107:26234] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wbbw.php"] [unique_id "aY3VEkdfX45LelQwruQiCwAAAdE"]
[Thu Feb 12 21:26:44.438424 2026] [:error] [pid 46718:tid 46740] [client 20.203.142.107:40333] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wbbw.php"] [unique_id "aY3VFEdfX45LelQwruQiDwAAAdM"]
[Thu Feb 12 21:26:46.668633 2026] [:error] [pid 63417:tid 63454] [client 20.203.142.107:25277] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/akcc.php"] [unique_id "aY3VFv8gSb97qRMtXCL28wAAAEU"]
[Thu Feb 12 21:26:48.529980 2026] [:error] [pid 63511:tid 63528] [client 20.203.142.107:30104] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/akcc.php"] [unique_id "aY3VGKQCQbD5BgeyIk0p9wAAAA8"]
[Thu Feb 12 21:26:49.909467 2026] [:error] [pid 46603:tid 46608] [client 20.203.142.107:25234] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/akcc.php"] [unique_id "aY3VGfEi6O39v05JNJd_ggAAAQM"]
[Thu Feb 12 21:26:51.402146 2026] [:error] [pid 63418:tid 63484] [client 20.203.142.107:50399] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/akcc.php"] [unique_id "aY3VG9zjh-bbJnStPZLxqwAAAIg"]
[Thu Feb 12 21:26:52.198434 2026] [:error] [pid 46675:tid 46684] [client 20.203.142.107:19009] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/acxx.php"] [unique_id "aY3VHDuaQILPonWFiQlxBgAAAUY"]
[Thu Feb 12 21:26:52.903256 2026] [:error] [pid 46675:tid 46682] [client 20.203.142.107:50700] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/acxx.php"] [unique_id "aY3VHDuaQILPonWFiQlxBwAAAUQ"]
[Thu Feb 12 21:26:53.497900 2026] [:error] [pid 63418:tid 63490] [client 20.203.142.107:26799] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/acxx.php"] [unique_id "aY3VHdzjh-bbJnStPZLxrwAAAI4"]
[Thu Feb 12 21:26:54.295628 2026] [:error] [pid 46718:tid 46745] [client 20.203.142.107:50410] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/acxx.php"] [unique_id "aY3VHkdfX45LelQwruQiHAAAAdg"]
[Thu Feb 12 21:26:55.069697 2026] [:error] [pid 63418:tid 63476] [client 20.203.142.107:20145] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/x7.php"] [unique_id "aY3VH9zjh-bbJnStPZLxsAAAAIA"]
[Thu Feb 12 21:26:56.028701 2026] [:error] [pid 46718:tid 46744] [client 20.203.142.107:20156] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/x7.php"] [unique_id "aY3VIEdfX45LelQwruQiIwAAAdc"]
[Thu Feb 12 21:26:56.959693 2026] [:error] [pid 65064:tid 65075] [client 20.203.142.107:27676] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/x7.php"] [unique_id "aY3VIBOvRgscTcqsMBkF_gAAAMg"]
[Thu Feb 12 21:26:57.903106 2026] [:error] [pid 63416:tid 63436] [client 20.203.142.107:17495] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/x7.php"] [unique_id "aY3VIb2wmecPaCHcM2_RoAAAAY8"]
[Thu Feb 12 21:26:58.659321 2026] [:error] [pid 46675:tid 46681] [client 20.203.142.107:25246] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/menu.php"] [unique_id "aY3VIjuaQILPonWFiQlxFAAAAUM"]
[Thu Feb 12 21:26:59.342214 2026] [:error] [pid 63418:tid 63496] [client 20.203.142.107:27688] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/menu.php"] [unique_id "aY3VI9zjh-bbJnStPZLxswAAAJQ"]
[Thu Feb 12 21:27:00.391078 2026] [:error] [pid 46675:tid 46699] [client 20.203.142.107:50691] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/menu.php"] [unique_id "aY3VJDuaQILPonWFiQlxGAAAAVU"]
[Thu Feb 12 21:27:01.424869 2026] [:error] [pid 63416:tid 63429] [client 20.203.142.107:26757] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/menu.php"] [unique_id "aY3VJb2wmecPaCHcM2_RogAAAYg"]
[Thu Feb 12 21:27:03.735643 2026] [:error] [pid 63511:tid 63519] [client 20.203.142.107:17527] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY3VJ6QCQbD5BgeyIk0qBwAAAAY"]
[Thu Feb 12 21:27:04.861682 2026] [:error] [pid 63417:tid 63469] [client 20.203.142.107:50706] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY3VKP8gSb97qRMtXCL2-wAAAFQ"]
[Thu Feb 12 21:27:05.932925 2026] [:error] [pid 63511:tid 63521] [client 20.203.142.107:25216] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY3VKaQCQbD5BgeyIk0qDAAAAAg"]
[Thu Feb 12 21:27:07.864395 2026] [:error] [pid 46718:tid 46739] [client 20.203.142.107:20098] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY3VK0dfX45LelQwruQiMQAAAdI"]
[Thu Feb 12 21:27:08.956153 2026] [:error] [pid 63417:tid 63462] [client 20.203.142.107:3620] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/class.php"] [unique_id "aY3VLP8gSb97qRMtXCL3BgAAAE0"]
[Thu Feb 12 21:27:09.565339 2026] [:error] [pid 63511:tid 63536] [client 20.203.142.107:27665] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/class.php"] [unique_id "aY3VLaQCQbD5BgeyIk0qEAAAABc"]
[Thu Feb 12 21:27:10.870039 2026] [:error] [pid 46718:tid 46727] [client 20.203.142.107:47892] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/class.php"] [unique_id "aY3VLkdfX45LelQwruQiMgAAAcY"]
[Thu Feb 12 21:27:12.318082 2026] [:error] [pid 46603:tid 46622] [client 20.203.142.107:31595] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/class.php"] [unique_id "aY3VMPEi6O39v05JNJd_lwAAARE"]
[Thu Feb 12 21:27:14.545058 2026] [:error] [pid 63416:tid 63435] [client 20.203.142.107:38926] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/test1.php"] [unique_id "aY3VMr2wmecPaCHcM2_RrgAAAY4"]
[Thu Feb 12 21:27:15.651930 2026] [:error] [pid 65064:tid 65088] [client 20.203.142.107:26765] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/test1.php"] [unique_id "aY3VMxOvRgscTcqsMBkGGQAAANU"]
[Thu Feb 12 21:27:17.025407 2026] [:error] [pid 46718:tid 46722] [client 20.203.142.107:17033] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/test1.php"] [unique_id "aY3VNUdfX45LelQwruQiOgAAAcE"]
[Thu Feb 12 21:27:18.078630 2026] [:error] [pid 65064:tid 65079] [client 20.203.142.107:3873] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/test1.php"] [unique_id "aY3VNhOvRgscTcqsMBkGHQAAAMw"]
[Thu Feb 12 21:27:19.188118 2026] [:error] [pid 46718:tid 46739] [client 20.203.142.107:13962] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css/radio.php"] [unique_id "aY3VN0dfX45LelQwruQiQAAAAdI"]
[Thu Feb 12 21:27:20.327166 2026] [:error] [pid 63511:tid 63516] [client 20.203.142.107:55833] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css/radio.php"] [unique_id "aY3VOKQCQbD5BgeyIk0qJQAAAAM"]
[Thu Feb 12 21:27:22.511051 2026] [:error] [pid 63418:tid 63487] [client 20.203.142.107:13964] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css/radio.php"] [unique_id "aY3VOtzjh-bbJnStPZLxwgAAAIs"]
[Thu Feb 12 21:27:24.222120 2026] [:error] [pid 46675:tid 46681] [client 20.203.142.107:55860] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css/radio.php"] [unique_id "aY3VPDuaQILPonWFiQlxNwAAAUM"]
[Thu Feb 12 21:27:26.463890 2026] [:error] [pid 63417:tid 63455] [client 20.203.142.107:33216] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/img.php"] [unique_id "aY3VPv8gSb97qRMtXCL3FwAAAEY"]
[Thu Feb 12 21:27:34.874272 2026] [autoindex:error] [pid 63511:tid 63529] [client 20.203.142.107:48382] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 21:28:05.481529 2026] [:error] [pid 63417:tid 63468] [client 20.203.142.107:33869] [client 20.203.142.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aY3VZf8gSb97qRMtXCL3PAAAAFM"]
[Thu Feb 12 21:28:18.012619 2026] [:error] [pid 63417:tid 63453] [client 20.203.142.107:13930] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/htaccess.php"] [unique_id "aY3Vcv8gSb97qRMtXCL3TAAAAEQ"]
[Thu Feb 12 21:28:20.714816 2026] [:error] [pid 46718:tid 46736] [client 20.203.142.107:36440] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/htaccess.php"] [unique_id "aY3VdEdfX45LelQwruQilAAAAc8"]
[Thu Feb 12 21:28:21.858523 2026] [:error] [pid 63418:tid 63481] [client 20.203.142.107:39466] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/htaccess.php"] [unique_id "aY3Vddzjh-bbJnStPZLyAwAAAIU"]
[Thu Feb 12 21:28:23.411154 2026] [:error] [pid 65064:tid 65077] [client 20.203.142.107:33323] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/htaccess.php"] [unique_id "aY3VdxOvRgscTcqsMBkGRgAAAMo"]
[Thu Feb 12 21:28:24.186272 2026] [:error] [pid 65064:tid 65080] [client 20.203.142.107:33889] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/x50.php"] [unique_id "aY3VeBOvRgscTcqsMBkGRwAAAM0"]
[Thu Feb 12 21:28:25.051455 2026] [:error] [pid 46603:tid 46622] [client 20.203.142.107:25737] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/x50.php"] [unique_id "aY3VefEi6O39v05JNJd_8wAAARE"]
[Thu Feb 12 21:28:25.899154 2026] [:error] [pid 65064:tid 65083] [client 20.203.142.107:25728] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/x50.php"] [unique_id "aY3VeROvRgscTcqsMBkGTwAAANA"]
[Thu Feb 12 21:28:26.705058 2026] [:error] [pid 46603:tid 46627] [client 20.203.142.107:33874] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/x50.php"] [unique_id "aY3VevEi6O39v05JNJd_-QAAARY"]
[Thu Feb 12 21:28:27.647829 2026] [:error] [pid 63417:tid 63472] [client 20.203.142.107:36531] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fv.php"] [unique_id "aY3Ve_8gSb97qRMtXCL3WgAAAFc"]
[Thu Feb 12 21:28:28.190359 2026] [:error] [pid 46718:tid 46741] [client 20.203.142.107:23619] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fv.php"] [unique_id "aY3VfEdfX45LelQwruQingAAAdQ"]
[Thu Feb 12 21:28:29.104393 2026] [:error] [pid 46603:tid 46623] [client 20.203.142.107:25774] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fv.php"] [unique_id "aY3VffEi6O39v05JNJd__AAAARI"]
[Thu Feb 12 21:28:29.981432 2026] [:error] [pid 63418:tid 63493] [client 20.203.142.107:20909] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fv.php"] [unique_id "aY3Vfdzjh-bbJnStPZLyCAAAAJE"]
[Thu Feb 12 21:28:31.059940 2026] [:error] [pid 46603:tid 46618] [client 20.203.142.107:26726] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lsd.php"] [unique_id "aY3Vf_Ei6O39v05JNJd__wAAAQ0"]
[Thu Feb 12 21:28:31.902118 2026] [:error] [pid 46675:tid 46698] [client 20.203.142.107:39457] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lsd.php"] [unique_id "aY3VfzuaQILPonWFiQlxhgAAAVQ"]
[Thu Feb 12 21:28:32.502272 2026] [:error] [pid 46675:tid 46686] [client 20.203.142.107:51759] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lsd.php"] [unique_id "aY3VgDuaQILPonWFiQlxhwAAAUg"]
[Thu Feb 12 21:28:33.164970 2026] [:error] [pid 46675:tid 46679] [client 20.203.142.107:33898] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lsd.php"] [unique_id "aY3VgTuaQILPonWFiQlxigAAAUE"]
[Thu Feb 12 21:28:34.529892 2026] [:error] [pid 63416:tid 63426] [client 20.203.142.107:28941] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/atx.php"] [unique_id "aY3Vgr2wmecPaCHcM2_R4AAAAYU"]
[Thu Feb 12 21:28:35.589602 2026] [:error] [pid 63511:tid 63513] [client 20.203.142.107:50468] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/atx.php"] [unique_id "aY3Vg6QCQbD5BgeyIk0qVgAAAAA"]
[Thu Feb 12 21:28:37.724527 2026] [:error] [pid 63418:tid 63481] [client 20.203.142.107:13420] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/atx.php"] [unique_id "aY3Vhdzjh-bbJnStPZLyEQAAAIU"]
[Thu Feb 12 21:28:42.364089 2026] [:error] [pid 46603:tid 46627] [client 20.203.142.107:29610] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/atx.php"] [unique_id "aY3VivEi6O39v05JNJeACQAAARY"]
[Thu Feb 12 21:28:43.092717 2026] [:error] [pid 65064:tid 65074] [client 20.203.142.107:55761] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/z60.php"] [unique_id "aY3VixOvRgscTcqsMBkGagAAAMc"]
[Thu Feb 12 21:28:44.023944 2026] [:error] [pid 63417:tid 63464] [client 20.203.142.107:50435] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/z60.php"] [unique_id "aY3VjP8gSb97qRMtXCL3XQAAAE8"]
[Thu Feb 12 21:28:45.208463 2026] [:error] [pid 65064:tid 65083] [client 20.203.142.107:34993] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/z60.php"] [unique_id "aY3VjROvRgscTcqsMBkGbQAAANA"]
[Thu Feb 12 21:28:46.048347 2026] [:error] [pid 63511:tid 63536] [client 20.203.142.107:55770] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/z60.php"] [unique_id "aY3VjqQCQbD5BgeyIk0qYQAAABc"]
[Thu Feb 12 21:28:47.421202 2026] [:error] [pid 63416:tid 63424] [client 20.203.142.107:28893] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/m.php"] [unique_id "aY3Vj72wmecPaCHcM2_R9QAAAYM"]
[Thu Feb 12 21:28:48.473495 2026] [:error] [pid 46603:tid 46609] [client 20.203.142.107:34968] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/m.php"] [unique_id "aY3VkPEi6O39v05JNJeADgAAAQQ"]
[Thu Feb 12 21:28:49.366143 2026] [:error] [pid 46718:tid 46728] [client 20.203.142.107:43069] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/m.php"] [unique_id "aY3VkUdfX45LelQwruQitAAAAcc"]
[Thu Feb 12 21:28:50.103606 2026] [:error] [pid 46603:tid 46611] [client 20.203.142.107:34963] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/m.php"] [unique_id "aY3VkvEi6O39v05JNJeAEgAAAQY"]
[Thu Feb 12 21:28:50.788317 2026] [:error] [pid 63418:tid 63487] [client 20.203.142.107:48904] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lv.php"] [unique_id "aY3Vktzjh-bbJnStPZLyHQAAAIs"]
[Thu Feb 12 21:28:51.552989 2026] [:error] [pid 63511:tid 63524] [client 20.203.142.107:49949] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lv.php"] [unique_id "aY3Vk6QCQbD5BgeyIk0qZwAAAAs"]
[Thu Feb 12 21:28:52.107466 2026] [:error] [pid 63418:tid 63479] [client 20.203.142.107:21659] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lv.php"] [unique_id "aY3VlNzjh-bbJnStPZLyIQAAAIM"]
[Thu Feb 12 21:28:52.622660 2026] [:error] [pid 63416:tid 63439] [client 20.203.142.107:32769] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lv.php"] [unique_id "aY3VlL2wmecPaCHcM2_R-QAAAZI"]
[Thu Feb 12 21:28:53.281004 2026] [:error] [pid 63511:tid 63536] [client 20.203.142.107:17987] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css.php"] [unique_id "aY3VlaQCQbD5BgeyIk0qbAAAABc"]
[Thu Feb 12 21:28:53.936947 2026] [:error] [pid 46718:tid 46734] [client 20.203.142.107:55811] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css.php"] [unique_id "aY3VlUdfX45LelQwruQivQAAAc0"]
[Thu Feb 12 21:28:54.588252 2026] [:error] [pid 65064:tid 65072] [client 20.203.142.107:25231] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css.php"] [unique_id "aY3VlhOvRgscTcqsMBkGcgAAAMU"]
[Thu Feb 12 21:28:55.190412 2026] [:error] [pid 63511:tid 63513] [client 20.203.142.107:55828] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css.php"] [unique_id "aY3Vl6QCQbD5BgeyIk0qcAAAAAA"]
[Thu Feb 12 21:28:55.799121 2026] [:error] [pid 63511:tid 63531] [client 20.203.142.107:15542] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aY3Vl6QCQbD5BgeyIk0qcgAAABI"]
[Thu Feb 12 21:28:56.865181 2026] [:error] [pid 46675:tid 46691] [client 20.203.142.107:17066] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aY3VmDuaQILPonWFiQlxlQAAAU0"]
[Thu Feb 12 21:28:57.552207 2026] [:error] [pid 46675:tid 46679] [client 20.203.142.107:3913] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aY3VmTuaQILPonWFiQlxlgAAAUE"]
[Thu Feb 12 21:28:59.471265 2026] [:error] [pid 46603:tid 46611] [client 20.203.142.107:55869] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aY3Vm_Ei6O39v05JNJeAGwAAAQY"]
[Thu Feb 12 21:29:00.438241 2026] [:error] [pid 46603:tid 46607] [client 20.203.142.107:16509] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/w.php"] [unique_id "aY3VnPEi6O39v05JNJeAHQAAAQI"]
[Thu Feb 12 21:29:01.604492 2026] [:error] [pid 46718:tid 46725] [client 20.203.142.107:14733] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/w.php"] [unique_id "aY3VnUdfX45LelQwruQixgAAAcQ"]
[Thu Feb 12 21:29:02.289937 2026] [:error] [pid 46603:tid 46627] [client 20.203.142.107:26798] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/w.php"] [unique_id "aY3VnvEi6O39v05JNJeAHwAAARY"]
[Thu Feb 12 21:29:04.943299 2026] [:error] [pid 63418:tid 63488] [client 20.203.142.107:3823] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/w.php"] [unique_id "aY3VoNzjh-bbJnStPZLyLgAAAIw"]
[Thu Feb 12 21:29:05.989063 2026] [:error] [pid 46675:tid 46688] [client 20.203.142.107:20112] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gmo.php"] [unique_id "aY3VoTuaQILPonWFiQlxnQAAAUo"]
[Thu Feb 12 21:29:07.970292 2026] [:error] [pid 63418:tid 63487] [client 20.203.142.107:14381] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gmo.php"] [unique_id "aY3Vo9zjh-bbJnStPZLyNAAAAIs"]
[Thu Feb 12 21:29:09.428939 2026] [:error] [pid 46718:tid 46723] [client 20.203.142.107:51221] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gmo.php"] [unique_id "aY3VpUdfX45LelQwruQizAAAAcI"]
[Thu Feb 12 21:29:10.101263 2026] [:error] [pid 63418:tid 63489] [client 20.203.142.107:50417] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gmo.php"] [unique_id "aY3Vptzjh-bbJnStPZLyNwAAAI0"]
[Thu Feb 12 21:29:11.188841 2026] [:error] [pid 63511:tid 63520] [client 20.203.142.107:14702] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ww1.php"] [unique_id "aY3Vp6QCQbD5BgeyIk0qgAAAAAc"]
[Thu Feb 12 21:29:11.819308 2026] [:error] [pid 46718:tid 46728] [client 20.203.142.107:40754] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ww1.php"] [unique_id "aY3Vp0dfX45LelQwruQizwAAAcc"]
[Fri Feb 13 01:50:21.543983 2026] [autoindex:error] [pid 37512:tid 37610] [client 20.215.248.189:20231] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 13 01:50:21.800974 2026] [:error] [pid 37512:tid 37619] [client 20.215.248.189:20231] [client 20.215.248.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/moon.php"] [unique_id "aY4S3dDe69znS-f6vSZRVQAAAAo"]
[Fri Feb 13 01:51:11.538793 2026] [autoindex:error] [pid 23410:tid 23420] [client 20.215.248.189:50506] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 13 01:51:34.048990 2026] [proxy_fcgi:error] [pid 37511:tid 37581] [client 20.215.248.189:20842] AH01071: Got error 'PHP message: PHP Warning:  Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/crosscen/public_html/wp-includes/blocks/index.php on line 8PHP message: PHP Warning:  Use of undefined constant WPINC - assumed 'WPINC' (this will throw an Error in a future version of PHP) in /home/crosscen/public_html/wp-includes/blocks/index.php on line 8PHP message: PHP Warning:  require(ABSPATHWPINC/blocks/legacy-widget.php): failed to open stream: No such file or directory in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11PHP message: PHP Warning:  require(ABSPATHWPINC/blocks/legacy-widget.php): failed to open stream: No such file or directory in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11PHP message: PHP Fatal error:  require(): Failed opening required 'ABSPATHWPINC/blocks/legacy-widget.php' (include_path='.:') in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11'
[Fri Feb 13 01:51:44.599356 2026] [autoindex:error] [pid 37511:tid 37592] [client 20.215.248.189:31281] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 13 01:51:46.428029 2026] [:error] [pid 23410:tid 23436] [client 20.215.248.189:28504] [client 20.215.248.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aY4TMhXZP6NFBacuW_0ucAAAAJg"]
[Fri Feb 13 01:51:56.445377 2026] [autoindex:error] [pid 23410:tid 23414] [client 20.215.248.189:43884] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 13 01:52:21.053508 2026] [autoindex:error] [pid 37512:tid 37618] [client 20.215.248.189:43801] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 13 01:52:25.166699 2026] [:error] [pid 23410:tid 23432] [client 20.215.248.189:27962] [client 20.215.248.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aY4TWRXZP6NFBacuW_0u5QAAAJQ"]
[Fri Feb 13 01:52:38.979206 2026] [:error] [pid 37510:tid 37529] [client 20.215.248.189:4643] [client 20.215.248.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aY4TZsUrqDPNSf1wYBWfYgAAAY0"]
[Fri Feb 13 01:52:55.690908 2026] [autoindex:error] [pid 37511:tid 37590] [client 20.215.248.189:36199] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 13 01:53:25.507705 2026] [:error] [pid 37512:tid 37635] [client 20.215.248.189:19298] [client 20.215.248.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/about.php"] [unique_id "aY4TldDe69znS-f6vSZScQAAABg"]
[Fri Feb 13 09:33:08.615437 2026] [:error] [pid 49223:tid 49255] [client 158.158.100.90:46283] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a4.php"] [unique_id "aY5_VB8A_fZBamNLnfWXjgAAABc"]
[Fri Feb 13 09:33:10.633472 2026] [:error] [pid 51243:tid 51252] [client 158.158.100.90:31524] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a4.php"] [unique_id "aY5_Vsim7ZTAHzi7xZswBgAAAQc"]
[Fri Feb 13 09:33:11.625882 2026] [:error] [pid 49224:tid 49278] [client 158.158.100.90:19706] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a4.php"] [unique_id "aY5_V9iAvPoWmw5YhwkNDAAAAEs"]
[Fri Feb 13 09:33:13.036951 2026] [:error] [pid 49225:tid 49301] [client 158.158.100.90:48663] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a4.php"] [unique_id "aY5_WTwH8-zGxtAd3jtPZgAAAIc"]
[Fri Feb 13 09:33:14.009631 2026] [:error] [pid 51243:tid 51253] [client 158.158.100.90:62873] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lp6.php"] [unique_id "aY5_Wsim7ZTAHzi7xZswFQAAAQg"]
[Fri Feb 13 09:33:15.563957 2026] [:error] [pid 49335:tid 49357] [client 158.158.100.90:48661] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lp6.php"] [unique_id "aY5_W6p--SFY2nwOiqnGpwAAANQ"]
[Fri Feb 13 09:33:19.432005 2026] [:error] [pid 49335:tid 49345] [client 158.158.100.90:19701] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lp6.php"] [unique_id "aY5_X6p--SFY2nwOiqnGtQAAAMg"]
[Fri Feb 13 09:33:20.777879 2026] [:error] [pid 49335:tid 49360] [client 158.158.100.90:48642] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lp6.php"] [unique_id "aY5_YKp--SFY2nwOiqnGuwAAANc"]
[Fri Feb 13 09:33:23.440188 2026] [:error] [pid 49335:tid 49349] [client 158.158.100.90:31523] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/core.php"] [unique_id "aY5_Y6p--SFY2nwOiqnGwwAAAMw"]
[Fri Feb 13 09:33:24.900802 2026] [:error] [pid 51243:tid 51260] [client 158.158.100.90:19705] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/core.php"] [unique_id "aY5_ZMim7ZTAHzi7xZswIwAAAQ8"]
[Fri Feb 13 09:33:29.656317 2026] [:error] [pid 49223:tid 49239] [client 158.158.100.90:48682] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/core.php"] [unique_id "aY5_aR8A_fZBamNLnfWXsQAAAAc"]
[Fri Feb 13 09:33:32.827734 2026] [:error] [pid 49223:tid 49234] [client 158.158.100.90:21793] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/core.php"] [unique_id "aY5_bB8A_fZBamNLnfWXtAAAAAI"]
[Fri Feb 13 09:33:34.115061 2026] [:error] [pid 49335:tid 49351] [client 158.158.100.90:62883] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mini.php"] [unique_id "aY5_bqp--SFY2nwOiqnG3QAAAM4"]
[Fri Feb 13 09:33:46.129377 2026] [:error] [pid 49225:tid 49308] [client 158.158.100.90:48640] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mini.php"] [unique_id "aY5_ejwH8-zGxtAd3jtQBQAAAI4"]
[Fri Feb 13 09:33:47.686457 2026] [:error] [pid 51243:tid 51267] [client 158.158.100.90:19658] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mini.php"] [unique_id "aY5_e8im7ZTAHzi7xZswTQAAARY"]
[Fri Feb 13 09:33:49.371978 2026] [:error] [pid 49335:tid 49356] [client 158.158.100.90:48686] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "aY5_fap--SFY2nwOiqnHFwAAANM"]
[Fri Feb 13 09:33:50.887880 2026] [:error] [pid 49223:tid 49239] [client 158.158.100.90:19671] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "aY5_fh8A_fZBamNLnfWX5wAAAAc"]
[Fri Feb 13 09:33:51.845228 2026] [:error] [pid 51243:tid 51267] [client 158.158.100.90:48700] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "aY5_f8im7ZTAHzi7xZswbQAAARY"]
[Fri Feb 13 09:33:52.901785 2026] [:error] [pid 51243:tid 51254] [client 158.158.100.90:46280] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "aY5_gMim7ZTAHzi7xZswcAAAAQk"]
[Fri Feb 13 09:33:53.926634 2026] [:error] [pid 51243:tid 51255] [client 158.158.100.90:19651] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "aY5_gcim7ZTAHzi7xZswdAAAAQo"]
[Fri Feb 13 09:33:55.445725 2026] [:error] [pid 49335:tid 49347] [client 158.158.100.90:36496] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "aY5_g6p--SFY2nwOiqnHKQAAAMo"]
[Fri Feb 13 09:33:57.135015 2026] [:error] [pid 49225:tid 49296] [client 158.158.100.90:48683] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "aY5_hTwH8-zGxtAd3jtQagAAAII"]
[Fri Feb 13 09:33:58.099404 2026] [:error] [pid 49225:tid 49299] [client 158.158.100.90:62882] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "aY5_hjwH8-zGxtAd3jtQcAAAAIU"]
[Fri Feb 13 09:33:59.401476 2026] [:error] [pid 51243:tid 51249] [client 158.158.100.90:21769] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/2.php"] [unique_id "aY5_h8im7ZTAHzi7xZswfwAAAQQ"]
[Fri Feb 13 09:34:00.097040 2026] [:error] [pid 49224:tid 49289] [client 158.158.100.90:62857] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/2.php"] [unique_id "aY5_iNiAvPoWmw5YhwkNswAAAFY"]
[Fri Feb 13 09:34:01.352267 2026] [:error] [pid 49224:tid 49273] [client 158.158.100.90:61435] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/2.php"] [unique_id "aY5_idiAvPoWmw5YhwkNtwAAAEY"]
[Fri Feb 13 09:34:02.498148 2026] [:error] [pid 49335:tid 49358] [client 158.158.100.90:19692] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/2.php"] [unique_id "aY5_iqp--SFY2nwOiqnHPAAAANU"]
[Fri Feb 13 09:35:08.596673 2026] [:error] [pid 49335:tid 49355] [client 158.158.100.90:31533] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ot.php"] [unique_id "aY5_zKp--SFY2nwOiqnHtAAAANI"]
[Fri Feb 13 09:35:10.638942 2026] [:error] [pid 49223:tid 49243] [client 158.158.100.90:55108] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ot.php"] [unique_id "aY5_zh8A_fZBamNLnfWYyQAAAAs"]
[Fri Feb 13 09:35:11.437681 2026] [:error] [pid 49224:tid 49286] [client 158.158.100.90:30759] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ot.php"] [unique_id "aY5_z9iAvPoWmw5YhwkOkgAAAFM"]
[Fri Feb 13 09:35:13.728820 2026] [:error] [pid 51243:tid 51253] [client 158.158.100.90:36495] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ot.php"] [unique_id "aY5_0cim7ZTAHzi7xZsxEQAAAQg"]
[Fri Feb 13 09:35:15.396887 2026] [:error] [pid 49225:tid 49295] [client 158.158.100.90:21764] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/test.php"] [unique_id "aY5_0zwH8-zGxtAd3jtRcgAAAIE"]
[Fri Feb 13 09:35:16.856292 2026] [:error] [pid 49335:tid 49341] [client 158.158.100.90:62872] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/test.php"] [unique_id "aY5_1Kp--SFY2nwOiqnHwwAAAMQ"]
[Fri Feb 13 09:35:18.519339 2026] [:error] [pid 49223:tid 49251] [client 158.158.100.90:35472] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/test.php"] [unique_id "aY5_1h8A_fZBamNLnfWY1wAAABM"]
[Fri Feb 13 09:35:21.433796 2026] [:error] [pid 49224:tid 49281] [client 158.158.100.90:61396] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/test.php"] [unique_id "aY5_2diAvPoWmw5YhwkOrwAAAE4"]
[Fri Feb 13 09:35:24.190127 2026] [:error] [pid 49223:tid 49244] [client 158.158.100.90:46335] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pass.php"] [unique_id "aY5_3B8A_fZBamNLnfWY7AAAAAw"]
[Fri Feb 13 09:35:25.925215 2026] [:error] [pid 49335:tid 49346] [client 158.158.100.90:31545] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pass.php"] [unique_id "aY5_3ap--SFY2nwOiqnH1wAAAMk"]
[Fri Feb 13 09:35:28.668043 2026] [:error] [pid 51243:tid 51254] [client 158.158.100.90:19676] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pass.php"] [unique_id "aY5_4Mim7ZTAHzi7xZsxLAAAAQk"]
[Fri Feb 13 09:35:33.101547 2026] [:error] [pid 49224:tid 49277] [client 158.158.100.90:19693] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pass.php"] [unique_id "aY5_5diAvPoWmw5YhwkOwQAAAEo"]
[Fri Feb 13 12:41:12.045750 2026] [:error] [pid 49224:tid 49274] [client 172.98.33.217:36963] [client 172.98.33.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.217, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6raNiAvPoWmw5YhwlzIQAAAEc"], referer: https://www.google.com/
[Fri Feb 13 12:41:13.225355 2026] [:error] [pid 18097:tid 18108] [client 172.98.33.231:34473] [client 172.98.33.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.231, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6raXFzYiQ_BfaDDlauMAAAAYk"], referer: https://www.google.com/
[Fri Feb 13 12:41:14.402974 2026] [:error] [pid 49223:tid 49236] [client 172.98.33.237:31443] [client 172.98.33.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.237, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rah8A_fZBamNLnfXbvAAAAAQ"], referer: https://www.google.com/
[Fri Feb 13 12:41:15.603263 2026] [:error] [pid 49225:tid 49312] [client 172.98.33.224:36873] [client 172.98.33.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.224, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6razwH8-zGxtAd3jug8gAAAJI"], referer: https://www.google.com/
[Fri Feb 13 12:41:16.798693 2026] [:error] [pid 51243:tid 51261] [client 172.98.33.233:60371] [client 172.98.33.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.233, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rbMim7ZTAHzi7xZt0WgAAARA"], referer: https://www.google.com/
[Fri Feb 13 12:41:17.960742 2026] [:error] [pid 18097:tid 18099] [client 172.98.33.236:53173] [client 172.98.33.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.236, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rbXFzYiQ_BfaDDlauQAAAAYA"], referer: https://www.google.com/
[Fri Feb 13 12:41:40.193019 2026] [:error] [pid 51243:tid 51257] [client 172.98.33.232:62807] [client 172.98.33.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.232, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rhMim7ZTAHzi7xZt0hwAAAQw"], referer: https://www.google.com/
[Fri Feb 13 12:41:41.401819 2026] [:error] [pid 49224:tid 49281] [client 172.98.33.213:60235] [client 172.98.33.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.213, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rhdiAvPoWmw5YhwlzQQAAAE4"], referer: https://www.google.com/
[Fri Feb 13 12:41:42.576651 2026] [:error] [pid 18097:tid 18120] [client 172.98.33.239:44249] [client 172.98.33.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.239, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rhnFzYiQ_BfaDDlauZwAAAZU"], referer: https://www.google.com/
[Fri Feb 13 12:41:43.755574 2026] [:error] [pid 18097:tid 18110] [client 172.98.33.220:62855] [client 172.98.33.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.220, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rh3FzYiQ_BfaDDlaubQAAAYs"], referer: https://www.google.com/
[Fri Feb 13 12:41:44.918018 2026] [:error] [pid 46821:tid 46836] [client 172.98.33.239:50977] [client 172.98.33.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.239, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6riI6G1N5YSq0J0geySAAAAU0"], referer: https://www.google.com/
[Fri Feb 13 12:41:46.074657 2026] [:error] [pid 18097:tid 18103] [client 172.98.33.237:62307] [client 172.98.33.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.237, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rinFzYiQ_BfaDDlauegAAAYQ"], referer: https://www.google.com/
[Fri Feb 13 12:41:47.230713 2026] [:error] [pid 18097:tid 18110] [client 172.98.33.239:23369] [client 172.98.33.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.239, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6ri3FzYiQ_BfaDDlaufQAAAYs"], referer: https://www.google.com/
[Fri Feb 13 12:41:49.687750 2026] [:error] [pid 49335:tid 49360] [client 172.98.33.230:53287] [client 172.98.33.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.230, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rjap--SFY2nwOiqkLKgAAANc"], referer: https://www.google.com/
[Fri Feb 13 12:42:11.929936 2026] [:error] [pid 49225:tid 49317] [client 172.98.33.222:26805] [client 172.98.33.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.222, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rozwH8-zGxtAd3juhQAAAAJc"], referer: https://www.google.com/
[Fri Feb 13 12:42:13.200706 2026] [:error] [pid 49223:tid 49234] [client 172.98.33.226:53371] [client 172.98.33.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.226, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rpR8A_fZBamNLnfXcFgAAAAI"], referer: https://www.google.com/
[Fri Feb 13 12:42:14.387216 2026] [:error] [pid 49225:tid 49301] [client 172.98.33.229:26525] [client 172.98.33.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.229, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rpjwH8-zGxtAd3juhRgAAAIc"], referer: https://www.google.com/
[Fri Feb 13 12:42:15.682795 2026] [:error] [pid 49335:tid 49357] [client 172.98.33.233:31615] [client 172.98.33.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.233, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rp6p--SFY2nwOiqkLTgAAANQ"], referer: https://www.google.com/
[Fri Feb 13 12:42:16.892175 2026] [:error] [pid 49335:tid 49354] [client 172.98.33.230:20219] [client 172.98.33.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.230, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rqKp--SFY2nwOiqkLVAAAANE"], referer: https://www.google.com/
[Fri Feb 13 12:42:18.075001 2026] [:error] [pid 49335:tid 49349] [client 172.98.33.235:24967] [client 172.98.33.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.235, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rqqp--SFY2nwOiqkLWQAAAMw"], referer: https://www.google.com/
[Fri Feb 13 12:42:19.264981 2026] [:error] [pid 51243:tid 51251] [client 172.98.33.236:47703] [client 172.98.33.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.236, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rq8im7ZTAHzi7xZt0sAAAAQY"], referer: https://www.google.com/
[Fri Feb 13 12:42:20.452786 2026] [:error] [pid 18097:tid 18117] [client 172.98.33.220:61751] [client 172.98.33.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.220, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rrHFzYiQ_BfaDDlauowAAAZI"], referer: https://www.google.com/
[Fri Feb 13 12:42:21.614673 2026] [:error] [pid 46821:tid 46830] [client 172.98.33.231:27655] [client 172.98.33.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.231, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rrY6G1N5YSq0J0geyggAAAUc"], referer: https://www.google.com/
[Fri Feb 13 12:42:22.844466 2026] [:error] [pid 49224:tid 49284] [client 172.98.33.231:37351] [client 172.98.33.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.231, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rrtiAvPoWmw5YhwlzbgAAAFE"], referer: https://www.google.com/
[Fri Feb 13 12:42:24.021030 2026] [:error] [pid 49223:tid 49249] [client 172.98.33.218:52213] [client 172.98.33.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.218, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rsB8A_fZBamNLnfXcHgAAABE"], referer: https://www.google.com/
[Fri Feb 13 12:42:25.230359 2026] [:error] [pid 49335:tid 49344] [client 172.98.33.214:27797] [client 172.98.33.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.214, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rsap--SFY2nwOiqkLYgAAAMc"], referer: https://www.google.com/
[Fri Feb 13 12:42:26.420054 2026] [:error] [pid 49225:tid 49300] [client 172.98.33.231:51441] [client 172.98.33.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.231, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rsjwH8-zGxtAd3juhXgAAAIY"], referer: https://www.google.com/
[Fri Feb 13 12:42:27.581380 2026] [:error] [pid 18097:tid 18114] [client 172.98.33.219:60055] [client 172.98.33.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.219, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rs3FzYiQ_BfaDDlauvwAAAY8"], referer: https://www.google.com/
[Fri Feb 13 12:42:28.741865 2026] [:error] [pid 49224:tid 49279] [client 172.98.33.238:28973] [client 172.98.33.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.238, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rtNiAvPoWmw5YhwlzewAAAEw"], referer: https://www.google.com/
[Fri Feb 13 12:42:29.934738 2026] [:error] [pid 49224:tid 49269] [client 172.98.33.221:57353] [client 172.98.33.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.221, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rtdiAvPoWmw5YhwlzfgAAAEI"], referer: https://www.google.com/
[Fri Feb 13 12:42:31.110752 2026] [:error] [pid 18097:tid 18121] [client 172.98.33.231:53455] [client 172.98.33.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.231, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rt3FzYiQ_BfaDDlauzAAAAZY"], referer: https://www.google.com/
[Fri Feb 13 12:42:32.301335 2026] [:error] [pid 49225:tid 49312] [client 172.98.33.218:22519] [client 172.98.33.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.218, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6ruDwH8-zGxtAd3juhcQAAAJI"], referer: https://www.google.com/
[Fri Feb 13 12:42:33.445640 2026] [:error] [pid 49223:tid 49253] [client 172.98.33.233:35159] [client 172.98.33.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.233, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6ruR8A_fZBamNLnfXcKgAAABU"], referer: https://www.google.com/
[Fri Feb 13 12:42:34.627139 2026] [:error] [pid 49224:tid 49288] [client 172.98.33.234:46917] [client 172.98.33.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.234, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rutiAvPoWmw5YhwlzjAAAAFU"], referer: https://www.google.com/
[Fri Feb 13 12:42:35.772789 2026] [:error] [pid 46821:tid 46840] [client 172.98.33.234:21869] [client 172.98.33.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.234, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6ru46G1N5YSq0J0geylgAAAVE"], referer: https://www.google.com/
[Fri Feb 13 12:42:36.932902 2026] [:error] [pid 49335:tid 49357] [client 172.98.33.233:45063] [client 172.98.33.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.233, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rvKp--SFY2nwOiqkLcgAAANQ"], referer: https://www.google.com/
[Fri Feb 13 12:42:38.131894 2026] [:error] [pid 46821:tid 46845] [client 172.98.33.218:55223] [client 172.98.33.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.218, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rvo6G1N5YSq0J0geymAAAAVY"], referer: https://www.google.com/
[Fri Feb 13 12:42:39.321897 2026] [:error] [pid 51243:tid 51262] [client 172.98.33.239:46283] [client 172.98.33.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.239, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rv8im7ZTAHzi7xZt0xAAAARE"], referer: https://www.google.com/
[Fri Feb 13 12:42:40.473206 2026] [:error] [pid 46821:tid 46844] [client 172.98.33.229:63365] [client 172.98.33.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.229, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rwI6G1N5YSq0J0geymQAAAVU"], referer: https://www.google.com/
[Fri Feb 13 12:42:41.622489 2026] [:error] [pid 49224:tid 49273] [client 172.98.33.235:39731] [client 172.98.33.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.235, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rwdiAvPoWmw5YhwlzmAAAAEY"], referer: https://www.google.com/
[Fri Feb 13 12:42:42.782894 2026] [:error] [pid 51243:tid 51254] [client 172.98.33.227:39423] [client 172.98.33.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.227, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rwsim7ZTAHzi7xZt0xQAAAQk"], referer: https://www.google.com/
[Fri Feb 13 12:42:43.954671 2026] [:error] [pid 49223:tid 49243] [client 172.98.33.213:46015] [client 172.98.33.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.213, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rwx8A_fZBamNLnfXcMwAAAAs"], referer: https://www.google.com/
[Fri Feb 13 12:42:45.128063 2026] [:error] [pid 46821:tid 46836] [client 172.98.33.238:24979] [client 172.98.33.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.238, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rxY6G1N5YSq0J0geyogAAAU0"], referer: https://www.google.com/
[Fri Feb 13 12:42:46.304746 2026] [:error] [pid 51243:tid 51265] [client 172.98.33.224:45773] [client 172.98.33.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.224, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rxsim7ZTAHzi7xZt0yAAAARQ"], referer: https://www.google.com/
[Fri Feb 13 12:42:47.544231 2026] [:error] [pid 18097:tid 18104] [client 172.98.33.226:63147] [client 172.98.33.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.226, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rx3FzYiQ_BfaDDlau6wAAAYU"], referer: https://www.google.com/
[Fri Feb 13 12:42:48.710760 2026] [:error] [pid 18097:tid 18116] [client 172.98.33.239:43357] [client 172.98.33.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.239, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6ryHFzYiQ_BfaDDlau7gAAAZE"], referer: https://www.google.com/
[Fri Feb 13 12:42:49.867610 2026] [:error] [pid 51243:tid 51266] [client 172.98.33.222:30113] [client 172.98.33.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.222, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6rycim7ZTAHzi7xZt00QAAARU"], referer: https://www.google.com/
[Fri Feb 13 12:43:21.028658 2026] [:error] [pid 49224:tid 49274] [client 172.98.33.229:62183] [client 172.98.33.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.229, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6r6diAvPoWmw5Yhwlz_AAAAEc"], referer: https://www.google.com/
[Fri Feb 13 12:43:22.329301 2026] [:error] [pid 49335:tid 49360] [client 172.98.33.227:35101] [client 172.98.33.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.227, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6r6qp--SFY2nwOiqkLtQAAANc"], referer: https://www.google.com/
[Fri Feb 13 12:43:23.491226 2026] [:error] [pid 49224:tid 49282] [client 172.98.33.221:31323] [client 172.98.33.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.221, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6r69iAvPoWmw5Yhwl0AAAAAE8"], referer: https://www.google.com/
[Fri Feb 13 12:43:24.673368 2026] [:error] [pid 46821:tid 46828] [client 172.98.33.230:28017] [client 172.98.33.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.230, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6r7I6G1N5YSq0J0gey1wAAAUU"], referer: https://www.google.com/
[Fri Feb 13 12:43:25.836613 2026] [:error] [pid 18097:tid 18106] [client 172.98.33.217:63101] [client 172.98.33.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.217, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6r7XFzYiQ_BfaDDlavUwAAAYc"], referer: https://www.google.com/
[Fri Feb 13 12:43:26.998770 2026] [:error] [pid 18097:tid 18104] [client 172.98.33.223:29747] [client 172.98.33.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.223, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6r7nFzYiQ_BfaDDlavVQAAAYU"], referer: https://www.google.com/
[Fri Feb 13 12:43:28.192982 2026] [:error] [pid 51243:tid 51253] [client 172.98.33.219:36779] [client 172.98.33.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.219, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6r8Mim7ZTAHzi7xZt1GwAAAQg"], referer: https://www.google.com/
[Fri Feb 13 12:43:29.373991 2026] [:error] [pid 46821:tid 46833] [client 172.98.33.219:62467] [client 172.98.33.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.219, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6r8Y6G1N5YSq0J0gey4gAAAUo"], referer: https://www.google.com/
[Fri Feb 13 12:43:30.541110 2026] [:error] [pid 49223:tid 49236] [client 172.98.33.236:26969] [client 172.98.33.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.236, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6r8h8A_fZBamNLnfXciAAAAAQ"], referer: https://www.google.com/
[Fri Feb 13 12:43:32.746428 2026] [:error] [pid 49224:tid 49282] [client 172.98.33.229:26605] [client 172.98.33.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.229, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6r9NiAvPoWmw5Yhwl0EwAAAE8"], referer: https://www.google.com/
[Fri Feb 13 12:43:37.081837 2026] [:error] [pid 51243:tid 51257] [client 172.98.33.228:56539] [client 172.98.33.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.228, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6r-cim7ZTAHzi7xZt1KQAAAQw"], referer: https://www.google.com/
[Fri Feb 13 12:43:38.270082 2026] [:error] [pid 46821:tid 46829] [client 172.98.33.227:58593] [client 172.98.33.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.227, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6r-o6G1N5YSq0J0gey8gAAAUY"], referer: https://www.google.com/
[Fri Feb 13 12:43:39.491863 2026] [:error] [pid 46821:tid 46833] [client 172.98.33.229:49173] [client 172.98.33.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.229, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6r-46G1N5YSq0J0gezBwAAAUo"], referer: https://www.google.com/
[Fri Feb 13 12:43:40.670853 2026] [:error] [pid 49224:tid 49288] [client 172.98.33.228:61171] [client 172.98.33.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.228, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6r_NiAvPoWmw5Yhwl0IQAAAFU"], referer: https://www.google.com/
[Fri Feb 13 12:43:41.892061 2026] [:error] [pid 51243:tid 51255] [client 172.98.33.227:46877] [client 172.98.33.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.227, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6r_cim7ZTAHzi7xZt1QwAAAQo"], referer: https://www.google.com/
[Fri Feb 13 12:44:04.160248 2026] [:error] [pid 49335:tid 49341] [client 172.98.33.219:61361] [client 172.98.33.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.219, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6sFKp--SFY2nwOiqkMAgAAAMQ"], referer: https://www.google.com/
[Fri Feb 13 12:44:05.395072 2026] [:error] [pid 49335:tid 49359] [client 172.98.33.240:50441] [client 172.98.33.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.240, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6sFap--SFY2nwOiqkMBAAAANY"], referer: https://www.google.com/
[Fri Feb 13 12:44:06.572346 2026] [:error] [pid 51243:tid 51248] [client 172.98.33.232:27793] [client 172.98.33.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.232, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6sFsim7ZTAHzi7xZt1WwAAAQM"], referer: https://www.google.com/
[Fri Feb 13 12:45:37.735889 2026] [:error] [pid 49225:tid 49308] [client 172.98.33.217:33413] [client 172.98.33.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.217, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6scTwH8-zGxtAd3juikgAAAI4"], referer: https://www.google.com/
[Fri Feb 13 12:46:00.355226 2026] [:error] [pid 51243:tid 51251] [client 172.98.33.224:46463] [client 172.98.33.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.224, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6siMim7ZTAHzi7xZt1yAAAAQY"], referer: https://www.google.com/
[Fri Feb 13 12:47:22.675834 2026] [:error] [pid 18097:tid 18106] [client 172.98.33.224:61301] [client 172.98.33.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.224, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6s2nFzYiQ_BfaDDlaxHAAAAYc"], referer: https://www.google.com/
[Fri Feb 13 12:47:24.141666 2026] [:error] [pid 49224:tid 49290] [client 172.98.33.232:40799] [client 172.98.33.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.232, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6s3NiAvPoWmw5Yhwl1WQAAAFc"], referer: https://www.google.com/
[Fri Feb 13 12:47:25.324289 2026] [:error] [pid 49223:tid 49252] [client 172.98.33.234:27015] [client 172.98.33.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.234, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6s3R8A_fZBamNLnfXdswAAABQ"], referer: https://www.google.com/
[Fri Feb 13 12:47:26.538491 2026] [:error] [pid 51243:tid 51255] [client 172.98.33.233:63439] [client 172.98.33.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.233, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6s3sim7ZTAHzi7xZt2BQAAAQo"], referer: https://www.google.com/
[Fri Feb 13 12:47:27.688691 2026] [:error] [pid 49225:tid 49304] [client 172.98.33.236:21733] [client 172.98.33.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.236, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6s3zwH8-zGxtAd3jujAQAAAIo"], referer: https://www.google.com/
[Fri Feb 13 12:47:28.864939 2026] [:error] [pid 49224:tid 49267] [client 172.98.33.218:48163] [client 172.98.33.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.218, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6s4NiAvPoWmw5Yhwl1eAAAAEA"], referer: https://www.google.com/
[Fri Feb 13 12:48:00.036678 2026] [:error] [pid 49224:tid 49271] [client 172.98.33.219:34319] [client 172.98.33.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.219, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6tANiAvPoWmw5Yhwl17AAAAEQ"], referer: https://www.google.com/
[Fri Feb 13 12:48:52.388664 2026] [:error] [pid 49223:tid 49238] [client 172.98.33.220:39599] [client 172.98.33.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.220, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6tNB8A_fZBamNLnfXeVwAAAAY"], referer: https://www.google.com/
[Fri Feb 13 12:48:53.636788 2026] [:error] [pid 46821:tid 46839] [client 172.98.33.215:64239] [client 172.98.33.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.215, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6tNY6G1N5YSq0J0ge0rQAAAVA"], referer: https://www.google.com/
[Fri Feb 13 12:49:24.805721 2026] [:error] [pid 49224:tid 49279] [client 172.98.33.235:54575] [client 172.98.33.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.235, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6tVNiAvPoWmw5Yhwl2sQAAAEw"], referer: https://www.google.com/
[Fri Feb 13 12:49:26.019065 2026] [:error] [pid 18097:tid 18114] [client 172.98.33.226:33633] [client 172.98.33.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.226, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6tVnFzYiQ_BfaDDlaySwAAAY8"], referer: https://www.google.com/
[Fri Feb 13 12:49:27.204910 2026] [:error] [pid 49335:tid 49344] [client 172.98.33.214:23781] [client 172.98.33.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.214, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6tV6p--SFY2nwOiqkOnwAAAMc"], referer: https://www.google.com/
[Fri Feb 13 12:49:28.439923 2026] [:error] [pid 49225:tid 49295] [client 172.98.33.216:53097] [client 172.98.33.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.216, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6tWDwH8-zGxtAd3jujvgAAAIE"], referer: https://www.google.com/
[Fri Feb 13 12:49:29.613294 2026] [:error] [pid 18097:tid 18116] [client 172.98.33.236:22979] [client 172.98.33.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.236, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aY6tWXFzYiQ_BfaDDlayUQAAAZE"], referer: https://www.google.com/
[Fri Feb 13 14:23:56.861767 2026] [:error] [pid 51243:tid 51247] [client 104.28.164.218:23516] [client 104.28.164.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/style.php"] [unique_id "aY7DfMim7ZTAHzi7xZuOigAAAQI"]
[Mon Feb 16 11:22:03.786745 2026] [authz_core:error] [pid 4455:tid 4480] [client 159.65.144.72:48488] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Feb 16 11:22:09.242428 2026] [:error] [pid 4347:tid 4377] [client 159.65.144.72:58448] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aZKNYTFcjv6pEAnSEicSXwAAAAk"]
[Mon Feb 16 11:22:13.236509 2026] [:error] [pid 4455:tid 4477] [client 159.65.144.72:58458] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aZKNZQNa-4dvQCL0rur0PAAAANQ"]
[Mon Feb 16 11:22:20.732750 2026] [:error] [pid 26648:tid 26669] [client 159.65.144.72:36614] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aZKNbDT55fUixS3gmyhduwAAAZA"]
[Mon Feb 16 16:45:53.020736 2026] [:error] [pid 4347:tid 4378] [client 20.194.153.120:22235] [client 20.194.153.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.194.153.120, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aZLZQTFcjv6pEAnSEid0OgAAAAo"]
[Wed Feb 18 06:04:52.550190 2026] [:error] [pid 21847:tid 21872] [client 20.215.67.86:7230] [client 20.215.67.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZTmBPy9A5wy4LuXmJ271gAAAA4"]
[Fri Feb 20 16:57:01.020331 2026] [autoindex:error] [pid 54552:tid 54570] [client 20.220.13.222:3687] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 20 16:57:34.486342 2026] [:error] [pid 46012:tid 46022] [client 20.220.13.222:3649] [client 20.220.13.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZgh_jXz-GTvuxLwgUH1wwAAAUg"]
[Fri Feb 20 16:58:27.089417 2026] [:error] [pid 46012:tid 46017] [client 20.220.13.222:3604] [client 20.220.13.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZgiMzXz-GTvuxLwgUH2NQAAAUM"]
[Fri Feb 20 16:58:35.801092 2026] [:error] [pid 54460:tid 54486] [client 20.220.13.222:3732] [client 20.220.13.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aZgiO8oUiaZ-Z7V-F98xyAAAABU"]
[Fri Feb 20 16:58:42.125807 2026] [autoindex:error] [pid 46012:tid 46025] [client 20.220.13.222:3667] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 20 16:58:42.337558 2026] [:error] [pid 46012:tid 46015] [client 20.220.13.222:3667] [client 20.220.13.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aZgiQjXz-GTvuxLwgUH2TQAAAUE"]
[Fri Feb 20 16:58:45.163722 2026] [:error] [pid 54460:tid 54478] [client 20.220.13.222:3663] [client 20.220.13.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aZgiRcoUiaZ-Z7V-F98x1AAAAA0"]
[Fri Feb 20 16:58:48.846868 2026] [proxy_fcgi:error] [pid 46012:tid 46029] [client 20.220.13.222:3497] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 16:58:55.041980 2026] [autoindex:error] [pid 54461:tid 54514] [client 20.220.13.222:3698] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 20 16:58:56.828795 2026] [:error] [pid 46012:tid 46024] [client 20.220.13.222:3628] [client 20.220.13.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZgiUDXz-GTvuxLwgUH3KAAAAUo"]
[Fri Feb 20 16:58:59.054508 2026] [autoindex:error] [pid 54520:tid 54536] [client 20.220.13.222:3782] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 20 16:59:06.568730 2026] [:error] [pid 54552:tid 54565] [client 20.220.13.222:4064] [client 20.220.13.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aZgiWse4t0F-_sbWepb3WgAAAMo"]
[Fri Feb 20 16:59:07.331718 2026] [:error] [pid 54552:tid 54564] [client 20.220.13.222:3465] [client 20.220.13.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aZgiW8e4t0F-_sbWepb3XgAAAMk"]
[Fri Feb 20 16:59:53.244713 2026] [:error] [pid 54552:tid 54579] [client 20.220.13.222:3332] [client 20.220.13.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aZgiice4t0F-_sbWepb3qgAAANg"]
[Fri Feb 20 16:59:58.762673 2026] [autoindex:error] [pid 59127:tid 59151] [client 20.220.13.222:3754] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 20 17:00:03.745941 2026] [:error] [pid 54520:tid 54541] [client 20.220.13.222:3464] [client 20.220.13.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/library/upload.php"] [unique_id "aZgik2QaQX7QUBqXcyGykwAAAJM"]
[Fri Feb 20 17:00:04.897333 2026] [autoindex:error] [pid 54461:tid 54500] [client 20.220.13.222:3495] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 20 17:00:05.640717 2026] [autoindex:error] [pid 54461:tid 54503] [client 20.220.13.222:3495] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 04:36:13.173506 2026] [:error] [pid 54381:tid 54460] [client 104.28.203.58:43209] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/style.php"] [unique_id "aZtovbZA3T28ex6RStpYpQAAAJI"]
[Mon Feb 23 04:36:16.530980 2026] [:error] [pid 56133:tid 56149] [client 104.28.203.58:29375] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/style.php"] [unique_id "aZtowNhBvtDnaqF5Ql7qOwAAAQ4"]
[Mon Feb 23 04:36:17.882028 2026] [:error] [pid 54380:tid 54434] [client 104.28.203.58:29382] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/style.php"] [unique_id "aZtowaX3e5TFfa1i4D0YqwAAAFM"]
[Mon Feb 23 07:11:43.014301 2026] [:error] [pid 2445:tid 2490] [client 188.212.135.31:34925] [client 188.212.135.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZuNLz1z6EhBn71lCAGF5AAAAE8"]
[Mon Feb 23 07:11:47.139405 2026] [:error] [pid 2445:tid 2486] [client 188.212.135.40:51763] [client 188.212.135.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aZuNMz1z6EhBn71lCAGF7wAAAEs"]
[Mon Feb 23 07:11:54.251674 2026] [:error] [pid 2445:tid 2482] [client 188.212.135.18:20769] [client 188.212.135.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tinyfilemanager.php"] [unique_id "aZuNOj1z6EhBn71lCAGGBgAAAEc"]
[Mon Feb 23 07:11:58.235032 2026] [:error] [pid 2570:tid 2580] [client 188.212.135.26:60873] [client 188.212.135.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/index.php"] [unique_id "aZuNPqh2MyYIw6djQ6XR8gAAAMI"]
[Mon Feb 23 07:12:06.451905 2026] [:error] [pid 2446:tid 2505] [client 188.212.135.59:39757] [client 188.212.135.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aZuNRtMqX9gYEfsYvri-zgAAAIM"]
[Mon Feb 23 07:12:08.191924 2026] [:error] [pid 2826:tid 2846] [client 188.212.135.49:38643] [client 188.212.135.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZuNSD3FWVe0BC2oMiD7FgAAARE"]
[Mon Feb 23 07:12:08.899591 2026] [:error] [pid 2445:tid 2493] [client 188.212.135.53:32697] [client 188.212.135.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aZuNSD1z6EhBn71lCAGGWwAAAFI"]
[Mon Feb 23 07:12:09.798723 2026] [:error] [pid 2445:tid 2497] [client 188.212.135.43:25519] [client 188.212.135.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aZuNST1z6EhBn71lCAGGYgAAAFU"]
[Mon Feb 23 07:12:10.456182 2026] [:error] [pid 2445:tid 2479] [client 188.212.135.56:62591] [client 188.212.135.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aZuNSj1z6EhBn71lCAGGZQAAAEQ"]
[Mon Feb 23 07:12:11.144474 2026] [:error] [pid 2446:tid 2517] [client 188.212.135.30:38525] [client 188.212.135.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aZuNS9MqX9gYEfsYvri-0gAAAI8"]
[Mon Feb 23 07:12:12.462400 2026] [:error] [pid 2444:tid 2465] [client 188.212.135.51:48247] [client 188.212.135.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aZuNTLMHc-5h3vMZorA0PwAAABE"]
[Mon Feb 23 07:12:15.170832 2026] [:error] [pid 2446:tid 2513] [client 188.212.135.50:62173] [client 188.212.135.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "aZuNT9MqX9gYEfsYvri-3gAAAIs"]
[Mon Feb 23 07:12:17.947359 2026] [:error] [pid 2445:tid 2486] [client 188.212.135.12:39581] [client 188.212.135.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aZuNUT1z6EhBn71lCAGGhwAAAEs"]
[Mon Feb 23 07:12:19.208225 2026] [:error] [pid 2445:tid 2500] [client 188.212.135.43:21303] [client 188.212.135.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aZuNUz1z6EhBn71lCAGGjgAAAFg"]
[Mon Feb 23 07:12:20.967239 2026] [:error] [pid 2826:tid 2845] [client 188.212.135.20:65231] [client 188.212.135.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZuNVD3FWVe0BC2oMiD7KgAAARA"]
[Mon Feb 23 07:12:28.156477 2026] [:error] [pid 2570:tid 2593] [client 188.212.135.56:37871] [client 188.212.135.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZuNXKh2MyYIw6djQ6XSKAAAAM8"]
[Mon Feb 23 07:12:30.897783 2026] [:error] [pid 2570:tid 2591] [client 188.212.135.20:54841] [client 188.212.135.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aZuNXqh2MyYIw6djQ6XSLwAAAM0"]
[Mon Feb 23 07:12:33.485889 2026] [:error] [pid 2444:tid 2457] [client 188.212.135.19:59433] [client 188.212.135.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/defaults.php"] [unique_id "aZuNYbMHc-5h3vMZorA0TQAAAAk"]
[Mon Feb 23 07:12:35.359908 2026] [:error] [pid 2570:tid 2587] [client 188.212.135.61:25987] [client 188.212.135.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aZuNY6h2MyYIw6djQ6XSNQAAAMk"]
[Mon Feb 23 07:12:39.934306 2026] [:error] [pid 2826:tid 2838] [client 188.212.135.48:55519] [client 188.212.135.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZuNZz3FWVe0BC2oMiD7WQAAAQk"]
[Mon Feb 23 07:12:41.572604 2026] [:error] [pid 2570:tid 2578] [client 188.212.135.20:50849] [client 188.212.135.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZuNaah2MyYIw6djQ6XSRAAAAMA"]
[Mon Feb 23 07:12:43.344666 2026] [:error] [pid 2570:tid 2583] [client 188.212.135.35:54757] [client 188.212.135.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZuNa6h2MyYIw6djQ6XSRgAAAMU"]
[Mon Feb 23 07:12:44.272493 2026] [:error] [pid 2570:tid 2588] [client 188.212.135.59:45875] [client 188.212.135.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aZuNbKh2MyYIw6djQ6XSSAAAAMo"]
[Mon Feb 23 07:12:45.065074 2026] [:error] [pid 2445:tid 2500] [client 188.212.135.13:25433] [client 188.212.135.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZuNbT1z6EhBn71lCAGGqgAAAFg"]
[Mon Feb 23 07:12:49.181343 2026] [:error] [pid 2826:tid 2852] [client 188.212.135.30:54337] [client 188.212.135.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aZuNcT3FWVe0BC2oMiD7bQAAARc"]
[Mon Feb 23 07:12:49.879481 2026] [:error] [pid 2570:tid 2582] [client 188.212.135.21:24499] [client 188.212.135.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class.api.php"] [unique_id "aZuNcah2MyYIw6djQ6XSTwAAAMQ"]
[Mon Feb 23 07:12:50.698532 2026] [:error] [pid 2826:tid 2849] [client 188.212.135.61:62059] [client 188.212.135.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZuNcj3FWVe0BC2oMiD7cgAAARQ"]
[Mon Feb 23 07:12:59.801585 2026] [:error] [pid 2826:tid 2841] [client 188.212.135.44:20489] [client 188.212.135.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/admin.php"] [unique_id "aZuNez3FWVe0BC2oMiD7gwAAAQw"]
[Mon Feb 23 07:13:03.137973 2026] [:error] [pid 2570:tid 2580] [client 188.212.135.12:37021] [client 188.212.135.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.212.135.12, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aZuNf6h2MyYIw6djQ6XSaQAAAMI"]
[Mon Feb 23 07:13:16.199111 2026] [:error] [pid 2826:tid 2838] [client 188.212.135.34:57507] [client 188.212.135.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZuNjD3FWVe0BC2oMiD7lQAAAQk"]
[Mon Feb 23 07:13:19.135618 2026] [:error] [pid 2445:tid 2475] [client 188.212.135.6:40907] [client 188.212.135.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.212.135.6, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZuNjz1z6EhBn71lCAGGzgAAAEA"]
[Mon Feb 23 07:13:21.193609 2026] [:error] [pid 2444:tid 2466] [client 188.212.135.53:26939] [client 188.212.135.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/item.php"] [unique_id "aZuNkbMHc-5h3vMZorA0ZgAAABI"]
[Mon Feb 23 07:13:37.392644 2026] [autoindex:error] [pid 2570:tid 2592] [client 188.212.135.20:60233] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:13:37.754247 2026] [autoindex:error] [pid 2570:tid 2582] [client 188.212.135.20:60233] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:13:38.131775 2026] [autoindex:error] [pid 2570:tid 2595] [client 188.212.135.20:60233] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:13:38.542530 2026] [autoindex:error] [pid 2570:tid 2579] [client 188.212.135.20:60233] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:13:41.007243 2026] [autoindex:error] [pid 2444:tid 2458] [client 188.212.135.6:23379] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:13:41.352312 2026] [autoindex:error] [pid 2444:tid 2462] [client 188.212.135.6:23379] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:13:41.702277 2026] [autoindex:error] [pid 2444:tid 2469] [client 188.212.135.6:23379] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:13:42.059130 2026] [autoindex:error] [pid 2444:tid 2472] [client 188.212.135.6:23379] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:13:43.817351 2026] [autoindex:error] [pid 2826:tid 2849] [client 188.212.135.60:24897] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:13:45.897838 2026] [autoindex:error] [pid 2826:tid 2852] [client 188.212.135.60:24897] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:13:46.296571 2026] [autoindex:error] [pid 2826:tid 2842] [client 188.212.135.60:24897] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:13:48.967176 2026] [autoindex:error] [pid 2445:tid 2491] [client 188.212.135.5:55477] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:13:49.349617 2026] [autoindex:error] [pid 2445:tid 2494] [client 188.212.135.5:55477] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:13:49.687647 2026] [autoindex:error] [pid 2445:tid 2500] [client 188.212.135.5:55477] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:13:50.023813 2026] [autoindex:error] [pid 2445:tid 2480] [client 188.212.135.5:55477] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:13:55.275152 2026] [autoindex:error] [pid 2826:tid 2843] [client 188.212.135.60:56075] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:13:57.975339 2026] [autoindex:error] [pid 2826:tid 2840] [client 188.212.135.7:41115] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:13:58.320207 2026] [autoindex:error] [pid 2826:tid 2834] [client 188.212.135.7:41115] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:13:58.783463 2026] [autoindex:error] [pid 2826:tid 2835] [client 188.212.135.7:41115] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:02.434501 2026] [autoindex:error] [pid 2446:tid 2508] [client 188.212.135.61:33207] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:05.465974 2026] [autoindex:error] [pid 2446:tid 2524] [client 188.212.135.46:64747] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:06.763693 2026] [autoindex:error] [pid 2446:tid 2512] [client 188.212.135.5:44361] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:07.131523 2026] [autoindex:error] [pid 2446:tid 2507] [client 188.212.135.5:44361] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:07.826748 2026] [proxy_fcgi:error] [pid 2446:tid 2510] [client 188.212.135.5:44361] AH01071: Got error 'PHP message: PHP Warning:  Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/crosscen/public_html/wp-includes/blocks/index.php on line 8PHP message: PHP Warning:  Use of undefined constant WPINC - assumed 'WPINC' (this will throw an Error in a future version of PHP) in /home/crosscen/public_html/wp-includes/blocks/index.php on line 8PHP message: PHP Warning:  require(ABSPATHWPINC/blocks/legacy-widget.php): failed to open stream: No such file or directory in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11PHP message: PHP Warning:  require(ABSPATHWPINC/blocks/legacy-widget.php): failed to open stream: No such file or directory in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11PHP message: PHP Fatal error:  require(): Failed opening required 'ABSPATHWPINC/blocks/legacy-widget.php' (include_path='.:') in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11'
[Mon Feb 23 07:14:08.549215 2026] [autoindex:error] [pid 2826:tid 2832] [client 188.212.135.39:33463] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:08.880968 2026] [autoindex:error] [pid 2826:tid 2841] [client 188.212.135.39:33463] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:09.275792 2026] [autoindex:error] [pid 2826:tid 2837] [client 188.212.135.39:33463] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:13.354051 2026] [autoindex:error] [pid 2570:tid 2588] [client 188.212.135.15:34557] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:46.347894 2026] [autoindex:error] [pid 2445:tid 2483] [client 188.212.135.56:64137] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:46.722304 2026] [autoindex:error] [pid 2445:tid 2499] [client 188.212.135.56:64137] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:47.418701 2026] [autoindex:error] [pid 2445:tid 2495] [client 188.212.135.56:64137] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:47.748649 2026] [autoindex:error] [pid 2445:tid 2491] [client 188.212.135.56:64137] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:48.118640 2026] [autoindex:error] [pid 2445:tid 2497] [client 188.212.135.56:64137] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:48.520749 2026] [autoindex:error] [pid 2445:tid 2480] [client 188.212.135.56:64137] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:48.858479 2026] [autoindex:error] [pid 2445:tid 2498] [client 188.212.135.56:64137] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:49.260016 2026] [autoindex:error] [pid 2445:tid 2495] [client 188.212.135.56:64137] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:50.576229 2026] [autoindex:error] [pid 2446:tid 2525] [client 188.212.135.12:35261] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:52.029169 2026] [autoindex:error] [pid 2826:tid 2848] [client 188.212.135.45:30651] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:52.402098 2026] [autoindex:error] [pid 2826:tid 2837] [client 188.212.135.45:30651] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:52.743570 2026] [autoindex:error] [pid 2826:tid 2838] [client 188.212.135.45:30651] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:53.094575 2026] [autoindex:error] [pid 2826:tid 2850] [client 188.212.135.45:30651] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/wlw/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:53.720221 2026] [autoindex:error] [pid 2826:tid 2847] [client 188.212.135.45:30651] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:54.118925 2026] [autoindex:error] [pid 2826:tid 2843] [client 188.212.135.45:30651] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:54.612927 2026] [autoindex:error] [pid 2826:tid 2841] [client 188.212.135.45:30651] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:14:54.952087 2026] [autoindex:error] [pid 2826:tid 2833] [client 188.212.135.45:30651] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 09:00:45.132027 2026] [authz_core:error] [pid 39540:tid 39578] [client 146.190.242.161:59456] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Feb 23 09:00:50.706741 2026] [:error] [pid 39639:tid 39649] [client 146.190.242.161:59498] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aZumwhpFkMoMi8uTUUMD9wAAAkY"]
[Mon Feb 23 09:00:54.709768 2026] [:error] [pid 39540:tid 39576] [client 146.190.242.161:54782] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aZumxrsgm9aTWhlRScJvGQAAAcc"]
[Mon Feb 23 09:01:04.342301 2026] [:error] [pid 39504:tid 39525] [client 146.190.242.161:46954] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aZum0HLcHpOlI9gwwJraugAAAVM"]
[Mon Feb 23 14:52:55.551004 2026] [authz_core:error] [pid 39540:tid 39592] [client 178.128.207.138:38550] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Feb 23 14:53:01.175838 2026] [:error] [pid 25380:tid 25388] [client 178.128.207.138:38574] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aZv5TaKrc8yFQ8fy78q8XwAAAMY"]
[Mon Feb 23 14:53:05.171157 2026] [:error] [pid 25294:tid 25373] [client 178.128.207.138:52654] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aZv5USRCFB3CqIo_jfaoBwAAAFQ"]
[Mon Feb 23 14:53:15.362461 2026] [:error] [pid 39639:tid 39666] [client 178.128.207.138:33066] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aZv5WxpFkMoMi8uTUUNUBgAAAlc"]
[Tue Feb 24 00:11:53.129471 2026] [:error] [pid 39640:tid 39686] [client 185.93.89.120:54081] [client 185.93.89.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aZx8SdsK--eVCgzvvuf6cQAAApA"]
[Tue Feb 24 00:11:57.058452 2026] [:error] [pid 39639:tid 39664] [client 185.93.89.120:59522] [client 185.93.89.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aZx8TRpFkMoMi8uTUUMiIwAAAlU"]
[Tue Feb 24 02:37:19.308300 2026] [:error] [pid 29291:tid 29413] [client 74.248.144.152:14027] [client 74.248.144.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/string.php"] [unique_id "aZyeXz2gdpbMAXIIRb19PAAAAJg"]
[Tue Feb 24 02:37:21.261550 2026] [:error] [pid 29290:tid 29378] [client 74.248.144.152:14044] [client 74.248.144.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/admin.php"] [unique_id "aZyeYSURJ6Xg7pEW8XYm7QAAAFQ"]
[Tue Feb 24 02:37:27.101118 2026] [:error] [pid 60063:tid 60080] [client 74.248.144.152:8356] [client 74.248.144.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/zfcfbexds.php"] [unique_id "aZyeZ0_6t1uQomVVdUOFQAAAAQ8"]
[Tue Feb 24 02:37:30.332700 2026] [:error] [pid 29291:tid 29396] [client 74.248.144.152:15469] [client 74.248.144.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/social-link/class.api.php"] [unique_id "aZyeaj2gdpbMAXIIRb19RwAAAIk"]
[Tue Feb 24 02:37:40.406708 2026] [:error] [pid 29291:tid 29398] [client 74.248.144.152:6715] [client 74.248.144.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aZyedD2gdpbMAXIIRb19ZAAAAIs"]
[Tue Feb 24 02:37:58.821143 2026] [:error] [pid 60063:tid 60081] [client 74.248.144.152:14816] [client 74.248.144.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/lrf6hGDvaKn.php"] [unique_id "aZyehk_6t1uQomVVdUOFrAAAARA"]
[Tue Feb 24 02:38:05.851734 2026] [:error] [pid 60063:tid 60072] [client 74.248.144.152:10468] [client 74.248.144.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.248.144.152, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/makeasmtp.php/wp-admin/css/wp-login.php"] [unique_id "aZyejU_6t1uQomVVdUOFwgAAAQc"]
[Tue Feb 24 02:38:11.683848 2026] [:error] [pid 60063:tid 60087] [client 74.248.144.152:10392] [client 74.248.144.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/plugins.php"] [unique_id "aZyek0_6t1uQomVVdUOFywAAARY"]
[Tue Feb 24 02:38:13.524427 2026] [:error] [pid 29424:tid 29428] [client 74.248.144.152:6506] [client 74.248.144.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-recovery-mode-file-service.php"] [unique_id "aZyelfgElGDq6B8YX7B2OQAAAMI"]
[Tue Feb 24 02:38:17.713453 2026] [:error] [pid 29291:tid 29399] [client 74.248.144.152:10427] [client 74.248.144.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aZyemT2gdpbMAXIIRb19iQAAAIw"]
[Tue Feb 24 02:38:24.395036 2026] [:error] [pid 29290:tid 29382] [client 74.248.144.152:6474] [client 74.248.144.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/html.php"] [unique_id "aZyeoCURJ6Xg7pEW8XYnHwAAAFg"]
[Tue Feb 24 02:38:30.044812 2026] [:error] [pid 29424:tid 29443] [client 74.248.144.152:19447] [client 74.248.144.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/admin.php"] [unique_id "aZyepvgElGDq6B8YX7B2UAAAANE"]
[Tue Feb 24 02:38:33.398345 2026] [:error] [pid 29289:tid 29303] [client 74.248.144.152:19401] [client 74.248.144.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/edit-site/defaults.php"] [unique_id "aZyeqfSAX3I9FAhm7jnP-AAAAAo"]
[Tue Feb 24 02:38:34.387257 2026] [:error] [pid 29289:tid 29300] [client 74.248.144.152:8385] [client 74.248.144.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/plugin.php"] [unique_id "aZyeqvSAX3I9FAhm7jnP-gAAAAc"]
[Tue Feb 24 02:38:36.438512 2026] [:error] [pid 29291:tid 29393] [client 74.248.144.152:10162] [client 74.248.144.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/utils/admin.php"] [unique_id "aZyerD2gdpbMAXIIRb19qwAAAIY"]
[Tue Feb 24 02:38:40.682497 2026] [:error] [pid 60063:tid 60079] [client 74.248.144.152:8407] [client 74.248.144.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/eorr.php"] [unique_id "aZyesE_6t1uQomVVdUOF_AAAAQ4"]
[Tue Feb 24 02:38:50.664891 2026] [:error] [pid 29289:tid 29303] [client 74.248.144.152:12473] [client 74.248.144.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-wp-widget-categories-character.php"] [unique_id "aZyeuvSAX3I9FAhm7jnQAgAAAAo"]
[Tue Feb 24 02:38:56.841857 2026] [:error] [pid 29424:tid 29435] [client 74.248.144.152:14933] [client 74.248.144.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/commands/pages.php"] [unique_id "aZyewPgElGDq6B8YX7B2ZQAAAMk"]
[Tue Feb 24 02:39:00.287262 2026] [autoindex:error] [pid 29291:tid 29395] [client 74.248.144.152:9868] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 02:39:05.096425 2026] [proxy_fcgi:error] [pid 29290:tid 29361] [client 74.248.144.152:7162] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 02:39:08.636624 2026] [:error] [pid 29289:tid 29308] [client 74.248.144.152:13102] [client 74.248.144.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/script-modules.php"] [unique_id "aZyezPSAX3I9FAhm7jnQFQAAAA8"]
[Thu Feb 26 12:04:28.150921 2026] [:error] [pid 55122:tid 55139] [client 193.32.176.86:38470] [client 193.32.176.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aZ_GTILiR0OfjFxvcN-qqgAAAM8"]
[Thu Feb 26 20:59:48.215925 2026] [autoindex:error] [pid 3883:tid 3888] [client 13.79.87.25:9063] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 20:59:57.263298 2026] [autoindex:error] [pid 44444:tid 44472] [client 13.79.87.25:9313] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 21:00:05.488892 2026] [autoindex:error] [pid 3883:tid 3891] [client 13.79.87.25:1671] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 21:00:05.785736 2026] [autoindex:error] [pid 3883:tid 3893] [client 13.79.87.25:1671] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 21:00:16.053041 2026] [autoindex:error] [pid 55618:tid 55631] [client 13.79.87.25:4350] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 21:00:17.831786 2026] [:error] [pid 3883:tid 3894] [client 13.79.87.25:5237] [client 13.79.87.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaBD4eA33x90V6yYHajdmAAAAUg"]
[Thu Feb 26 21:00:22.283103 2026] [autoindex:error] [pid 44444:tid 44474] [client 13.79.87.25:16814] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2021/02/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 21:00:24.141449 2026] [autoindex:error] [pid 3883:tid 3900] [client 13.79.87.25:7386] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 22:01:33.105264 2026] [:error] [pid 3883:tid 3891] [client 157.245.196.99:58198] [client 157.245.196.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aaBSPeA33x90V6yYHajxpQAAAUU"]
[Thu Feb 26 22:07:31.776430 2026] [:error] [pid 54991:tid 55031] [client 20.220.189.106:2980] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/motu.php"] [unique_id "aaBTo94Zx-mJ8gbRB2j38gAAAEs"]
[Thu Feb 26 22:07:32.509095 2026] [:error] [pid 44444:tid 44469] [client 20.220.189.106:3055] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/motu.php"] [unique_id "aaBTpG2sMNmj-yekUk1CDQAAAhM"]
[Thu Feb 26 22:07:33.100168 2026] [:error] [pid 25311:tid 25326] [client 20.220.189.106:3054] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/motu.php"] [unique_id "aaBTpdfdM__yZAgJFSvo1AAAAYw"]
[Thu Feb 26 22:07:33.624553 2026] [:error] [pid 44444:tid 44458] [client 20.220.189.106:3024] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/motu.php"] [unique_id "aaBTpW2sMNmj-yekUk1CDwAAAgg"]
[Thu Feb 26 22:07:34.240796 2026] [:error] [pid 20419:tid 20429] [client 20.220.189.106:2964] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/work.php"] [unique_id "aaBTpu3DVDvMfTYYUBVjkwAAAcc"]
[Thu Feb 26 22:07:35.037092 2026] [:error] [pid 55051:tid 55074] [client 20.220.189.106:3067] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/work.php"] [unique_id "aaBTpwmK1w2kZvh5eLHFwwAAAJQ"]
[Thu Feb 26 22:07:35.584004 2026] [:error] [pid 25311:tid 25319] [client 20.220.189.106:3014] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/work.php"] [unique_id "aaBTp9fdM__yZAgJFSvo4gAAAYU"]
[Thu Feb 26 22:07:36.334968 2026] [:error] [pid 55051:tid 55078] [client 20.220.189.106:2982] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/work.php"] [unique_id "aaBTqAmK1w2kZvh5eLHFyAAAAJg"]
[Thu Feb 26 22:07:36.845484 2026] [:error] [pid 25311:tid 25320] [client 20.220.189.106:2908] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/06.php"] [unique_id "aaBTqNfdM__yZAgJFSvo5QAAAYY"]
[Thu Feb 26 22:07:37.940384 2026] [:error] [pid 20419:tid 20435] [client 20.220.189.106:2953] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/06.php"] [unique_id "aaBTqe3DVDvMfTYYUBVjmgAAAc0"]
[Thu Feb 26 22:07:38.628028 2026] [:error] [pid 44444:tid 44461] [client 20.220.189.106:2955] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/06.php"] [unique_id "aaBTqm2sMNmj-yekUk1CFgAAAgs"]
[Thu Feb 26 22:07:39.401203 2026] [:error] [pid 44444:tid 44467] [client 20.220.189.106:3006] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/06.php"] [unique_id "aaBTq22sMNmj-yekUk1CGAAAAhE"]
[Thu Feb 26 22:07:39.845192 2026] [:error] [pid 3883:tid 3888] [client 20.220.189.106:2893] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/god.php"] [unique_id "aaBTq-A33x90V6yYHajy3wAAAUI"]
[Thu Feb 26 22:07:40.642569 2026] [:error] [pid 25311:tid 25317] [client 20.220.189.106:3031] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/god.php"] [unique_id "aaBTrNfdM__yZAgJFSvo6AAAAYM"]
[Thu Feb 26 22:07:41.110907 2026] [:error] [pid 3883:tid 3897] [client 20.220.189.106:3007] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/god.php"] [unique_id "aaBTreA33x90V6yYHajy4AAAAUs"]
[Thu Feb 26 22:07:41.811353 2026] [:error] [pid 44444:tid 44468] [client 20.220.189.106:3009] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/god.php"] [unique_id "aaBTrW2sMNmj-yekUk1CGwAAAhI"]
[Thu Feb 26 22:07:42.411058 2026] [:error] [pid 20419:tid 20433] [client 20.220.189.106:2881] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/X57.php"] [unique_id "aaBTru3DVDvMfTYYUBVjogAAAcs"]
[Thu Feb 26 22:07:42.892761 2026] [:error] [pid 54991:tid 55038] [client 20.220.189.106:3008] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/X57.php"] [unique_id "aaBTrt4Zx-mJ8gbRB2j3_gAAAFI"]
[Thu Feb 26 22:07:43.371610 2026] [:error] [pid 44444:tid 44460] [client 20.220.189.106:2990] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/X57.php"] [unique_id "aaBTr22sMNmj-yekUk1CHwAAAgo"]
[Thu Feb 26 22:07:43.802824 2026] [:error] [pid 44444:tid 44462] [client 20.220.189.106:3013] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/X57.php"] [unique_id "aaBTr22sMNmj-yekUk1CIgAAAgw"]
[Thu Feb 26 22:07:44.393608 2026] [:error] [pid 44444:tid 44463] [client 20.220.189.106:3048] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/plugins.php"] [unique_id "aaBTsG2sMNmj-yekUk1CJwAAAg0"]
[Thu Feb 26 22:07:44.951843 2026] [:error] [pid 3883:tid 3902] [client 20.220.189.106:3028] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/plugins.php"] [unique_id "aaBTsOA33x90V6yYHajy4wAAAVA"]
[Thu Feb 26 22:07:45.631335 2026] [:error] [pid 55051:tid 55066] [client 20.220.189.106:3053] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/plugins.php"] [unique_id "aaBTsQmK1w2kZvh5eLHF1wAAAIw"]
[Thu Feb 26 22:07:46.067468 2026] [:error] [pid 3883:tid 3894] [client 20.220.189.106:3071] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/plugins.php"] [unique_id "aaBTsuA33x90V6yYHajy5gAAAUg"]
[Thu Feb 26 22:07:46.530588 2026] [:error] [pid 3883:tid 3889] [client 20.220.189.106:3057] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/seetox.php"] [unique_id "aaBTsuA33x90V6yYHajy6AAAAUM"]
[Thu Feb 26 22:07:47.048338 2026] [:error] [pid 3883:tid 3899] [client 20.220.189.106:3063] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/seetox.php"] [unique_id "aaBTs-A33x90V6yYHajy6QAAAU0"]
[Thu Feb 26 22:07:47.580331 2026] [:error] [pid 55051:tid 55056] [client 20.220.189.106:3061] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/seetox.php"] [unique_id "aaBTswmK1w2kZvh5eLHF2QAAAII"]
[Thu Feb 26 22:07:48.150917 2026] [:error] [pid 44444:tid 44462] [client 20.220.189.106:2958] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/seetox.php"] [unique_id "aaBTtG2sMNmj-yekUk1CNgAAAgw"]
[Thu Feb 26 22:07:48.610773 2026] [:error] [pid 55051:tid 55078] [client 20.220.189.106:3069] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBTtAmK1w2kZvh5eLHF2gAAAJg"]
[Thu Feb 26 22:07:49.179628 2026] [:error] [pid 55051:tid 55061] [client 20.220.189.106:2998] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBTtQmK1w2kZvh5eLHF3AAAAIc"]
[Thu Feb 26 22:07:49.958415 2026] [:error] [pid 54991:tid 55039] [client 20.220.189.106:3059] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBTtd4Zx-mJ8gbRB2j4AQAAAFM"]
[Thu Feb 26 22:07:50.855623 2026] [:error] [pid 20419:tid 20423] [client 20.220.189.106:3043] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBTtu3DVDvMfTYYUBVjqwAAAcE"]
[Thu Feb 26 22:07:51.298057 2026] [:error] [pid 55051:tid 55055] [client 20.220.189.106:2985] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xa.php"] [unique_id "aaBTtwmK1w2kZvh5eLHF3wAAAIE"]
[Thu Feb 26 22:07:51.968607 2026] [:error] [pid 3883:tid 3909] [client 20.220.189.106:2949] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xa.php"] [unique_id "aaBTt-A33x90V6yYHajy6gAAAVc"]
[Thu Feb 26 22:07:52.639809 2026] [:error] [pid 54991:tid 55024] [client 20.220.189.106:2984] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xa.php"] [unique_id "aaBTuN4Zx-mJ8gbRB2j4BAAAAEQ"]
[Thu Feb 26 22:07:53.213016 2026] [:error] [pid 55051:tid 55069] [client 20.220.189.106:2991] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xa.php"] [unique_id "aaBTuQmK1w2kZvh5eLHF4QAAAI8"]
[Thu Feb 26 22:07:54.050345 2026] [:error] [pid 55051:tid 55076] [client 20.220.189.106:2988] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xqq.php"] [unique_id "aaBTugmK1w2kZvh5eLHF5gAAAJY"]
[Thu Feb 26 22:07:54.707561 2026] [:error] [pid 55051:tid 55075] [client 20.220.189.106:2979] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xqq.php"] [unique_id "aaBTugmK1w2kZvh5eLHF6gAAAJU"]
[Thu Feb 26 22:07:55.318061 2026] [:error] [pid 55051:tid 55057] [client 20.220.189.106:2927] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xqq.php"] [unique_id "aaBTuwmK1w2kZvh5eLHF7gAAAIM"]
[Thu Feb 26 22:07:55.817760 2026] [:error] [pid 3883:tid 3900] [client 20.220.189.106:2989] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xqq.php"] [unique_id "aaBTu-A33x90V6yYHajy7wAAAU4"]
[Thu Feb 26 22:07:56.305192 2026] [:error] [pid 20419:tid 20437] [client 20.220.189.106:2967] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/un.php"] [unique_id "aaBTvO3DVDvMfTYYUBVjsgAAAc8"]
[Thu Feb 26 22:07:57.178859 2026] [:error] [pid 20419:tid 20426] [client 20.220.189.106:3038] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/un.php"] [unique_id "aaBTve3DVDvMfTYYUBVjtQAAAcQ"]
[Thu Feb 26 22:07:58.134919 2026] [:error] [pid 44444:tid 44472] [client 20.220.189.106:2894] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/un.php"] [unique_id "aaBTvm2sMNmj-yekUk1CQwAAAhY"]
[Thu Feb 26 22:07:58.748113 2026] [:error] [pid 25311:tid 25329] [client 20.220.189.106:2898] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/un.php"] [unique_id "aaBTvtfdM__yZAgJFSvo8wAAAY8"]
[Thu Feb 26 22:07:59.358870 2026] [:error] [pid 25311:tid 25319] [client 20.220.189.106:3019] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/erty.php"] [unique_id "aaBTv9fdM__yZAgJFSvo9QAAAYU"]
[Thu Feb 26 22:07:59.927525 2026] [:error] [pid 54990:tid 55004] [client 20.220.189.106:3052] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/erty.php"] [unique_id "aaBTv3tr2qmt_mBhH2wtiwAAAAs"]
[Thu Feb 26 22:08:00.575351 2026] [:error] [pid 25311:tid 25336] [client 20.220.189.106:2944] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/erty.php"] [unique_id "aaBTwNfdM__yZAgJFSvo-wAAAZY"]
[Thu Feb 26 22:08:01.109971 2026] [:error] [pid 25311:tid 25335] [client 20.220.189.106:2912] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/erty.php"] [unique_id "aaBTwdfdM__yZAgJFSvo_QAAAZU"]
[Thu Feb 26 22:08:01.619245 2026] [:error] [pid 3883:tid 3893] [client 20.220.189.106:2971] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/fot.php"] [unique_id "aaBTweA33x90V6yYHajy8wAAAUc"]
[Thu Feb 26 22:08:02.695856 2026] [:error] [pid 20419:tid 20435] [client 20.220.189.106:2978] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/fot.php"] [unique_id "aaBTwu3DVDvMfTYYUBVjvwAAAc0"]
[Thu Feb 26 22:08:04.014757 2026] [:error] [pid 55051:tid 55063] [client 20.220.189.106:3002] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/fot.php"] [unique_id "aaBTxAmK1w2kZvh5eLHF9gAAAIk"]
[Thu Feb 26 22:08:04.962340 2026] [:error] [pid 55051:tid 55070] [client 20.220.189.106:2933] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/fot.php"] [unique_id "aaBTxAmK1w2kZvh5eLHF-QAAAJA"]
[Fri Feb 27 11:39:40.852808 2026] [:error] [pid 54231:tid 54244] [client 91.122.53.173:34204] [client 91.122.53.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/HEAD"] [unique_id "aaER_OTvb5AeyJCdY7CaQQAAAEo"]
[Fri Feb 27 15:04:16.177445 2026] [:error] [pid 54102:tid 54145] [client 54.215.238.21:61716] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFB8Hi74D4fiYUm_Gc--QAAAIE"], referer: https://www.facebook.com/
[Fri Feb 27 15:04:27.366089 2026] [:error] [pid 56075:tid 56092] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aaFB-8KBhrfI6KNv9RgNDQAAAA4"]
[Fri Feb 27 15:04:27.859308 2026] [:error] [pid 56075:tid 56093] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFB-8KBhrfI6KNv9RgNEAAAAA8"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:04:31.210223 2026] [:error] [pid 56075:tid 56091] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFB_8KBhrfI6KNv9RgNHAAAAA0"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:04:33.193442 2026] [:error] [pid 56075:tid 56097] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCAcKBhrfI6KNv9RgNHgAAABM"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:04:35.549680 2026] [:error] [pid 56075:tid 56078] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCA8KBhrfI6KNv9RgNJQAAAAE"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:04:37.992888 2026] [:error] [pid 56075:tid 56092] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCBcKBhrfI6KNv9RgNJwAAAA4"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:04:40.770676 2026] [:error] [pid 56075:tid 56082] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCCMKBhrfI6KNv9RgNLAAAAAU"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:04:42.598652 2026] [:error] [pid 56075:tid 56078] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCCsKBhrfI6KNv9RgNNQAAAAE"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:04:44.616580 2026] [:error] [pid 56075:tid 56092] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCDMKBhrfI6KNv9RgNOAAAAA4"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:04:46.550039 2026] [:error] [pid 56075:tid 56083] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCDsKBhrfI6KNv9RgNPAAAAAY"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:04:48.608034 2026] [:error] [pid 56075:tid 56090] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCEMKBhrfI6KNv9RgNQQAAAAw"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:04:51.007264 2026] [:error] [pid 56075:tid 56096] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCE8KBhrfI6KNv9RgNSgAAABI"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:04:53.151920 2026] [:error] [pid 56075:tid 56078] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCFcKBhrfI6KNv9RgNTgAAAAE"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:04:55.626727 2026] [:error] [pid 56075:tid 56086] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCF8KBhrfI6KNv9RgNUAAAAAk"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:04:57.741143 2026] [:error] [pid 56075:tid 56077] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCGcKBhrfI6KNv9RgNUgAAAAA"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:05:00.224509 2026] [:error] [pid 56075:tid 56102] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCHMKBhrfI6KNv9RgNVAAAABg"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:05:02.701377 2026] [:error] [pid 56075:tid 56101] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCHsKBhrfI6KNv9RgNVgAAABc"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:05:04.883229 2026] [:error] [pid 56075:tid 56094] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCIMKBhrfI6KNv9RgNWAAAABA"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:05:07.346013 2026] [:error] [pid 56075:tid 56085] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCI8KBhrfI6KNv9RgNWwAAAAg"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:05:09.216691 2026] [:error] [pid 56075:tid 56087] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCJcKBhrfI6KNv9RgNXwAAAAo"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:05:11.457681 2026] [:error] [pid 56075:tid 56078] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCJ8KBhrfI6KNv9RgNYQAAAAE"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:05:13.612721 2026] [:error] [pid 56075:tid 56077] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCKcKBhrfI6KNv9RgNZwAAAAA"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:05:15.673874 2026] [:error] [pid 56075:tid 56098] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCK8KBhrfI6KNv9RgNcQAAABQ"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:05:17.811349 2026] [:error] [pid 56075:tid 56088] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCLcKBhrfI6KNv9RgNcwAAAAs"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:05:19.864320 2026] [:error] [pid 56075:tid 56081] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCL8KBhrfI6KNv9RgNdQAAAAQ"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:05:22.213477 2026] [:error] [pid 56075:tid 56101] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCMsKBhrfI6KNv9RgNfwAAABc"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 15:05:24.279089 2026] [:error] [pid 56075:tid 56088] [client 54.215.238.21:62076] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaFCNMKBhrfI6KNv9RgNgQAAAAs"], referer: https://southerncrosscentre.au/wp-login.php
[Fri Feb 27 16:34:12.777167 2026] [:error] [pid 54102:tid 54147] [client 157.15.40.88:64322] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/txets.php"] [unique_id "aaFXBHi74D4fiYUm_GdI9gAAAIM"]
[Fri Feb 27 16:34:14.316324 2026] [:error] [pid 54101:tid 54108] [client 157.15.40.88:64334] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/txets.php"] [unique_id "aaFXBlY5qgRktcYTGFsigAAAAcA"]
[Fri Feb 27 16:34:15.904933 2026] [:error] [pid 52073:tid 52099] [client 157.15.40.88:64452] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/txets.php"] [unique_id "aaFXB4a650YPyxXVeRZ07gAAAZc"]
[Fri Feb 27 16:34:18.316357 2026] [:error] [pid 52073:tid 52085] [client 157.15.40.88:64574] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/txets.php"] [unique_id "aaFXCoa650YPyxXVeRZ1BQAAAYk"]
[Fri Feb 27 16:34:18.602767 2026] [:error] [pid 52073:tid 52098] [client 157.15.40.88:64671] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/schallfuns.php"] [unique_id "aaFXCoa650YPyxXVeRZ1BwAAAZY"]
[Fri Feb 27 16:34:18.886057 2026] [:error] [pid 49306:tid 49309] [client 157.15.40.88:64691] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/postnews.php"] [unique_id "aaFXCvnSUDZue59Px9uAGwAAAUE"]
[Fri Feb 27 16:34:19.163618 2026] [:error] [pid 56075:tid 56087] [client 157.15.40.88:64712] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/postnews.php"] [unique_id "aaFXC8KBhrfI6KNv9Rgt2gAAAAo"]
[Fri Feb 27 16:34:19.441178 2026] [:error] [pid 56075:tid 56090] [client 157.15.40.88:64739] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/postnews.php"] [unique_id "aaFXC8KBhrfI6KNv9Rgt3gAAAAw"]
[Fri Feb 27 16:34:19.710772 2026] [:error] [pid 52073:tid 52093] [client 157.15.40.88:64761] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/postnews.php"] [unique_id "aaFXC4a650YPyxXVeRZ1DgAAAZE"]
[Fri Feb 27 17:11:14.492697 2026] [:error] [pid 49306:tid 49313] [client 107.22.58.128:47522] [client 107.22.58.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||southerncrosscentre.au|F|4"] [data "EmailWolf"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aaFfsvnSUDZue59Px9uR7QAAAUU"]
[Fri Feb 27 19:00:43.115184 2026] [autoindex:error] [pid 52073:tid 52085] [client 4.194.131.131:2360] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 19:01:12.704337 2026] [:error] [pid 56075:tid 56092] [client 4.194.131.131:2847] [client 4.194.131.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaF5eMKBhrfI6KNv9RhfAwAAAA4"]
[Fri Feb 27 19:01:46.563778 2026] [:error] [pid 52073:tid 52083] [client 4.194.131.131:2832] [client 4.194.131.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaF5moa650YPyxXVeRbgmQAAAYc"]
[Fri Feb 27 19:01:48.183004 2026] [:error] [pid 52073:tid 52093] [client 4.194.131.131:2844] [client 4.194.131.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaF5nIa650YPyxXVeRbgpgAAAZE"]
[Fri Feb 27 19:01:50.356186 2026] [autoindex:error] [pid 54231:tid 54249] [client 4.194.131.131:2861] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 19:01:50.443794 2026] [:error] [pid 54231:tid 54245] [client 4.194.131.131:2861] [client 4.194.131.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaF5nuTvb5AeyJCdY7DsFwAAAEs"]
[Fri Feb 27 19:01:53.771245 2026] [:error] [pid 52073:tid 52088] [client 4.194.131.131:2875] [client 4.194.131.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaF5oYa650YPyxXVeRbg1QAAAYw"]
[Fri Feb 27 19:01:57.228880 2026] [proxy_fcgi:error] [pid 54101:tid 54124] [client 4.194.131.131:2392] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:02:04.215261 2026] [autoindex:error] [pid 54101:tid 54127] [client 4.194.131.131:2874] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 19:02:05.348877 2026] [:error] [pid 52073:tid 52079] [client 4.194.131.131:2862] [client 4.194.131.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaF5rYa650YPyxXVeRbhBQAAAYM"]
[Fri Feb 27 19:02:08.124282 2026] [autoindex:error] [pid 52073:tid 52091] [client 4.194.131.131:2361] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 19:02:17.817227 2026] [:error] [pid 54231:tid 54244] [client 4.194.131.131:2387] [client 4.194.131.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaF5ueTvb5AeyJCdY7DsMwAAAEo"]
[Fri Feb 27 19:02:18.357056 2026] [:error] [pid 54103:tid 54189] [client 4.194.131.131:2359] [client 4.194.131.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaF5uuvG4MPCmE0B2sCKZwAAANI"]
[Fri Feb 27 21:12:29.467882 2026] [:error] [pid 56075:tid 56100] [client 20.220.8.221:42045] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaGYPcKBhrfI6KNv9Ri9wQAAABY"]
[Fri Feb 27 21:12:33.735684 2026] [autoindex:error] [pid 56075:tid 56082] [client 20.220.8.221:42010] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:12:33.949695 2026] [proxy_fcgi:error] [pid 56075:tid 56078] [client 20.220.8.221:42010] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:12:34.159263 2026] [autoindex:error] [pid 56075:tid 56102] [client 20.220.8.221:42010] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:12:35.563870 2026] [:error] [pid 56075:tid 56085] [client 20.220.8.221:42034] [client 20.220.8.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.220.8.221, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aaGYQ8KBhrfI6KNv9Ri90wAAAAg"]
[Fri Feb 27 21:12:37.846825 2026] [autoindex:error] [pid 56075:tid 56077] [client 20.220.8.221:42012] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:12:39.219513 2026] [:error] [pid 49306:tid 49328] [client 20.220.8.221:41127] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaGYR_nSUDZue59Px9sM5QAAAVQ"]
[Fri Feb 27 21:12:40.061030 2026] [:error] [pid 52073:tid 52083] [client 20.220.8.221:42020] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aaGYSIa650YPyxXVeRZD7wAAAYc"]
[Fri Feb 27 21:12:44.604316 2026] [autoindex:error] [pid 62998:tid 63013] [client 20.220.8.221:42024] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:12:46.546542 2026] [:error] [pid 56075:tid 56081] [client 20.220.8.221:41985] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/lv.php"] [unique_id "aaGYTsKBhrfI6KNv9Ri98gAAAAQ"]
[Fri Feb 27 21:12:54.484004 2026] [autoindex:error] [pid 54231:tid 54246] [client 20.220.8.221:41116] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:12:59.306282 2026] [:error] [pid 56075:tid 56101] [client 20.220.8.221:41093] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aaGYW8KBhrfI6KNv9Ri-AgAAABc"]
[Fri Feb 27 21:13:01.317497 2026] [:error] [pid 62998:tid 63007] [client 20.220.8.221:42000] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaGYXVQeueXZDUmoLolC6AAAAQU"]
[Fri Feb 27 21:13:03.275563 2026] [autoindex:error] [pid 52073:tid 52076] [client 20.220.8.221:41103] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 22:50:17.739478 2026] [:error] [pid 54231:tid 54254] [client 91.224.92.164:19296] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aaGvKeTvb5AeyJCdY7A_xAAAAFQ"]
[Fri Feb 27 22:50:19.312600 2026] [:error] [pid 62998:tid 63010] [client 91.224.92.164:48901] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aaGvK1QeueXZDUmoLomAYQAAAQg"]
[Sat Feb 28 01:10:50.223277 2026] [:error] [pid 38586:tid 38603] [client 20.151.128.128:14298] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHQGr_i6nvKNhjFW7U2AgAAAQ4"]
[Sat Feb 28 01:10:57.244477 2026] [:error] [pid 38620:tid 38641] [client 20.151.128.128:14282] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHQIQP6I7SRqrhh7Rry8wAAAVM"]
[Sat Feb 28 01:10:59.127333 2026] [:error] [pid 38620:tid 38643] [client 20.151.128.128:14324] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHQIwP6I7SRqrhh7RrzAwAAAVU"]
[Sat Feb 28 01:11:01.710743 2026] [:error] [pid 15100:tid 15161] [client 20.151.128.128:14241] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHQJUOEbzcINan_ctK8XAAAAEE"]
[Sat Feb 28 02:34:33.075288 2026] [:error] [pid 38586:tid 38595] [client 20.220.8.221:41439] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaHjub_i6nvKNhjFW7V5YwAAAQY"]
[Sat Feb 28 02:34:34.516663 2026] [autoindex:error] [pid 38586:tid 38593] [client 20.220.8.221:41261] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 02:34:39.837970 2026] [autoindex:error] [pid 15240:tid 15258] [client 20.220.8.221:41259] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 02:34:40.048340 2026] [autoindex:error] [pid 15240:tid 15265] [client 20.220.8.221:41259] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/block/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 02:34:40.776916 2026] [:error] [pid 15240:tid 15261] [client 20.220.8.221:41259] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaHjwC1iKL_41Rk9A9OeuQAAABM"]
[Sat Feb 28 02:34:42.752576 2026] [autoindex:error] [pid 38586:tid 38601] [client 20.220.8.221:41427] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 02:34:42.958632 2026] [:error] [pid 38586:tid 38599] [client 20.220.8.221:41427] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "aaHjwr_i6nvKNhjFW7V5iAAAAQo"]
[Sat Feb 28 02:34:43.804516 2026] [:error] [pid 15098:tid 15116] [client 20.220.8.221:41415] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "aaHjw8kFqny8dQQbmTk3jwAAAIo"]
[Sat Feb 28 02:34:44.647600 2026] [:error] [pid 38620:tid 38645] [client 20.220.8.221:41242] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "aaHjxAP6I7SRqrhh7RpVOAAAAVc"]
[Sat Feb 28 02:34:45.484845 2026] [:error] [pid 38586:tid 38600] [client 20.220.8.221:41255] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "aaHjxb_i6nvKNhjFW7V5jQAAAQs"]
[Sat Feb 28 03:07:21.920551 2026] [:error] [pid 15100:tid 15184] [client 52.178.176.146:4466] [client 52.178.176.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/pu8.php"] [unique_id "aaHraUOEbzcINan_ctLrawAAAFg"]
[Sat Feb 28 03:07:22.419357 2026] [:error] [pid 15098:tid 15108] [client 52.178.176.146:10164] [client 52.178.176.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/pu9.php"] [unique_id "aaHraskFqny8dQQbmTk-nAAAAIM"]
[Sat Feb 28 03:07:22.950979 2026] [:error] [pid 15240:tid 15252] [client 52.178.176.146:4984] [client 52.178.176.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/povoy.php"] [unique_id "aaHrai1iKL_41Rk9A9OsyQAAAAo"]
[Sat Feb 28 03:07:23.449514 2026] [:error] [pid 19669:tid 19689] [client 52.178.176.146:4991] [client 52.178.176.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/t00l.php"] [unique_id "aaHra0y98E5mX0pQrMpDAwAAAZE"]
[Sat Feb 28 03:07:23.950039 2026] [:error] [pid 20709:tid 20721] [client 52.178.176.146:4982] [client 52.178.176.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/rcc8.php"] [unique_id "aaHra05CnHafo7s0kbTdtAAAAco"]
[Sat Feb 28 03:07:24.450323 2026] [:error] [pid 38586:tid 38605] [client 52.178.176.146:6455] [client 52.178.176.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/rcc9.php"] [unique_id "aaHrbL_i6nvKNhjFW7WVgwAAARA"]
[Sat Feb 28 03:07:24.957180 2026] [:error] [pid 38586:tid 38589] [client 52.178.176.146:4595] [client 52.178.176.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/xl9.php"] [unique_id "aaHrbL_i6nvKNhjFW7WViAAAAQA"]
[Sat Feb 28 03:07:25.459976 2026] [:error] [pid 38586:tid 38607] [client 52.178.176.146:5229] [client 52.178.176.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/gxoxx.php"] [unique_id "aaHrbb_i6nvKNhjFW7WVlAAAARI"]
[Sat Feb 28 03:07:25.991400 2026] [:error] [pid 38620:tid 38635] [client 52.178.176.146:6873] [client 52.178.176.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/g06akt.php"] [unique_id "aaHrbQP6I7SRqrhh7RpvYgAAAU0"]
[Sat Feb 28 03:07:35.902727 2026] [:error] [pid 38586:tid 38611] [client 52.178.176.146:7165] [client 52.178.176.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/admin.php"] [unique_id "aaHrd7_i6nvKNhjFW7WVxgAAARY"]
[Sat Feb 28 10:07:33.903198 2026] [autoindex:error] [pid 39185:tid 39255] [client 20.63.97.65:40216] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 10:07:44.410900 2026] [autoindex:error] [pid 39292:tid 39316] [client 20.63.97.65:39565] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 10:07:50.395648 2026] [autoindex:error] [pid 39185:tid 39267] [client 20.63.97.65:40233] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 10:07:50.609401 2026] [:error] [pid 39185:tid 39247] [client 20.63.97.65:40233] [client 20.63.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaJN9hVE-FfM89u7BQYcMgAAAIE"]
[Sat Feb 28 10:07:53.375961 2026] [autoindex:error] [pid 52460:tid 52470] [client 20.63.97.65:39657] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 10:07:53.584094 2026] [autoindex:error] [pid 52460:tid 52481] [client 20.63.97.65:39657] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 10:08:04.796229 2026] [autoindex:error] [pid 39185:tid 39259] [client 20.63.97.65:39599] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 10:08:06.291909 2026] [:error] [pid 52460:tid 52467] [client 20.63.97.65:39639] [client 20.63.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaJOBrLWOogAgHGh62SAGgAAAYQ"]
[Sat Feb 28 10:08:11.124991 2026] [autoindex:error] [pid 11791:tid 11812] [client 20.63.97.65:39662] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2021/02/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 10:08:12.643654 2026] [autoindex:error] [pid 11791:tid 11808] [client 20.63.97.65:40257] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 10:09:15.740048 2026] [:error] [pid 52460:tid 52463] [client 20.63.97.65:39616] [client 20.63.97.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.63.97.65, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aaJOS7LWOogAgHGh62SA9QAAAYA"]
[Sat Feb 28 10:09:36.026162 2026] [:error] [pid 39185:tid 39253] [client 20.63.97.65:40273] [client 20.63.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tinyfilemanager.php"] [unique_id "aaJOYBVE-FfM89u7BQYeAgAAAIc"]
[Sat Feb 28 10:09:56.668579 2026] [autoindex:error] [pid 39185:tid 39249] [client 20.63.97.65:40225] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 10:10:03.007613 2026] [autoindex:error] [pid 39185:tid 39260] [client 20.63.97.65:39562] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 10:10:03.263799 2026] [autoindex:error] [pid 39185:tid 39251] [client 20.63.97.65:39562] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 10:10:03.489209 2026] [:error] [pid 39185:tid 39249] [client 20.63.97.65:39562] [client 20.63.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaJOexVE-FfM89u7BQYedwAAAIM"]
[Sat Feb 28 10:10:20.831277 2026] [:error] [pid 52460:tid 52479] [client 20.63.97.65:38935] [client 20.63.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaJOjLLWOogAgHGh62SB-wAAAZA"]
[Sat Feb 28 10:10:35.811484 2026] [:error] [pid 39183:tid 39207] [client 20.63.97.65:38913] [client 20.63.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaJOmxCf4HvhVePw3LbJLAAAAA8"]
[Sat Feb 28 13:17:30.962690 2026] [:error] [pid 22194:tid 22203] [client 13.71.191.191:7049] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/index.php"] [unique_id "aaJ6an6mbajs3bzQGytC7QAAAUc"]
[Sat Feb 28 13:17:35.877193 2026] [:error] [pid 39185:tid 39249] [client 13.71.191.191:7167] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/termps.php"] [unique_id "aaJ6bxVE-FfM89u7BQbP3QAAAIM"]
[Sat Feb 28 13:17:39.595496 2026] [:error] [pid 52460:tid 52474] [client 13.71.191.191:7046] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/capabilities1.php"] [unique_id "aaJ6c7LWOogAgHGh62Q5bAAAAYs"]
[Sat Feb 28 13:17:42.323490 2026] [:error] [pid 39292:tid 39318] [client 13.71.191.191:7126] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/preferences/admin-ajax.php"] [unique_id "aaJ6dqIAO5fN7BxyqcHWYgAAANg"]
[Sat Feb 28 13:17:44.966230 2026] [:error] [pid 52460:tid 52474] [client 13.71.191.191:7055] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/ourLB.php"] [unique_id "aaJ6eLLWOogAgHGh62Q5iQAAAYs"]
[Sat Feb 28 13:17:56.856158 2026] [:error] [pid 39185:tid 39249] [client 13.71.191.191:7162] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/commands/webix.php"] [unique_id "aaJ6hBVE-FfM89u7BQbQWwAAAIM"]
[Sat Feb 28 13:18:01.811025 2026] [:error] [pid 39185:tid 39266] [client 13.71.191.191:7044] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/gif.php"] [unique_id "aaJ6iRVE-FfM89u7BQbQeQAAAJQ"]
[Sat Feb 28 13:18:02.445116 2026] [:error] [pid 39185:tid 39261] [client 13.71.191.191:7108] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/block/moon.php"] [unique_id "aaJ6ihVE-FfM89u7BQbQfQAAAI8"]
[Sat Feb 28 13:18:06.007343 2026] [:error] [pid 39183:tid 39211] [client 13.71.191.191:6988] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/class.engine.php"] [unique_id "aaJ6jhCf4HvhVePw3Lbq_gAAABM"]
[Sat Feb 28 13:18:07.120176 2026] [:error] [pid 11791:tid 11795] [client 13.71.191.191:7048] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/format-library/admin.php"] [unique_id "aaJ6j2uX5e1Q32gqxH0f5gAAAQI"]
[Sat Feb 28 13:18:15.831317 2026] [:error] [pid 11791:tid 11796] [client 13.71.191.191:7058] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/editor/tinyfilemanager.php"] [unique_id "aaJ6l2uX5e1Q32gqxH0f9AAAAQM"]
[Sat Feb 28 13:18:16.670231 2026] [:error] [pid 52460:tid 52478] [client 13.71.191.191:7122] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/404.php"] [unique_id "aaJ6mLLWOogAgHGh62Q50gAAAY8"]
[Sat Feb 28 13:18:26.641696 2026] [:error] [pid 52460:tid 52470] [client 13.71.191.191:7144] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-simplepie.php"] [unique_id "aaJ6orLWOogAgHGh62Q57QAAAYc"]
[Sat Feb 28 13:18:32.593263 2026] [:error] [pid 52460:tid 52487] [client 13.71.191.191:7130] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize//parx.php"] [unique_id "aaJ6qLLWOogAgHGh62Q59wAAAZg"]
[Sat Feb 28 13:18:38.505018 2026] [autoindex:error] [pid 39292:tid 39317] [client 13.71.191.191:7160] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 13:18:40.131943 2026] [:error] [pid 39185:tid 39246] [client 13.71.191.191:6992] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/input.php"] [unique_id "aaJ6sBVE-FfM89u7BQbQxAAAAIA"]
[Sat Feb 28 13:18:50.362113 2026] [:error] [pid 52460:tid 52478] [client 13.71.191.191:7060] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaJ6urLWOogAgHGh62Q6OQAAAY8"]
[Sat Feb 28 13:18:51.160631 2026] [:error] [pid 39185:tid 39260] [client 13.71.191.191:7103] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaJ6uxVE-FfM89u7BQbQ8wAAAI4"]
[Sat Feb 28 13:18:51.834819 2026] [:error] [pid 39185:tid 39270] [client 13.71.191.191:7149] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaJ6uxVE-FfM89u7BQbQ-AAAAJg"]
[Sat Feb 28 13:18:52.435341 2026] [:error] [pid 52460:tid 52470] [client 13.71.191.191:7114] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaJ6vLLWOogAgHGh62Q6PgAAAYc"]
[Sat Feb 28 13:18:53.311845 2026] [:error] [pid 39292:tid 39303] [client 13.71.191.191:7029] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ok.php"] [unique_id "aaJ6vaIAO5fN7BxyqcHW8AAAAMk"]
[Sat Feb 28 13:18:53.981585 2026] [:error] [pid 39185:tid 39257] [client 13.71.191.191:7106] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ok.php"] [unique_id "aaJ6vRVE-FfM89u7BQbQ_AAAAIs"]
[Sat Feb 28 13:18:54.534723 2026] [:error] [pid 39292:tid 39300] [client 13.71.191.191:7042] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ok.php"] [unique_id "aaJ6vqIAO5fN7BxyqcHW9AAAAMY"]
[Sat Feb 28 13:18:55.051026 2026] [:error] [pid 11791:tid 11796] [client 13.71.191.191:7054] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ok.php"] [unique_id "aaJ6v2uX5e1Q32gqxH0gOwAAAQM"]
[Sat Feb 28 13:18:55.489587 2026] [:error] [pid 11791:tid 11794] [client 13.71.191.191:7079] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaJ6v2uX5e1Q32gqxH0gPQAAAQE"]
[Sat Feb 28 13:18:56.065284 2026] [:error] [pid 11791:tid 11805] [client 13.71.191.191:7018] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaJ6wGuX5e1Q32gqxH0gQQAAAQw"]
[Sat Feb 28 13:18:56.486401 2026] [:error] [pid 11791:tid 11798] [client 13.71.191.191:7070] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaJ6wGuX5e1Q32gqxH0gQgAAAQU"]
[Sat Feb 28 13:18:56.952535 2026] [:error] [pid 22194:tid 22204] [client 13.71.191.191:6977] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaJ6wH6mbajs3bzQGytDRwAAAUg"]
[Sat Feb 28 13:18:57.405598 2026] [:error] [pid 52460:tid 52471] [client 13.71.191.191:7161] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fw.php"] [unique_id "aaJ6wbLWOogAgHGh62Q6RwAAAYg"]
[Sat Feb 28 13:18:57.896766 2026] [:error] [pid 52460:tid 52478] [client 13.71.191.191:7109] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fw.php"] [unique_id "aaJ6wbLWOogAgHGh62Q6SQAAAY8"]
[Sat Feb 28 13:18:58.419848 2026] [:error] [pid 39185:tid 39251] [client 13.71.191.191:6922] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fw.php"] [unique_id "aaJ6whVE-FfM89u7BQbRBAAAAIU"]
[Sat Feb 28 13:18:59.092151 2026] [:error] [pid 11791:tid 11801] [client 13.71.191.191:7148] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fw.php"] [unique_id "aaJ6w2uX5e1Q32gqxH0gTQAAAQg"]
[Sat Feb 28 13:18:59.577113 2026] [:error] [pid 11791:tid 11796] [client 13.71.191.191:7076] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/content.php"] [unique_id "aaJ6w2uX5e1Q32gqxH0gTwAAAQM"]
[Sat Feb 28 13:19:00.015815 2026] [:error] [pid 39185:tid 39265] [client 13.71.191.191:7117] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/content.php"] [unique_id "aaJ6xBVE-FfM89u7BQbRCAAAAJM"]
[Sat Feb 28 13:19:00.646969 2026] [:error] [pid 39185:tid 39257] [client 13.71.191.191:6991] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/content.php"] [unique_id "aaJ6xBVE-FfM89u7BQbRCQAAAIs"]
[Sat Feb 28 13:19:01.242258 2026] [:error] [pid 39185:tid 39259] [client 13.71.191.191:7096] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/content.php"] [unique_id "aaJ6xRVE-FfM89u7BQbRDQAAAI0"]
[Sat Feb 28 13:19:01.754374 2026] [:error] [pid 52460:tid 52467] [client 13.71.191.191:7014] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaJ6xbLWOogAgHGh62Q6SwAAAYQ"]
[Sat Feb 28 13:19:02.302665 2026] [:error] [pid 39185:tid 39248] [client 13.71.191.191:7138] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaJ6xhVE-FfM89u7BQbREwAAAII"]
[Sat Feb 28 13:19:02.761933 2026] [:error] [pid 52460:tid 52476] [client 13.71.191.191:6985] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaJ6xrLWOogAgHGh62Q6TQAAAY0"]
[Sat Feb 28 13:19:03.300462 2026] [:error] [pid 39185:tid 39263] [client 13.71.191.191:7067] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaJ6xxVE-FfM89u7BQbRGgAAAJE"]
[Sat Feb 28 13:19:03.870450 2026] [:error] [pid 39292:tid 39315] [client 13.71.191.191:7036] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cms.php"] [unique_id "aaJ6x6IAO5fN7BxyqcHW-AAAANU"]
[Sat Feb 28 13:19:04.476608 2026] [:error] [pid 39292:tid 39318] [client 13.71.191.191:6987] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cms.php"] [unique_id "aaJ6yKIAO5fN7BxyqcHW-wAAANg"]
[Sat Feb 28 13:19:05.147384 2026] [:error] [pid 11791:tid 11793] [client 13.71.191.191:7025] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cms.php"] [unique_id "aaJ6yWuX5e1Q32gqxH0gZAAAAQA"]
[Sat Feb 28 13:19:05.580583 2026] [:error] [pid 11791:tid 11800] [client 13.71.191.191:7032] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cms.php"] [unique_id "aaJ6yWuX5e1Q32gqxH0gZgAAAQc"]
[Sat Feb 28 13:19:06.047307 2026] [:error] [pid 39184:tid 39224] [client 13.71.191.191:7150] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/adminer.php"] [unique_id "aaJ6yltZF9Zd_U7easDc2gAAAEU"]
[Sat Feb 28 13:19:06.537474 2026] [:error] [pid 39292:tid 39310] [client 13.71.191.191:7091] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/adminer.php"] [unique_id "aaJ6yqIAO5fN7BxyqcHXBQAAANA"]
[Sat Feb 28 13:19:07.180981 2026] [:error] [pid 39185:tid 39253] [client 13.71.191.191:7154] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/adminer.php"] [unique_id "aaJ6yxVE-FfM89u7BQbRGwAAAIc"]
[Sat Feb 28 13:19:07.734323 2026] [:error] [pid 39183:tid 39201] [client 13.71.191.191:7124] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/adminer.php"] [unique_id "aaJ6yxCf4HvhVePw3LbrNAAAAAk"]
[Sat Feb 28 13:19:08.362009 2026] [:error] [pid 52460:tid 52484] [client 13.71.191.191:7087] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/duck.php"] [unique_id "aaJ6zLLWOogAgHGh62Q6WAAAAZU"]
[Sat Feb 28 13:19:08.783880 2026] [:error] [pid 39185:tid 39252] [client 13.71.191.191:7134] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/duck.php"] [unique_id "aaJ6zBVE-FfM89u7BQbRIAAAAIY"]
[Sat Feb 28 13:19:09.406542 2026] [:error] [pid 39185:tid 39262] [client 13.71.191.191:6986] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/duck.php"] [unique_id "aaJ6zRVE-FfM89u7BQbRIQAAAJA"]
[Sat Feb 28 13:19:10.006215 2026] [:error] [pid 39185:tid 39261] [client 13.71.191.191:6989] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/duck.php"] [unique_id "aaJ6zhVE-FfM89u7BQbRJAAAAI8"]
[Sat Feb 28 13:19:10.539714 2026] [:error] [pid 39185:tid 39254] [client 13.71.191.191:7080] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/contact.php"] [unique_id "aaJ6zhVE-FfM89u7BQbRKwAAAIg"]
[Sat Feb 28 13:19:11.037643 2026] [:error] [pid 39185:tid 39252] [client 13.71.191.191:7077] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/contact.php"] [unique_id "aaJ6zxVE-FfM89u7BQbRMAAAAIY"]
[Sat Feb 28 13:19:11.634624 2026] [:error] [pid 39185:tid 39261] [client 13.71.191.191:7035] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/contact.php"] [unique_id "aaJ6zxVE-FfM89u7BQbRMgAAAI8"]
[Sat Feb 28 13:19:12.155167 2026] [:error] [pid 39292:tid 39315] [client 13.71.191.191:6993] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/contact.php"] [unique_id "aaJ60KIAO5fN7BxyqcHXCQAAANU"]
[Sat Feb 28 13:19:12.748417 2026] [:error] [pid 52460:tid 52463] [client 13.71.191.191:7007] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dqbayyrz.php"] [unique_id "aaJ60LLWOogAgHGh62Q6WgAAAYA"]
[Sat Feb 28 13:19:13.338488 2026] [:error] [pid 39292:tid 39300] [client 13.71.191.191:6913] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dqbayyrz.php"] [unique_id "aaJ60aIAO5fN7BxyqcHXDQAAAMY"]
[Sat Feb 28 13:19:13.987492 2026] [:error] [pid 11791:tid 11811] [client 13.71.191.191:7005] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dqbayyrz.php"] [unique_id "aaJ60WuX5e1Q32gqxH0ggQAAARI"]
[Sat Feb 28 13:19:14.527963 2026] [:error] [pid 39185:tid 39256] [client 13.71.191.191:7092] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dqbayyrz.php"] [unique_id "aaJ60hVE-FfM89u7BQbRQgAAAIo"]
[Sat Feb 28 13:58:12.672218 2026] [:error] [pid 39185:tid 39249] [client 45.153.34.31:47420] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aaKD9BVE-FfM89u7BQb4dwAAAIM"]
[Sat Feb 28 14:12:33.975234 2026] [:error] [pid 39292:tid 39301] [client 4.204.192.31:63711] [client 4.204.192.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaKHUaIAO5fN7BxyqcHpHwAAAMc"]
[Sat Feb 28 14:13:08.746970 2026] [:error] [pid 52460:tid 52476] [client 4.204.192.31:1435] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/x123x.php"] [unique_id "aaKHdLLWOogAgHGh62RhjgAAAY0"]
[Sat Feb 28 14:13:32.761494 2026] [:error] [pid 39183:tid 39215] [client 4.204.192.31:1950] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/aq.php"] [unique_id "aaKHjBCf4HvhVePw3Lb0JQAAABc"]
[Sat Feb 28 14:13:53.621675 2026] [:error] [pid 39185:tid 39270] [client 4.204.192.31:63685] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/011i.php"] [unique_id "aaKHoRVE-FfM89u7BQYKgAAAAJg"]
[Sat Feb 28 14:14:04.479223 2026] [:error] [pid 39292:tid 39310] [client 4.204.192.31:1428] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/011i.php"] [unique_id "aaKHrKIAO5fN7BxyqcHpfQAAANA"]
[Sat Feb 28 18:02:12.572281 2026] [autoindex:error] [pid 49763:tid 49768] [client 20.151.11.236:15238] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:02:13.487537 2026] [:error] [pid 52460:tid 52464] [client 20.151.11.236:15339] [client 20.151.11.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaK9JbLWOogAgHGh62TZKgAAAYE"]
[Sat Feb 28 18:02:17.406956 2026] [:error] [pid 52460:tid 52480] [client 20.151.11.236:15313] [client 20.151.11.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.151.11.236, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aaK9KbLWOogAgHGh62TZVAAAAZE"]
[Sat Feb 28 18:02:40.931487 2026] [:error] [pid 52460:tid 52483] [client 20.151.11.236:15312] [client 20.151.11.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tinyfilemanager.php"] [unique_id "aaK9QLLWOogAgHGh62TaKAAAAZQ"]
[Sat Feb 28 18:02:49.152202 2026] [autoindex:error] [pid 39292:tid 39305] [client 20.151.11.236:15351] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:02:59.406505 2026] [autoindex:error] [pid 39184:tid 39221] [client 20.151.11.236:15288] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:03:08.381937 2026] [autoindex:error] [pid 52460:tid 52467] [client 20.151.11.236:15250] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:03:13.975849 2026] [autoindex:error] [pid 39184:tid 39234] [client 20.151.11.236:15172] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:03:21.603048 2026] [autoindex:error] [pid 52460:tid 52477] [client 20.151.11.236:15347] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2021/02/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:03:26.873985 2026] [:error] [pid 39184:tid 39233] [client 20.151.11.236:15260] [client 20.151.11.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaK9bltZF9Zd_U7easBWmwAAAE4"]
[Sat Feb 28 18:03:31.346441 2026] [autoindex:error] [pid 39292:tid 39303] [client 20.151.11.236:15247] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:03:33.825911 2026] [autoindex:error] [pid 11791:tid 11793] [client 20.151.11.236:15274] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:31:07.799499 2026] [:error] [pid 49763:tid 49783] [client 45.153.34.31:44264] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aaLD67THSOG_yf2PpqFcigAAAdE"]
[Sat Feb 28 18:40:43.856512 2026] [:error] [pid 39184:tid 39232] [client 204.76.203.25:37650] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aaLGK1tZF9Zd_U7easBrrwAAAE0"]
[Sat Feb 28 21:41:34.028712 2026] [:error] [pid 49763:tid 49783] [client 20.151.205.221:15945] [client 20.151.205.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaLwjrTHSOG_yf2PpqGMfAAAAdE"]
[Sat Feb 28 21:41:38.319838 2026] [autoindex:error] [pid 52460:tid 52478] [client 20.151.205.221:59336] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:41:38.529951 2026] [proxy_fcgi:error] [pid 52460:tid 52470] [client 20.151.205.221:59336] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:41:38.756645 2026] [autoindex:error] [pid 52460:tid 52465] [client 20.151.205.221:59336] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:41:40.128197 2026] [:error] [pid 39185:tid 39252] [client 20.151.205.221:61840] [client 20.151.205.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.151.205.221, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aaLwlBVE-FfM89u7BQanSgAAAIY"]
[Sat Feb 28 21:41:42.353737 2026] [autoindex:error] [pid 22194:tid 22213] [client 20.151.205.221:15939] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:41:43.724132 2026] [:error] [pid 39185:tid 39249] [client 20.151.205.221:60654] [client 20.151.205.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaLwlxVE-FfM89u7BQanTgAAAIM"]
[Sat Feb 28 21:41:44.593727 2026] [:error] [pid 22194:tid 22205] [client 20.151.205.221:55247] [client 20.151.205.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aaLwmH6mbajs3bzQGyuqQgAAAUk"]
[Sat Feb 28 21:41:49.620775 2026] [autoindex:error] [pid 39292:tid 39311] [client 20.151.205.221:61847] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:41:52.411732 2026] [:error] [pid 49763:tid 49775] [client 20.151.205.221:61843] [client 20.151.205.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/lv.php"] [unique_id "aaLwoLTHSOG_yf2PpqGM1gAAAck"]
[Sat Feb 28 21:42:00.125211 2026] [autoindex:error] [pid 39184:tid 39219] [client 20.151.205.221:55746] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:42:04.934479 2026] [:error] [pid 39183:tid 39207] [client 20.151.205.221:15794] [client 20.151.205.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aaLwrBCf4HvhVePw3LZdzAAAAA8"]
[Sat Feb 28 21:42:06.886902 2026] [:error] [pid 39184:tid 39224] [client 20.151.205.221:56826] [client 20.151.205.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLwrltZF9Zd_U7easDONgAAAEU"]
[Sat Feb 28 21:42:08.881691 2026] [autoindex:error] [pid 52460:tid 52487] [client 20.151.205.221:15651] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:41:38.068747 2026] [autoindex:error] [pid 52460:tid 52473] [client 20.220.144.87:33732] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:41:39.067848 2026] [:error] [pid 49763:tid 49776] [client 20.220.144.87:33746] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaL-o7THSOG_yf2PpqHePwAAAco"]
[Sat Feb 28 22:41:43.491956 2026] [:error] [pid 39184:tid 39230] [client 20.220.144.87:33750] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tinyfilemanager.php"] [unique_id "aaL-p1tZF9Zd_U7easDtxwAAAEs"]
[Sat Feb 28 22:41:50.387105 2026] [autoindex:error] [pid 39183:tid 39201] [client 20.220.144.87:33749] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:42:02.574321 2026] [autoindex:error] [pid 52460:tid 52473] [client 20.220.144.87:33753] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:42:11.241825 2026] [autoindex:error] [pid 39183:tid 39216] [client 20.220.144.87:33693] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 00:24:46.578669 2026] [:error] [pid 31190:tid 31228] [client 20.63.83.162:26347] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wk/index.php"] [unique_id "aaMWzhfvwGOholYpM1E88AAAANY"]
[Sun Mar 01 00:24:47.418995 2026] [:error] [pid 53600:tid 53625] [client 20.63.83.162:60665] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wk/index.php"] [unique_id "aaMWzw2UMRAYWtDB23Se0wAAARY"]
[Sun Mar 01 00:24:48.250255 2026] [:error] [pid 31190:tid 31223] [client 20.63.83.162:60640] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wk/index.php"] [unique_id "aaMW0BfvwGOholYpM1E9DwAAANE"]
[Sun Mar 01 00:24:49.095990 2026] [:error] [pid 30795:tid 30811] [client 20.63.83.162:60609] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wk/index.php"] [unique_id "aaMW0WuI44IL94Zgti-ktgAAAAM"]
[Sun Mar 01 00:41:21.521151 2026] [:error] [pid 53600:tid 53605] [client 20.151.205.221:54159] [client 20.151.205.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaMasQ2UMRAYWtDB23S7NAAAAQI"]
[Sun Mar 01 00:41:22.991110 2026] [autoindex:error] [pid 53600:tid 53623] [client 20.151.205.221:54163] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 00:41:28.645800 2026] [autoindex:error] [pid 53600:tid 53604] [client 20.151.205.221:53331] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 00:41:28.855210 2026] [autoindex:error] [pid 53600:tid 53613] [client 20.151.205.221:53331] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/block/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 00:41:29.611485 2026] [:error] [pid 53600:tid 53612] [client 20.151.205.221:53331] [client 20.151.205.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaMauQ2UMRAYWtDB23S7hwAAAQk"]
[Sun Mar 01 00:41:31.655236 2026] [autoindex:error] [pid 30795:tid 30825] [client 20.151.205.221:54175] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 00:41:34.699519 2026] [autoindex:error] [pid 53600:tid 53611] [client 20.151.205.221:16195] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 00:41:34.905905 2026] [:error] [pid 53600:tid 53616] [client 20.151.205.221:16195] [client 20.151.205.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaMavg2UMRAYWtDB23S7vQAAAQ0"]
[Sun Mar 01 00:41:35.764124 2026] [autoindex:error] [pid 31190:tid 31217] [client 20.151.205.221:16249] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 00:41:38.294874 2026] [:error] [pid 53600:tid 53610] [client 20.151.205.221:53334] [client 20.151.205.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaMawg2UMRAYWtDB23S76AAAAQc"]
[Sun Mar 01 00:41:40.307407 2026] [autoindex:error] [pid 30797:tid 30875] [client 20.151.205.221:16213] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 00:41:40.512626 2026] [:error] [pid 30797:tid 30895] [client 20.151.205.221:16213] [client 20.151.205.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.205.221, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaMaxPQmcmSQL-3rvLD9QwAAAFg"]
[Sun Mar 01 00:41:42.454667 2026] [autoindex:error] [pid 31190:tid 31218] [client 20.151.205.221:53361] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2023/08/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 00:41:45.218379 2026] [autoindex:error] [pid 53600:tid 53606] [client 20.151.205.221:15398] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 00:41:48.330551 2026] [autoindex:error] [pid 53600:tid 53605] [client 20.151.205.221:16202] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 00:41:50.678332 2026] [autoindex:error] [pid 53600:tid 53614] [client 20.151.205.221:16202] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 00:41:52.052154 2026] [:error] [pid 31190:tid 31213] [client 20.151.205.221:15406] [client 20.151.205.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaMa0BfvwGOholYpM1FROAAAAMc"]
[Sun Mar 01 00:41:54.099879 2026] [autoindex:error] [pid 31190:tid 31222] [client 20.151.205.221:16216] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 00:41:55.832029 2026] [:error] [pid 53600:tid 53615] [client 20.151.205.221:16198] [client 20.151.205.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aaMa0w2UMRAYWtDB23S8XQAAAQw"]
[Sun Mar 01 00:41:57.876529 2026] [:error] [pid 31190:tid 31208] [client 20.151.205.221:15389] [client 20.151.205.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaMa1RfvwGOholYpM1FRUQAAAMI"]
[Sun Mar 01 01:59:43.324193 2026] [:error] [pid 7644:tid 7651] [client 20.104.124.39:43189] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaMtD_qeDUGmVAHX7VCmFwAAAUU"]
[Sun Mar 01 01:59:51.605130 2026] [:error] [pid 30798:tid 30904] [client 20.104.124.39:43203] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class-t.api.php"] [unique_id "aaMtF8BkD73gO8wTonaPJgAAAIU"]
[Sun Mar 01 01:59:55.668541 2026] [:error] [pid 31190:tid 31229] [client 20.104.124.39:43244] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class-t.api.php"] [unique_id "aaMtGxfvwGOholYpM1GRhgAAANc"]
[Sun Mar 01 01:59:58.254994 2026] [:error] [pid 30798:tid 30910] [client 20.104.124.39:43190] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class-t.api.php"] [unique_id "aaMtHsBkD73gO8wTonaPPwAAAIs"]
[Sun Mar 01 01:59:59.951038 2026] [:error] [pid 31190:tid 31227] [client 20.104.124.39:43221] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class-t.api.php"] [unique_id "aaMtHxfvwGOholYpM1GRjQAAANU"]
[Sun Mar 01 02:00:01.003564 2026] [:error] [pid 31190:tid 31226] [client 20.104.124.39:43191] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/zwso.php"] [unique_id "aaMtIRfvwGOholYpM1GRkgAAANQ"]
[Sun Mar 01 02:00:03.037568 2026] [:error] [pid 30795:tid 30828] [client 20.104.124.39:43163] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/zwso.php"] [unique_id "aaMtI2uI44IL94Zgti_HfAAAABQ"]
[Sun Mar 01 02:00:04.791011 2026] [:error] [pid 7644:tid 7656] [client 20.104.124.39:43137] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/zwso.php"] [unique_id "aaMtJPqeDUGmVAHX7VCmLQAAAUo"]
[Sun Mar 01 02:00:05.593144 2026] [:error] [pid 31190:tid 31218] [client 20.104.124.39:43158] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/zwso.php"] [unique_id "aaMtJRfvwGOholYpM1GRpAAAAMw"]
[Sun Mar 01 02:00:07.334168 2026] [:error] [pid 30797:tid 30885] [client 20.104.124.39:43180] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaMtJ_QmcmSQL-3rvLAN2QAAAE4"]
[Sun Mar 01 02:00:09.290339 2026] [:error] [pid 30798:tid 30910] [client 20.104.124.39:43213] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaMtKcBkD73gO8wTonaPXQAAAIs"]
[Sun Mar 01 02:00:11.351641 2026] [:error] [pid 11920:tid 11946] [client 20.104.124.39:43219] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaMtKyzLNJUKxvBorrDaJgAAAZY"]
[Sun Mar 01 02:00:12.150141 2026] [:error] [pid 30798:tid 30924] [client 20.104.124.39:43178] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaMtLMBkD73gO8wTonaPdQAAAJg"]
[Sun Mar 01 02:00:15.183826 2026] [:error] [pid 53600:tid 53605] [client 20.104.124.39:43207] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class19.php"] [unique_id "aaMtLw2UMRAYWtDB23TsKgAAAQI"]
[Sun Mar 01 02:00:17.723616 2026] [:error] [pid 30798:tid 30922] [client 20.104.124.39:43176] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class19.php"] [unique_id "aaMtMcBkD73gO8wTonaPnQAAAJY"]
[Sun Mar 01 02:00:18.323655 2026] [:error] [pid 11920:tid 11933] [client 20.104.124.39:43159] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class19.php"] [unique_id "aaMtMizLNJUKxvBorrDaWQAAAYk"]
[Sun Mar 01 02:00:19.858511 2026] [:error] [pid 31190:tid 31213] [client 20.104.124.39:43227] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class19.php"] [unique_id "aaMtMxfvwGOholYpM1GRswAAAMc"]
[Sun Mar 01 02:00:20.884525 2026] [:error] [pid 53600:tid 53609] [client 20.104.124.39:43230] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class20.php"] [unique_id "aaMtNA2UMRAYWtDB23TsPAAAAQY"]
[Sun Mar 01 02:00:21.750256 2026] [:error] [pid 11920:tid 11929] [client 20.104.124.39:43243] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class20.php"] [unique_id "aaMtNSzLNJUKxvBorrDadQAAAYU"]
[Sun Mar 01 02:00:23.877772 2026] [:error] [pid 11920:tid 11945] [client 20.104.124.39:43175] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class20.php"] [unique_id "aaMtNyzLNJUKxvBorrDakAAAAZU"]
[Sun Mar 01 02:00:24.830689 2026] [:error] [pid 11920:tid 11924] [client 20.104.124.39:43148] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class20.php"] [unique_id "aaMtOCzLNJUKxvBorrDamwAAAYA"]
[Sun Mar 01 02:00:25.898851 2026] [:error] [pid 31190:tid 31210] [client 20.104.124.39:43153] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aaMtORfvwGOholYpM1GRvgAAAMQ"]
[Sun Mar 01 02:00:26.947887 2026] [:error] [pid 31190:tid 31218] [client 20.104.124.39:43194] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aaMtOhfvwGOholYpM1GRxwAAAMw"]
[Sun Mar 01 02:00:27.880438 2026] [:error] [pid 53600:tid 53622] [client 20.104.124.39:43226] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aaMtOw2UMRAYWtDB23TsQwAAARM"]
[Sun Mar 01 02:00:28.802132 2026] [:error] [pid 31190:tid 31223] [client 20.104.124.39:43222] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aaMtPBfvwGOholYpM1GRygAAANE"]
[Sun Mar 01 02:00:30.125340 2026] [:error] [pid 31190:tid 31214] [client 20.104.124.39:43184] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/randkeyword.php"] [unique_id "aaMtPhfvwGOholYpM1GR0wAAAMg"]
[Sun Mar 01 02:00:31.085501 2026] [:error] [pid 30797:tid 30879] [client 20.104.124.39:43289] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/randkeyword.php"] [unique_id "aaMtP_QmcmSQL-3rvLAN6wAAAEg"]
[Sun Mar 01 02:00:31.917008 2026] [:error] [pid 11920:tid 11936] [client 20.104.124.39:43155] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/randkeyword.php"] [unique_id "aaMtPyzLNJUKxvBorrDa0gAAAYw"]
[Sun Mar 01 02:00:32.466954 2026] [:error] [pid 11920:tid 11939] [client 20.104.124.39:43142] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/randkeyword.php"] [unique_id "aaMtQCzLNJUKxvBorrDa2wAAAY8"]
[Sun Mar 01 02:00:34.803688 2026] [:error] [pid 31190:tid 31214] [client 20.104.124.39:43192] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/fwe.php"] [unique_id "aaMtQhfvwGOholYpM1GR4wAAAMg"]
[Sun Mar 01 02:00:38.209363 2026] [:error] [pid 53600:tid 53620] [client 20.104.124.39:43238] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/fwe.php"] [unique_id "aaMtRg2UMRAYWtDB23TsTwAAARE"]
[Sun Mar 01 02:00:40.925932 2026] [:error] [pid 11920:tid 11947] [client 20.104.124.39:43215] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/fwe.php"] [unique_id "aaMtSCzLNJUKxvBorrDbCQAAAZc"]
[Sun Mar 01 02:00:45.036590 2026] [:error] [pid 11920:tid 11925] [client 20.104.124.39:43286] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/fwe.php"] [unique_id "aaMtTSzLNJUKxvBorrDbOQAAAYE"]
[Sun Mar 01 02:00:46.872175 2026] [:error] [pid 11920:tid 11926] [client 20.104.124.39:43265] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/images/m.php"] [unique_id "aaMtTizLNJUKxvBorrDbUwAAAYI"]
[Sun Mar 01 02:00:48.640228 2026] [:error] [pid 53600:tid 53623] [client 20.104.124.39:43167] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/images/m.php"] [unique_id "aaMtUA2UMRAYWtDB23TsXAAAARQ"]
[Sun Mar 01 02:00:58.797805 2026] [:error] [pid 11920:tid 11942] [client 20.104.124.39:43136] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/tx1.php"] [unique_id "aaMtWizLNJUKxvBorrDb6wAAAZI"]
[Sun Mar 01 02:01:00.385642 2026] [:error] [pid 30798:tid 30922] [client 20.104.124.39:43179] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/tx1.php"] [unique_id "aaMtXMBkD73gO8wTonaQJQAAAJY"]
[Sun Mar 01 02:01:02.503805 2026] [:error] [pid 30798:tid 30916] [client 20.104.124.39:43182] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/tx1.php"] [unique_id "aaMtXsBkD73gO8wTonaQMgAAAJE"]
[Sun Mar 01 02:01:09.282762 2026] [:error] [pid 11920:tid 11926] [client 20.104.124.39:43185] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/tx1.php"] [unique_id "aaMtZSzLNJUKxvBorrDcDgAAAYI"]
[Sun Mar 01 02:01:12.643025 2026] [:error] [pid 31190:tid 31206] [client 20.104.124.39:43196] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xv.php"] [unique_id "aaMtaBfvwGOholYpM1GSZQAAAMA"]
[Sun Mar 01 02:01:14.727809 2026] [:error] [pid 11920:tid 11938] [client 20.104.124.39:43211] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xv.php"] [unique_id "aaMtaizLNJUKxvBorrDcOAAAAY4"]
[Sun Mar 01 02:01:18.609624 2026] [:error] [pid 30798:tid 30922] [client 20.104.124.39:43208] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xv.php"] [unique_id "aaMtbsBkD73gO8wTonaQ1wAAAJY"]
[Sun Mar 01 02:01:21.948531 2026] [:error] [pid 30798:tid 30916] [client 20.104.124.39:43281] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xv.php"] [unique_id "aaMtccBkD73gO8wTonaQ_AAAAJE"]
[Sun Mar 01 02:01:25.008774 2026] [:error] [pid 11920:tid 11936] [client 20.104.124.39:43225] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/x56.php"] [unique_id "aaMtdSzLNJUKxvBorrDcVAAAAYw"]
[Sun Mar 01 02:01:27.562020 2026] [:error] [pid 53600:tid 53618] [client 20.104.124.39:43278] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/x56.php"] [unique_id "aaMtdw2UMRAYWtDB23TsjgAAAQ8"]
[Sun Mar 01 02:01:31.670826 2026] [:error] [pid 53600:tid 53612] [client 20.104.124.39:43186] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/x56.php"] [unique_id "aaMtew2UMRAYWtDB23TskAAAAQk"]
[Sun Mar 01 02:01:32.588139 2026] [:error] [pid 30798:tid 30923] [client 20.104.124.39:43162] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/x56.php"] [unique_id "aaMtfMBkD73gO8wTonaRMgAAAJc"]
[Sun Mar 01 02:01:35.697460 2026] [:error] [pid 30795:tid 30829] [client 20.104.124.39:43233] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/htaccess.php"] [unique_id "aaMtf2uI44IL94Zgti_H0QAAABU"]
[Sun Mar 01 02:01:38.066885 2026] [:error] [pid 11920:tid 11946] [client 20.104.124.39:43240] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/htaccess.php"] [unique_id "aaMtgizLNJUKxvBorrDcdQAAAZY"]
[Sun Mar 01 02:01:39.657936 2026] [:error] [pid 30798:tid 30908] [client 20.104.124.39:43259] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/htaccess.php"] [unique_id "aaMtg8BkD73gO8wTonaRWAAAAIk"]
[Sun Mar 01 02:01:41.778921 2026] [:error] [pid 11920:tid 11933] [client 20.104.124.39:43256] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/htaccess.php"] [unique_id "aaMthSzLNJUKxvBorrDcjgAAAYk"]
[Sun Mar 01 02:01:42.784932 2026] [:error] [pid 11920:tid 11937] [client 20.104.124.39:43149] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/readme.php"] [unique_id "aaMthizLNJUKxvBorrDcmAAAAY0"]
[Sun Mar 01 02:01:44.555508 2026] [:error] [pid 30798:tid 30907] [client 20.104.124.39:43157] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/readme.php"] [unique_id "aaMtiMBkD73gO8wTonaRXwAAAIg"]
[Sun Mar 01 02:01:45.516109 2026] [:error] [pid 30798:tid 30911] [client 20.104.124.39:43160] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/readme.php"] [unique_id "aaMticBkD73gO8wTonaRYwAAAIw"]
[Sun Mar 01 02:01:46.744285 2026] [:error] [pid 31190:tid 31216] [client 20.104.124.39:43261] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/readme.php"] [unique_id "aaMtihfvwGOholYpM1GSywAAAMo"]
[Sun Mar 01 02:01:47.644948 2026] [:error] [pid 30798:tid 30900] [client 20.104.124.39:43216] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/x50.php"] [unique_id "aaMti8BkD73gO8wTonaRbgAAAIE"]
[Sun Mar 01 02:01:49.432739 2026] [:error] [pid 30798:tid 30908] [client 20.104.124.39:43231] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/x50.php"] [unique_id "aaMtjcBkD73gO8wTonaRdQAAAIk"]
[Sun Mar 01 02:01:51.894720 2026] [:error] [pid 31190:tid 31214] [client 20.104.124.39:43201] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/x50.php"] [unique_id "aaMtjxfvwGOholYpM1GS6wAAAMg"]
[Sun Mar 01 02:01:53.554656 2026] [:error] [pid 11920:tid 11932] [client 20.104.124.39:43284] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/x50.php"] [unique_id "aaMtkSzLNJUKxvBorrDcwAAAAYg"]
[Sun Mar 01 02:01:55.420224 2026] [:error] [pid 11920:tid 11937] [client 20.104.124.39:43206] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/fv.php"] [unique_id "aaMtkyzLNJUKxvBorrDczQAAAY0"]
[Sun Mar 01 02:01:57.597047 2026] [:error] [pid 30798:tid 30914] [client 20.104.124.39:43187] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/fv.php"] [unique_id "aaMtlcBkD73gO8wTonaRjQAAAI8"]
[Sun Mar 01 02:02:04.315527 2026] [:error] [pid 11920:tid 11940] [client 20.104.124.39:43193] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/file.php"] [unique_id "aaMtnCzLNJUKxvBorrDc_wAAAZA"]
[Sun Mar 01 02:02:08.423837 2026] [:error] [pid 31190:tid 31209] [client 20.104.124.39:43292] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/file.php"] [unique_id "aaMtoBfvwGOholYpM1GTPwAAAMM"]
[Sun Mar 01 02:02:11.722005 2026] [:error] [pid 11920:tid 11937] [client 20.104.124.39:43217] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/file.php"] [unique_id "aaMtoyzLNJUKxvBorrDdHQAAAY0"]
[Sun Mar 01 02:02:13.767787 2026] [:error] [pid 30798:tid 30911] [client 20.104.124.39:43302] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/file.php"] [unique_id "aaMtpcBkD73gO8wTonaR6gAAAIw"]
[Sun Mar 01 02:02:14.996898 2026] [:error] [pid 30798:tid 30905] [client 20.104.124.39:43312] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/lsd.php"] [unique_id "aaMtpsBkD73gO8wTonaR8QAAAIY"]
[Sun Mar 01 02:02:16.828993 2026] [:error] [pid 11920:tid 11943] [client 20.104.124.39:43188] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/lsd.php"] [unique_id "aaMtqCzLNJUKxvBorrDdPQAAAZM"]
[Sun Mar 01 02:02:18.268800 2026] [:error] [pid 31190:tid 31226] [client 20.104.124.39:43340] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/lsd.php"] [unique_id "aaMtqhfvwGOholYpM1GTZgAAANQ"]
[Sun Mar 01 02:02:19.106555 2026] [:error] [pid 31190:tid 31211] [client 20.104.124.39:43177] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/lsd.php"] [unique_id "aaMtqxfvwGOholYpM1GTawAAAMU"]
[Sun Mar 01 02:02:21.032807 2026] [:error] [pid 31190:tid 31229] [client 20.104.124.39:43269] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/as.php"] [unique_id "aaMtrRfvwGOholYpM1GTcwAAANc"]
[Sun Mar 01 02:02:22.276781 2026] [:error] [pid 30795:tid 30809] [client 20.104.124.39:43200] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/as.php"] [unique_id "aaMtrmuI44IL94Zgti_H4wAAAAE"]
[Sun Mar 01 02:02:23.445684 2026] [:error] [pid 30795:tid 30831] [client 20.104.124.39:43273] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/as.php"] [unique_id "aaMtr2uI44IL94Zgti_H5QAAABc"]
[Sun Mar 01 02:02:25.117595 2026] [:error] [pid 30798:tid 30903] [client 20.104.124.39:43250] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/as.php"] [unique_id "aaMtscBkD73gO8wTonaSAwAAAIQ"]
[Sun Mar 01 02:02:26.306534 2026] [:error] [pid 30795:tid 30815] [client 20.104.124.39:43151] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wsd.php"] [unique_id "aaMtsmuI44IL94Zgti_H5wAAAAc"]
[Sun Mar 01 02:02:26.986317 2026] [:error] [pid 31190:tid 31225] [client 20.104.124.39:43308] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wsd.php"] [unique_id "aaMtshfvwGOholYpM1GTgwAAANM"]
[Sun Mar 01 02:02:29.036088 2026] [:error] [pid 30795:tid 30830] [client 20.104.124.39:43161] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wsd.php"] [unique_id "aaMttWuI44IL94Zgti_H6gAAABY"]
[Sun Mar 01 02:02:31.558844 2026] [:error] [pid 11920:tid 11940] [client 20.104.124.39:43150] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wsd.php"] [unique_id "aaMttyzLNJUKxvBorrDdeAAAAZA"]
[Sun Mar 01 02:02:33.572643 2026] [:error] [pid 11920:tid 11927] [client 20.104.124.39:43171] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gtc.php"] [unique_id "aaMtuSzLNJUKxvBorrDdigAAAYM"]
[Sun Mar 01 02:02:34.956838 2026] [:error] [pid 30797:tid 30873] [client 20.104.124.39:43204] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gtc.php"] [unique_id "aaMtuvQmcmSQL-3rvLAOQgAAAEI"]
[Sun Mar 01 02:02:35.943768 2026] [:error] [pid 30798:tid 30905] [client 20.104.124.39:43232] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gtc.php"] [unique_id "aaMtu8BkD73gO8wTonaSGQAAAIY"]
[Sun Mar 01 02:02:37.099175 2026] [:error] [pid 53600:tid 53626] [client 20.104.124.39:43236] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gtc.php"] [unique_id "aaMtvQ2UMRAYWtDB23TtGgAAARc"]
[Sun Mar 01 02:02:37.800537 2026] [:error] [pid 30798:tid 30911] [client 20.104.124.39:43210] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/atx.php"] [unique_id "aaMtvcBkD73gO8wTonaSHwAAAIw"]
[Sun Mar 01 02:02:39.118888 2026] [:error] [pid 30795:tid 30828] [client 20.104.124.39:43202] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/atx.php"] [unique_id "aaMtv2uI44IL94Zgti_H8gAAABQ"]
[Sun Mar 01 02:02:40.098037 2026] [:error] [pid 53600:tid 53623] [client 20.104.124.39:43224] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/atx.php"] [unique_id "aaMtwA2UMRAYWtDB23TtJwAAARQ"]
[Sun Mar 01 02:02:42.010477 2026] [:error] [pid 30798:tid 30915] [client 20.104.124.39:43146] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/atx.php"] [unique_id "aaMtwsBkD73gO8wTonaSKQAAAJA"]
[Sun Mar 01 02:02:43.315123 2026] [:error] [pid 7644:tid 7662] [client 20.104.124.39:43299] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/z60.php"] [unique_id "aaMtw_qeDUGmVAHX7VCmpQAAAVA"]
[Sun Mar 01 02:02:44.770470 2026] [:error] [pid 11920:tid 11948] [client 20.104.124.39:43237] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/z60.php"] [unique_id "aaMtxCzLNJUKxvBorrDduAAAAZg"]
[Sun Mar 01 02:02:45.659097 2026] [:error] [pid 30798:tid 30909] [client 20.104.124.39:43214] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/z60.php"] [unique_id "aaMtxcBkD73gO8wTonaSLAAAAIo"]
[Sun Mar 01 02:02:47.097506 2026] [:error] [pid 11920:tid 11936] [client 20.104.124.39:43293] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/z60.php"] [unique_id "aaMtxyzLNJUKxvBorrDdyAAAAYw"]
[Sun Mar 01 02:02:48.110406 2026] [:error] [pid 11920:tid 11930] [client 20.104.124.39:43242] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/403.php"] [unique_id "aaMtyCzLNJUKxvBorrDd0AAAAYY"]
[Sun Mar 01 02:02:49.402518 2026] [:error] [pid 11920:tid 11930] [client 20.104.124.39:43251] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/403.php"] [unique_id "aaMtySzLNJUKxvBorrDd3wAAAYY"]
[Sun Mar 01 02:02:52.577942 2026] [:error] [pid 53600:tid 53626] [client 20.104.124.39:43235] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/403.php"] [unique_id "aaMtzA2UMRAYWtDB23TtUwAAARc"]
[Sun Mar 01 02:02:55.733477 2026] [:error] [pid 31190:tid 31206] [client 20.104.124.39:43321] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/403.php"] [unique_id "aaMtzxfvwGOholYpM1GTswAAAMA"]
[Sun Mar 01 02:02:57.017112 2026] [:error] [pid 11920:tid 11927] [client 20.104.124.39:43169] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/m.php"] [unique_id "aaMt0SzLNJUKxvBorrDeMgAAAYM"]
[Sun Mar 01 02:02:58.545311 2026] [:error] [pid 31190:tid 31219] [client 20.104.124.39:43228] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/m.php"] [unique_id "aaMt0hfvwGOholYpM1GTuwAAAM0"]
[Sun Mar 01 02:03:00.609179 2026] [:error] [pid 30795:tid 30809] [client 20.104.124.39:43223] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/m.php"] [unique_id "aaMt1GuI44IL94Zgti_IBAAAAAE"]
[Sun Mar 01 02:03:01.864521 2026] [:error] [pid 30798:tid 30908] [client 20.104.124.39:43307] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/m.php"] [unique_id "aaMt1cBkD73gO8wTonaSOwAAAIk"]
[Sun Mar 01 02:03:08.977003 2026] [:error] [pid 7644:tid 7654] [client 20.104.124.39:43279] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaMt3PqeDUGmVAHX7VCmtwAAAUg"]
[Sun Mar 01 02:03:10.584078 2026] [:error] [pid 30798:tid 30922] [client 20.104.124.39:43280] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaMt3sBkD73gO8wTonaSaAAAAJY"]
[Sun Mar 01 02:03:12.477142 2026] [:error] [pid 31190:tid 31216] [client 20.104.124.39:43316] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaMt4BfvwGOholYpM1GT3AAAAMo"]
[Sun Mar 01 02:03:14.302726 2026] [:error] [pid 30797:tid 30879] [client 20.104.124.39:43268] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaMt4vQmcmSQL-3rvLAOXAAAAEg"]
[Sun Mar 01 02:03:17.023284 2026] [:error] [pid 31190:tid 31226] [client 20.104.124.39:43220] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/click.php"] [unique_id "aaMt5RfvwGOholYpM1GT5AAAANQ"]
[Sun Mar 01 02:03:20.474871 2026] [:error] [pid 11920:tid 11936] [client 20.104.124.39:43300] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/click.php"] [unique_id "aaMt6CzLNJUKxvBorrDe7gAAAYw"]
[Sun Mar 01 02:03:21.381475 2026] [:error] [pid 30798:tid 30924] [client 20.104.124.39:43183] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/click.php"] [unique_id "aaMt6cBkD73gO8wTonaSiwAAAJg"]
[Sun Mar 01 02:03:22.158062 2026] [:error] [pid 31190:tid 31228] [client 20.104.124.39:43246] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/click.php"] [unique_id "aaMt6hfvwGOholYpM1GT7QAAANY"]
[Sun Mar 01 02:03:23.101994 2026] [:error] [pid 30795:tid 30819] [client 20.104.124.39:43247] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/install.php"] [unique_id "aaMt62uI44IL94Zgti_IIAAAAAs"]
[Sun Mar 01 02:03:25.030510 2026] [:error] [pid 53600:tid 53613] [client 20.104.124.39:43322] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/install.php"] [unique_id "aaMt7Q2UMRAYWtDB23TtbwAAAQo"]
[Sun Mar 01 02:03:25.801978 2026] [:error] [pid 11920:tid 11939] [client 20.104.124.39:43199] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/install.php"] [unique_id "aaMt7SzLNJUKxvBorrDfBAAAAY8"]
[Sun Mar 01 02:03:27.036580 2026] [:error] [pid 11920:tid 11924] [client 20.104.124.39:43338] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/install.php"] [unique_id "aaMt7yzLNJUKxvBorrDfCwAAAYA"]
[Sun Mar 01 02:03:27.997823 2026] [:error] [pid 11920:tid 11925] [client 20.104.124.39:43143] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/lv.php"] [unique_id "aaMt7yzLNJUKxvBorrDfDAAAAYE"]
[Sun Mar 01 02:03:29.198586 2026] [:error] [pid 11920:tid 11939] [client 20.104.124.39:43309] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/lv.php"] [unique_id "aaMt8SzLNJUKxvBorrDfFAAAAY8"]
[Sun Mar 01 02:03:31.355508 2026] [:error] [pid 31190:tid 31226] [client 20.104.124.39:43297] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/lv.php"] [unique_id "aaMt8xfvwGOholYpM1GUAAAAANQ"]
[Sun Mar 01 02:03:34.318886 2026] [:error] [pid 30798:tid 30906] [client 20.104.124.39:43218] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/lv.php"] [unique_id "aaMt9sBkD73gO8wTonaSpwAAAIc"]
[Sun Mar 01 02:03:34.833503 2026] [:error] [pid 30798:tid 30907] [client 20.104.124.39:43354] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/simple.php"] [unique_id "aaMt9sBkD73gO8wTonaSqwAAAIg"]
[Sun Mar 01 02:03:35.909750 2026] [:error] [pid 30798:tid 30912] [client 20.104.124.39:43271] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/simple.php"] [unique_id "aaMt98BkD73gO8wTonaSrwAAAI0"]
[Sun Mar 01 02:03:37.225654 2026] [:error] [pid 31190:tid 31219] [client 20.104.124.39:43191] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/simple.php"] [unique_id "aaMt-RfvwGOholYpM1GUEgAAAM0"]
[Sun Mar 01 02:03:38.088325 2026] [:error] [pid 11920:tid 11930] [client 20.104.124.39:43301] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/simple.php"] [unique_id "aaMt-izLNJUKxvBorrDfLwAAAYY"]
[Sun Mar 01 02:03:39.199109 2026] [:error] [pid 30798:tid 30910] [client 20.104.124.39:43139] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/css.php"] [unique_id "aaMt-8BkD73gO8wTonaSwAAAAIs"]
[Sun Mar 01 02:03:40.192334 2026] [:error] [pid 7644:tid 7649] [client 20.104.124.39:43264] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/css.php"] [unique_id "aaMt_PqeDUGmVAHX7VCm9wAAAUM"]
[Sun Mar 01 02:03:41.448663 2026] [:error] [pid 30795:tid 30815] [client 20.104.124.39:43311] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/css.php"] [unique_id "aaMt_WuI44IL94Zgti_IPAAAAAc"]
[Sun Mar 01 02:03:42.222127 2026] [:error] [pid 31190:tid 31208] [client 20.104.124.39:43173] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/css.php"] [unique_id "aaMt_hfvwGOholYpM1GUFwAAAMI"]
[Sun Mar 01 02:03:44.184279 2026] [:error] [pid 30798:tid 30923] [client 20.104.124.39:43249] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aaMuAMBkD73gO8wTonaS1gAAAJc"]
[Sun Mar 01 02:03:46.060151 2026] [:error] [pid 30798:tid 30901] [client 20.104.124.39:43198] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aaMuAsBkD73gO8wTonaS5AAAAII"]
[Sun Mar 01 02:03:47.275991 2026] [:error] [pid 31190:tid 31208] [client 20.104.124.39:43306] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aaMuAxfvwGOholYpM1GUJwAAAMI"]
[Sun Mar 01 02:03:48.765494 2026] [:error] [pid 30798:tid 30914] [client 20.104.124.39:43296] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aaMuBMBkD73gO8wTonaS8gAAAI8"]
[Sun Mar 01 02:03:50.553584 2026] [:error] [pid 11920:tid 11925] [client 20.104.124.39:43328] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaMuBizLNJUKxvBorrDfTgAAAYE"]
[Sun Mar 01 02:03:52.134637 2026] [:error] [pid 11920:tid 11945] [client 20.104.124.39:43209] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aaMuCCzLNJUKxvBorrDfWAAAAZU"]
[Sun Mar 01 02:03:53.895356 2026] [:error] [pid 30798:tid 30911] [client 20.104.124.39:43344] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aaMuCcBkD73gO8wTonaTGgAAAIw"]
[Sun Mar 01 02:03:54.901276 2026] [:error] [pid 11920:tid 11929] [client 20.104.124.39:43272] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/cong.php"] [unique_id "aaMuCizLNJUKxvBorrDfawAAAYU"]
[Sun Mar 01 02:03:56.939035 2026] [:error] [pid 31190:tid 31230] [client 20.104.124.39:43291] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/w.php"] [unique_id "aaMuDBfvwGOholYpM1GUQAAAANg"]
[Sun Mar 01 02:03:59.623644 2026] [:error] [pid 53600:tid 53605] [client 20.104.124.39:43254] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/w.php"] [unique_id "aaMuDw2UMRAYWtDB23TtfgAAAQI"]
[Sun Mar 01 02:04:03.006647 2026] [:error] [pid 53600:tid 53621] [client 20.104.124.39:43166] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/w.php"] [unique_id "aaMuEw2UMRAYWtDB23TtigAAARI"]
[Sun Mar 01 02:04:04.259492 2026] [:error] [pid 11920:tid 11932] [client 20.104.124.39:43140] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/w.php"] [unique_id "aaMuFCzLNJUKxvBorrDf2AAAAYg"]
[Sun Mar 01 02:04:05.734330 2026] [:error] [pid 11920:tid 11925] [client 20.104.124.39:43330] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/404.php"] [unique_id "aaMuFSzLNJUKxvBorrDf-QAAAYE"]
[Sun Mar 01 02:04:09.631264 2026] [:error] [pid 11920:tid 11930] [client 20.104.124.39:43318] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/0x.php"] [unique_id "aaMuGSzLNJUKxvBorrDgFwAAAYY"]
[Sun Mar 01 02:04:10.793862 2026] [:error] [pid 31190:tid 31218] [client 20.104.124.39:43379] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/0x.php"] [unique_id "aaMuGhfvwGOholYpM1GUigAAAMw"]
[Sun Mar 01 02:04:12.082440 2026] [:error] [pid 30795:tid 30818] [client 20.104.124.39:43239] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/0x.php"] [unique_id "aaMuHGuI44IL94Zgti_IYAAAAAo"]
[Sun Mar 01 02:04:14.261302 2026] [:error] [pid 30798:tid 30921] [client 20.104.124.39:43352] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/0x.php"] [unique_id "aaMuHsBkD73gO8wTonaTiQAAAJU"]
[Sun Mar 01 02:04:16.664616 2026] [:error] [pid 31190:tid 31222] [client 20.104.124.39:43358] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/css.php"] [unique_id "aaMuIBfvwGOholYpM1GUwAAAANA"]
[Sun Mar 01 02:04:18.735539 2026] [:error] [pid 30795:tid 30828] [client 20.104.124.39:43371] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/css.php"] [unique_id "aaMuImuI44IL94Zgti_IZQAAABQ"]
[Sun Mar 01 02:04:20.150726 2026] [:error] [pid 30798:tid 30907] [client 20.104.124.39:43335] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/css.php"] [unique_id "aaMuJMBkD73gO8wTonaTpgAAAIg"]
[Sun Mar 01 02:04:21.139291 2026] [:error] [pid 30798:tid 30908] [client 20.104.124.39:43212] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/css.php"] [unique_id "aaMuJcBkD73gO8wTonaTuQAAAIk"]
[Sun Mar 01 02:04:22.460452 2026] [:error] [pid 30798:tid 30907] [client 20.104.124.39:43164] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/222.php"] [unique_id "aaMuJsBkD73gO8wTonaTyQAAAIg"]
[Sun Mar 01 02:04:23.568780 2026] [:error] [pid 31190:tid 31221] [client 20.104.124.39:43277] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/222.php"] [unique_id "aaMuJxfvwGOholYpM1GU5AAAAM8"]
[Sun Mar 01 02:04:24.153060 2026] [:error] [pid 30798:tid 30904] [client 20.104.124.39:43158] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/222.php"] [unique_id "aaMuKMBkD73gO8wTonaT1QAAAIU"]
[Sun Mar 01 02:04:25.393809 2026] [:error] [pid 7644:tid 7669] [client 20.104.124.39:43417] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/222.php"] [unique_id "aaMuKfqeDUGmVAHX7VCnYwAAAVc"]
[Sun Mar 01 02:04:26.698612 2026] [:error] [pid 53600:tid 53618] [client 20.104.124.39:43234] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/index.php"] [unique_id "aaMuKg2UMRAYWtDB23TtsAAAAQ8"]
[Sun Mar 01 02:04:28.329115 2026] [:error] [pid 11920:tid 11941] [client 20.104.124.39:43382] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/index.php"] [unique_id "aaMuLCzLNJUKxvBorrDgYAAAAZE"]
[Sun Mar 01 02:04:30.044857 2026] [:error] [pid 30798:tid 30899] [client 20.104.124.39:43213] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/index.php"] [unique_id "aaMuLsBkD73gO8wTonaT9gAAAIA"]
[Sun Mar 01 02:04:30.839131 2026] [:error] [pid 11920:tid 11942] [client 20.104.124.39:43303] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/index.php"] [unique_id "aaMuLizLNJUKxvBorrDgeAAAAZI"]
[Sun Mar 01 02:04:32.092266 2026] [:error] [pid 11920:tid 11928] [client 20.104.124.39:43197] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aaMuMCzLNJUKxvBorrDghQAAAYQ"]
[Sun Mar 01 02:04:33.358509 2026] [:error] [pid 11920:tid 11931] [client 20.104.124.39:43244] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aaMuMSzLNJUKxvBorrDglwAAAYc"]
[Sun Mar 01 02:04:35.127758 2026] [:error] [pid 11920:tid 11929] [client 20.104.124.39:43152] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aaMuMyzLNJUKxvBorrDgqgAAAYU"]
[Sun Mar 01 02:04:37.329515 2026] [:error] [pid 7644:tid 7652] [client 20.104.124.39:43236] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aaMuNfqeDUGmVAHX7VCnegAAAUY"]
[Sun Mar 01 02:04:38.636683 2026] [:error] [pid 30798:tid 30905] [client 20.104.124.39:43258] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaMuNsBkD73gO8wTonaUKgAAAIY"]
[Sun Mar 01 02:04:40.044744 2026] [:error] [pid 30798:tid 30920] [client 20.104.124.39:43317] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaMuOMBkD73gO8wTonaUMwAAAJQ"]
[Sun Mar 01 02:04:42.244031 2026] [:error] [pid 30798:tid 30922] [client 20.104.124.39:43223] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaMuOsBkD73gO8wTonaUQwAAAJY"]
[Sun Mar 01 02:04:44.175692 2026] [:error] [pid 11920:tid 11945] [client 20.104.124.39:43333] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaMuPCzLNJUKxvBorrDhEQAAAZU"]
[Sun Mar 01 02:04:45.854001 2026] [:error] [pid 30798:tid 30911] [client 20.104.124.39:43243] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "aaMuPcBkD73gO8wTonaUWgAAAIw"]
[Sun Mar 01 02:04:47.698829 2026] [:error] [pid 30798:tid 30923] [client 20.104.124.39:43229] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "aaMuP8BkD73gO8wTonaUaAAAAJc"]
[Sun Mar 01 02:04:49.414046 2026] [:error] [pid 31190:tid 31227] [client 20.104.124.39:43253] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "aaMuQRfvwGOholYpM1GVIwAAANU"]
[Sun Mar 01 02:04:51.056893 2026] [:error] [pid 30798:tid 30924] [client 20.104.124.39:43327] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "aaMuQ8BkD73gO8wTonaUeAAAAJg"]
[Sun Mar 01 02:04:51.889788 2026] [:error] [pid 30798:tid 30923] [client 20.104.124.39:43144] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "aaMuQ8BkD73gO8wTonaUfwAAAJc"]
[Sun Mar 01 02:04:53.126599 2026] [:error] [pid 7644:tid 7668] [client 20.104.124.39:43163] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "aaMuRfqeDUGmVAHX7VCngQAAAVY"]
[Sun Mar 01 02:04:54.451713 2026] [:error] [pid 31190:tid 31207] [client 20.104.124.39:43286] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "aaMuRhfvwGOholYpM1GVMAAAAME"]
[Sun Mar 01 02:04:55.776951 2026] [:error] [pid 30795:tid 30807] [client 20.104.124.39:43383] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "aaMuR2uI44IL94Zgti_IhAAAAAA"]
[Sun Mar 01 02:04:56.838093 2026] [:error] [pid 53600:tid 53617] [client 20.104.124.39:43230] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/autoload_classmap.php"] [unique_id "aaMuSA2UMRAYWtDB23TtxwAAAQ4"]
[Sun Mar 01 02:04:58.048848 2026] [:error] [pid 30798:tid 30908] [client 20.104.124.39:43248] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/autoload_classmap.php"] [unique_id "aaMuSsBkD73gO8wTonaUnQAAAIk"]
[Sun Mar 01 02:04:58.844950 2026] [:error] [pid 11920:tid 11944] [client 20.104.124.39:43219] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/autoload_classmap.php"] [unique_id "aaMuSizLNJUKxvBorrDhewAAAZQ"]
[Sun Mar 01 02:05:00.043566 2026] [:error] [pid 30798:tid 30918] [client 20.104.124.39:43148] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/autoload_classmap.php"] [unique_id "aaMuTMBkD73gO8wTonaUpgAAAJM"]
[Sun Mar 01 02:05:01.422556 2026] [:error] [pid 11920:tid 11946] [client 20.104.124.39:43374] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "aaMuTSzLNJUKxvBorrDhhgAAAZY"]
[Sun Mar 01 02:05:02.436618 2026] [:error] [pid 30798:tid 30924] [client 20.104.124.39:43342] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "aaMuTsBkD73gO8wTonaUrQAAAJg"]
[Sun Mar 01 02:05:03.348663 2026] [:error] [pid 11920:tid 11940] [client 20.104.124.39:43221] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "aaMuTyzLNJUKxvBorrDhlwAAAZA"]
[Sun Mar 01 02:05:04.485711 2026] [:error] [pid 31190:tid 31215] [client 20.104.124.39:43155] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "aaMuUBfvwGOholYpM1GVTAAAAMk"]
[Sun Mar 01 02:05:05.772749 2026] [:error] [pid 11920:tid 11943] [client 20.104.124.39:43178] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/about.php"] [unique_id "aaMuUSzLNJUKxvBorrDhowAAAZM"]
[Sun Mar 01 02:05:06.547569 2026] [:error] [pid 11920:tid 11946] [client 20.104.124.39:43428] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/about.php"] [unique_id "aaMuUizLNJUKxvBorrDhqAAAAZY"]
[Sun Mar 01 02:05:10.584548 2026] [:error] [pid 11920:tid 11932] [client 20.104.124.39:43313] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "aaMuVizLNJUKxvBorrDhuwAAAYg"]
[Sun Mar 01 02:05:12.083516 2026] [:error] [pid 30798:tid 30920] [client 20.104.124.39:43174] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "aaMuWMBkD73gO8wTonaUyAAAAJQ"]
[Sun Mar 01 02:05:13.174890 2026] [:error] [pid 11920:tid 11941] [client 20.104.124.39:43189] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "aaMuWSzLNJUKxvBorrDhwgAAAZE"]
[Sun Mar 01 02:05:13.886439 2026] [:error] [pid 31190:tid 31227] [client 20.104.124.39:43181] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "aaMuWRfvwGOholYpM1GVbwAAANU"]
[Sun Mar 01 02:05:15.265970 2026] [:error] [pid 11920:tid 11939] [client 20.104.124.39:43226] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaMuWyzLNJUKxvBorrDhyAAAAY8"]
[Sun Mar 01 02:05:16.177666 2026] [:error] [pid 30798:tid 30922] [client 20.104.124.39:43353] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaMuXMBkD73gO8wTonaU2AAAAJY"]
[Sun Mar 01 02:05:17.282838 2026] [:error] [pid 11920:tid 11937] [client 20.104.124.39:43275] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaMuXSzLNJUKxvBorrDhzwAAAY0"]
[Sun Mar 01 02:05:18.574970 2026] [:error] [pid 30798:tid 30918] [client 20.104.124.39:43167] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaMuXsBkD73gO8wTonaU6AAAAJM"]
[Sun Mar 01 02:05:20.025866 2026] [:error] [pid 11920:tid 11930] [client 20.104.124.39:43347] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaMuYCzLNJUKxvBorrDh2AAAAYY"]
[Sun Mar 01 02:05:21.302758 2026] [:error] [pid 53600:tid 53622] [client 20.104.124.39:43175] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaMuYQ2UMRAYWtDB23Tt5wAAARM"]
[Sun Mar 01 02:05:22.497130 2026] [:error] [pid 30797:tid 30890] [client 20.104.124.39:43298] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaMuYvQmcmSQL-3rvLAOlgAAAFM"]
[Sun Mar 01 02:05:23.263166 2026] [:error] [pid 30797:tid 30878] [client 20.104.124.39:43249] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaMuY_QmcmSQL-3rvLAOmQAAAEc"]
[Sun Mar 01 02:05:24.223407 2026] [:error] [pid 11920:tid 11924] [client 20.104.124.39:43415] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaMuZCzLNJUKxvBorrDh6AAAAYA"]
[Sun Mar 01 02:05:25.155254 2026] [:error] [pid 30798:tid 30906] [client 20.104.124.39:43153] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaMuZcBkD73gO8wTonaU8gAAAIc"]
[Sun Mar 01 02:05:26.051991 2026] [:error] [pid 53600:tid 53621] [client 20.104.124.39:43287] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaMuZg2UMRAYWtDB23Tt7QAAARI"]
[Sun Mar 01 02:05:27.196521 2026] [:error] [pid 30798:tid 30916] [client 20.104.124.39:43377] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaMuZ8BkD73gO8wTonaU_QAAAJE"]
[Sun Mar 01 02:05:28.646957 2026] [:error] [pid 30798:tid 30918] [client 20.104.124.39:43288] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaMuaMBkD73gO8wTonaVCwAAAJM"]
[Sun Mar 01 02:05:30.111143 2026] [:error] [pid 31190:tid 31230] [client 20.104.124.39:43195] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaMuahfvwGOholYpM1GVmgAAANg"]
[Sun Mar 01 02:05:31.459047 2026] [:error] [pid 11920:tid 11948] [client 20.104.124.39:43255] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaMuayzLNJUKxvBorrDh-QAAAZg"]
[Sun Mar 01 02:05:32.412891 2026] [:error] [pid 53600:tid 53622] [client 20.104.124.39:43432] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaMubA2UMRAYWtDB23Tt-AAAARM"]
[Sun Mar 01 02:05:33.587447 2026] [:error] [pid 53600:tid 53626] [client 20.104.124.39:43445] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/manager.php"] [unique_id "aaMubQ2UMRAYWtDB23Tt-gAAARc"]
[Sun Mar 01 02:05:35.856187 2026] [:error] [pid 11920:tid 11942] [client 20.104.124.39:43406] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/manager.php"] [unique_id "aaMubyzLNJUKxvBorrDiFAAAAZI"]
[Sun Mar 01 02:05:36.697915 2026] [:error] [pid 11920:tid 11946] [client 20.104.124.39:43375] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/manager.php"] [unique_id "aaMucCzLNJUKxvBorrDiHwAAAZY"]
[Sun Mar 01 02:05:38.660760 2026] [:error] [pid 30798:tid 30902] [client 20.104.124.39:43205] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/manager.php"] [unique_id "aaMucsBkD73gO8wTonaVZAAAAIM"]
[Sun Mar 01 02:05:39.768454 2026] [:error] [pid 30797:tid 30884] [client 20.104.124.39:43162] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/item.php"] [unique_id "aaMuc_QmcmSQL-3rvLAOqwAAAE0"]
[Sun Mar 01 02:05:41.877937 2026] [:error] [pid 30798:tid 30899] [client 20.104.124.39:43389] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/item.php"] [unique_id "aaMudcBkD73gO8wTonaVfwAAAIA"]
[Sun Mar 01 02:05:43.454095 2026] [:error] [pid 53600:tid 53627] [client 20.104.124.39:43343] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/item.php"] [unique_id "aaMudw2UMRAYWtDB23TuDQAAARg"]
[Sun Mar 01 02:05:44.143031 2026] [:error] [pid 31190:tid 31221] [client 20.104.124.39:43194] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/item.php"] [unique_id "aaMueBfvwGOholYpM1GVxAAAAM8"]
[Sun Mar 01 02:05:45.024537 2026] [:error] [pid 31190:tid 31207] [client 20.104.124.39:43222] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaMueRfvwGOholYpM1GVzQAAAME"]
[Sun Mar 01 02:05:46.094245 2026] [:error] [pid 11920:tid 11943] [client 20.104.124.39:43305] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaMueizLNJUKxvBorrDiQQAAAZM"]
[Sun Mar 01 02:05:48.104486 2026] [:error] [pid 31190:tid 31229] [client 20.104.124.39:43260] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaMufBfvwGOholYpM1GV2AAAANc"]
[Sun Mar 01 02:05:49.908312 2026] [:error] [pid 11920:tid 11925] [client 20.104.124.39:43137] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaMufSzLNJUKxvBorrDiXAAAAYE"]
[Sun Mar 01 02:05:50.836774 2026] [:error] [pid 11920:tid 11926] [client 20.104.124.39:43182] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/404.php"] [unique_id "aaMufizLNJUKxvBorrDiYwAAAYI"]
[Sun Mar 01 02:05:52.485570 2026] [:error] [pid 11920:tid 11943] [client 20.104.124.39:43159] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/404.php"] [unique_id "aaMugCzLNJUKxvBorrDicQAAAZM"]
[Sun Mar 01 02:05:54.430582 2026] [:error] [pid 11920:tid 11926] [client 20.104.124.39:43184] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/404.php"] [unique_id "aaMugizLNJUKxvBorrDihQAAAYI"]
[Sun Mar 01 02:05:55.912123 2026] [:error] [pid 30798:tid 30903] [client 20.104.124.39:43165] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/404.php"] [unique_id "aaMug8BkD73gO8wTonaVtAAAAIQ"]
[Sun Mar 01 02:05:57.737079 2026] [:error] [pid 53600:tid 53612] [client 20.104.124.39:43259] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/mail.php"] [unique_id "aaMuhQ2UMRAYWtDB23TuGwAAAQk"]
[Sun Mar 01 02:05:58.572913 2026] [:error] [pid 31190:tid 31212] [client 20.104.124.39:43190] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/mail.php"] [unique_id "aaMuhhfvwGOholYpM1GV6wAAAMY"]
[Sun Mar 01 02:05:59.584905 2026] [:error] [pid 11920:tid 11936] [client 20.104.124.39:43454] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/mail.php"] [unique_id "aaMuhyzLNJUKxvBorrDimgAAAYw"]
[Sun Mar 01 02:06:00.300343 2026] [:error] [pid 11920:tid 11941] [client 20.104.124.39:43201] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/mail.php"] [unique_id "aaMuiCzLNJUKxvBorrDipQAAAZE"]
[Sun Mar 01 02:06:02.189206 2026] [:error] [pid 31190:tid 31217] [client 20.104.124.39:43172] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaMuihfvwGOholYpM1GV9gAAAMs"]
[Sun Mar 01 02:06:03.474387 2026] [:error] [pid 31190:tid 31213] [client 20.104.124.39:43278] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaMuixfvwGOholYpM1GWAAAAAMc"]
[Sun Mar 01 02:06:04.747430 2026] [:error] [pid 30798:tid 30917] [client 20.104.124.39:43185] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaMujMBkD73gO8wTonaV4QAAAJI"]
[Sun Mar 01 02:06:06.886186 2026] [:error] [pid 31190:tid 31225] [client 20.104.124.39:43156] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaMujhfvwGOholYpM1GWGQAAANM"]
[Sun Mar 01 02:06:08.148648 2026] [:error] [pid 7644:tid 7653] [client 20.104.124.39:43233] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/sx.php"] [unique_id "aaMukPqeDUGmVAHX7VCnwAAAAUc"]
[Sun Mar 01 02:06:12.234606 2026] [:error] [pid 30798:tid 30905] [client 20.104.124.39:43231] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "aaMulMBkD73gO8wTonaV_QAAAIY"]
[Sun Mar 01 02:06:13.398062 2026] [:error] [pid 11920:tid 11936] [client 20.104.124.39:43373] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "aaMulSzLNJUKxvBorrDi5AAAAYw"]
[Sun Mar 01 02:06:14.418562 2026] [:error] [pid 11920:tid 11938] [client 20.104.124.39:43157] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "aaMulizLNJUKxvBorrDi7wAAAY4"]
[Sun Mar 01 02:06:15.243280 2026] [:error] [pid 31190:tid 31225] [client 20.104.124.39:43380] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "aaMulxfvwGOholYpM1GWPwAAANM"]
[Sun Mar 01 02:06:16.277009 2026] [:error] [pid 30798:tid 30901] [client 20.104.124.39:43360] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/1.php"] [unique_id "aaMumMBkD73gO8wTonaWDgAAAII"]
[Sun Mar 01 02:06:17.407577 2026] [:error] [pid 11920:tid 11947] [client 20.104.124.39:43225] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/1.php"] [unique_id "aaMumSzLNJUKxvBorrDjAgAAAZc"]
[Sun Mar 01 02:06:18.151612 2026] [:error] [pid 11920:tid 11932] [client 20.104.124.39:43282] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/1.php"] [unique_id "aaMumizLNJUKxvBorrDjBQAAAYg"]
[Sun Mar 01 02:06:18.918201 2026] [:error] [pid 11920:tid 11930] [client 20.104.124.39:43207] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/1.php"] [unique_id "aaMumizLNJUKxvBorrDjDAAAAYY"]
[Sun Mar 01 02:06:19.540610 2026] [:error] [pid 11920:tid 11935] [client 20.104.124.39:43261] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/byp.php"] [unique_id "aaMumyzLNJUKxvBorrDjEQAAAYs"]
[Sun Mar 01 02:06:20.237320 2026] [:error] [pid 11920:tid 11941] [client 20.104.124.39:43441] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/byp.php"] [unique_id "aaMunCzLNJUKxvBorrDjGQAAAZE"]
[Sun Mar 01 02:06:20.938949 2026] [:error] [pid 30798:tid 30910] [client 20.104.124.39:43193] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/byp.php"] [unique_id "aaMunMBkD73gO8wTonaWLQAAAIs"]
[Sun Mar 01 02:06:22.354954 2026] [:error] [pid 53600:tid 53624] [client 20.104.124.39:43362] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/byp.php"] [unique_id "aaMung2UMRAYWtDB23TuTwAAARU"]
[Sun Mar 01 02:06:23.153326 2026] [:error] [pid 11920:tid 11946] [client 20.104.124.39:43391] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-trackback.php"] [unique_id "aaMunyzLNJUKxvBorrDjIAAAAZY"]
[Sun Mar 01 02:06:23.863116 2026] [:error] [pid 30798:tid 30921] [client 20.104.124.39:43149] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-trackback.php"] [unique_id "aaMun8BkD73gO8wTonaWRwAAAJU"]
[Sun Mar 01 02:06:24.664258 2026] [:error] [pid 31190:tid 31230] [client 20.104.124.39:43240] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-trackback.php"] [unique_id "aaMuoBfvwGOholYpM1GWVAAAANg"]
[Sun Mar 01 02:06:26.492022 2026] [:error] [pid 11920:tid 11924] [client 20.104.124.39:43179] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-trackback.php"] [unique_id "aaMuoizLNJUKxvBorrDjMgAAAYA"]
[Sun Mar 01 02:06:29.023110 2026] [:error] [pid 31190:tid 31226] [client 20.104.124.39:43216] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/index.php"] [unique_id "aaMupRfvwGOholYpM1GWYQAAANQ"]
[Sun Mar 01 02:06:31.114716 2026] [:error] [pid 30798:tid 30922] [client 20.104.124.39:43336] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/index.php"] [unique_id "aaMup8BkD73gO8wTonaWggAAAJY"]
[Sun Mar 01 02:06:33.699223 2026] [:error] [pid 31190:tid 31220] [client 20.104.124.39:43180] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/index.php"] [unique_id "aaMuqRfvwGOholYpM1GWcQAAAM4"]
[Sun Mar 01 02:06:35.355514 2026] [:error] [pid 31190:tid 31221] [client 20.104.124.39:43203] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/index.php"] [unique_id "aaMuqxfvwGOholYpM1GWdgAAAM8"]
[Sun Mar 01 02:06:36.497084 2026] [:error] [pid 31190:tid 31223] [client 20.104.124.39:43337] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaMurBfvwGOholYpM1GWfwAAANE"]
[Sun Mar 01 02:06:37.927757 2026] [:error] [pid 31190:tid 31212] [client 20.104.124.39:43315] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaMurRfvwGOholYpM1GWigAAAMY"]
[Sun Mar 01 02:06:40.130442 2026] [:error] [pid 31190:tid 31222] [client 20.104.124.39:43263] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaMusBfvwGOholYpM1GWlgAAANA"]
[Sun Mar 01 02:06:42.215559 2026] [:error] [pid 11920:tid 11948] [client 20.104.124.39:43370] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaMusizLNJUKxvBorrDjjgAAAZg"]
[Sun Mar 01 02:06:43.223085 2026] [:error] [pid 30798:tid 30899] [client 20.104.124.39:43407] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/about.php"] [unique_id "aaMus8BkD73gO8wTonaWpwAAAIA"]
[Sun Mar 01 02:06:44.486224 2026] [:error] [pid 30798:tid 30899] [client 20.104.124.39:43334] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/about.php"] [unique_id "aaMutMBkD73gO8wTonaWuAAAAIA"]
[Sun Mar 01 02:06:45.143754 2026] [:error] [pid 7644:tid 7649] [client 20.104.124.39:43208] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/about.php"] [unique_id "aaMutfqeDUGmVAHX7VCoAQAAAUM"]
[Sun Mar 01 02:06:46.684412 2026] [:error] [pid 31190:tid 31209] [client 20.104.124.39:43369] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/about.php"] [unique_id "aaMuthfvwGOholYpM1GWrAAAAMM"]
[Sun Mar 01 02:06:47.411429 2026] [:error] [pid 53600:tid 53604] [client 20.104.124.39:43339] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gmo.php"] [unique_id "aaMutw2UMRAYWtDB23TulgAAAQE"]
[Sun Mar 01 02:06:48.747703 2026] [:error] [pid 11920:tid 11947] [client 20.104.124.39:43170] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gmo.php"] [unique_id "aaMuuCzLNJUKxvBorrDjsAAAAZc"]
[Sun Mar 01 02:06:50.586259 2026] [:error] [pid 31190:tid 31226] [client 20.104.124.39:43302] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gmo.php"] [unique_id "aaMuuhfvwGOholYpM1GWvAAAANQ"]
[Sun Mar 01 02:06:51.880244 2026] [:error] [pid 11920:tid 11934] [client 20.104.124.39:43366] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gmo.php"] [unique_id "aaMuuyzLNJUKxvBorrDjwQAAAYo"]
[Sun Mar 01 02:06:52.545013 2026] [:error] [pid 11920:tid 11942] [client 20.104.124.39:43153] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaMuvCzLNJUKxvBorrDjyQAAAZI"]
[Sun Mar 01 02:06:53.525740 2026] [:error] [pid 30798:tid 30920] [client 20.104.124.39:43237] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/css/index.php"] [unique_id "aaMuvcBkD73gO8wTonaW-wAAAJQ"]
[Sun Mar 01 02:06:54.591870 2026] [:error] [pid 53600:tid 53615] [client 20.104.124.39:43215] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/css/index.php"] [unique_id "aaMuvg2UMRAYWtDB23TuqgAAAQw"]
[Sun Mar 01 02:06:56.902174 2026] [:error] [pid 53600:tid 53616] [client 20.104.124.39:43326] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/css/index.php"] [unique_id "aaMuwA2UMRAYWtDB23TurQAAAQ0"]
[Sun Mar 01 02:06:59.274186 2026] [:error] [pid 30798:tid 30917] [client 20.104.124.39:43193] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaMuw8BkD73gO8wTonaXHgAAAJI"]
[Sun Mar 01 02:07:01.627966 2026] [:error] [pid 31190:tid 31230] [client 20.104.124.39:43251] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaMuxRfvwGOholYpM1GW5QAAANg"]
[Sun Mar 01 02:07:04.354251 2026] [:error] [pid 31190:tid 31227] [client 20.104.124.39:43452] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaMuyBfvwGOholYpM1GW_QAAANU"]
[Sun Mar 01 02:07:06.097476 2026] [:error] [pid 30798:tid 30904] [client 20.104.124.39:43202] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaMuysBkD73gO8wTonaXPQAAAIU"]
[Sun Mar 01 02:07:08.377071 2026] [:error] [pid 30795:tid 30826] [client 20.104.124.39:43188] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaMuzGuI44IL94Zgti_IvwAAABI"]
[Sun Mar 01 02:07:14.073184 2026] [autoindex:error] [pid 30798:tid 30909] [client 20.104.124.39:43386] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 02:07:14.290718 2026] [:error] [pid 30798:tid 30912] [client 20.104.124.39:43386] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaMu0sBkD73gO8wTonaXcgAAAI0"]
[Sun Mar 01 02:07:18.520491 2026] [:error] [pid 31190:tid 31215] [client 20.104.124.39:43168] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaMu1hfvwGOholYpM1GXNAAAAMk"]
[Sun Mar 01 02:07:22.455263 2026] [:error] [pid 30798:tid 30910] [client 20.104.124.39:43266] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/admin/function.php"] [unique_id "aaMu2sBkD73gO8wTonaXjwAAAIs"]
[Sun Mar 01 02:07:23.096522 2026] [:error] [pid 31190:tid 31217] [client 20.104.124.39:43401] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/admin/function.php"] [unique_id "aaMu2xfvwGOholYpM1GXVwAAAMs"]
[Sun Mar 01 02:07:24.103308 2026] [:error] [pid 11920:tid 11937] [client 20.104.124.39:43294] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/admin/function.php"] [unique_id "aaMu3CzLNJUKxvBorrDkwAAAAY0"]
[Sun Mar 01 02:07:24.681274 2026] [:error] [pid 11920:tid 11928] [client 20.104.124.39:43154] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/admin/function.php"] [unique_id "aaMu3CzLNJUKxvBorrDkzAAAAYQ"]
[Sun Mar 01 02:07:25.754073 2026] [:error] [pid 11920:tid 11942] [client 20.104.124.39:43376] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaMu3SzLNJUKxvBorrDk2wAAAZI"]
[Sun Mar 01 02:07:26.640160 2026] [:error] [pid 11920:tid 11935] [client 20.104.124.39:43290] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaMu3izLNJUKxvBorrDk5gAAAYs"]
[Sun Mar 01 02:07:29.201491 2026] [:error] [pid 11920:tid 11943] [client 20.104.124.39:43283] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaMu4SzLNJUKxvBorrDk_AAAAZM"]
[Sun Mar 01 02:07:30.510597 2026] [:error] [pid 11920:tid 11936] [client 20.104.124.39:43279] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaMu4izLNJUKxvBorrDlDwAAAYw"]
[Sun Mar 01 02:07:32.428454 2026] [:error] [pid 30798:tid 30916] [client 20.104.124.39:43295] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaMu5MBkD73gO8wTonaXqAAAAJE"]
[Sun Mar 01 02:07:34.409792 2026] [:error] [pid 11920:tid 11924] [client 20.104.124.39:43161] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaMu5izLNJUKxvBorrDlLQAAAYA"]
[Sun Mar 01 02:07:37.083938 2026] [:error] [pid 11920:tid 11924] [client 20.104.124.39:43280] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaMu6SzLNJUKxvBorrDlNQAAAYA"]
[Sun Mar 01 02:07:38.437982 2026] [:error] [pid 31190:tid 31218] [client 20.104.124.39:43210] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaMu6hfvwGOholYpM1GXiAAAAMw"]
[Sun Mar 01 02:07:39.591443 2026] [:error] [pid 11920:tid 11937] [client 20.104.124.39:43361] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/security.php"] [unique_id "aaMu6yzLNJUKxvBorrDlOgAAAY0"]
[Sun Mar 01 02:07:40.554836 2026] [:error] [pid 30798:tid 30903] [client 20.104.124.39:43220] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/security.php"] [unique_id "aaMu7MBkD73gO8wTonaXxAAAAIQ"]
[Sun Mar 01 02:07:42.282703 2026] [:error] [pid 30798:tid 30901] [client 20.104.124.39:43183] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/security.php"] [unique_id "aaMu7sBkD73gO8wTonaXzwAAAII"]
[Sun Mar 01 02:07:43.812526 2026] [:error] [pid 30798:tid 30908] [client 20.104.124.39:43146] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/security.php"] [unique_id "aaMu78BkD73gO8wTonaX3gAAAIk"]
[Sun Mar 01 02:07:45.161917 2026] [:error] [pid 31190:tid 31214] [client 20.104.124.39:43242] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaMu8RfvwGOholYpM1GXnQAAAMg"]
[Sun Mar 01 02:07:46.027535 2026] [:error] [pid 31190:tid 31216] [client 20.104.124.39:43171] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaMu8hfvwGOholYpM1GXpQAAAMo"]
[Sun Mar 01 02:07:47.717510 2026] [:error] [pid 31190:tid 31219] [client 20.104.124.39:43232] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaMu8xfvwGOholYpM1GXsAAAAM0"]
[Sun Mar 01 02:07:51.261594 2026] [:error] [pid 11920:tid 11938] [client 20.104.124.39:43191] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaMu9yzLNJUKxvBorrDldAAAAY4"]
[Sun Mar 01 02:07:52.849341 2026] [:error] [pid 31190:tid 31218] [client 20.104.124.39:43176] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaMu-BfvwGOholYpM1GXwgAAAMw"]
[Sun Mar 01 02:07:54.560758 2026] [:error] [pid 31190:tid 31226] [client 20.104.124.39:43340] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaMu-hfvwGOholYpM1GXyQAAANQ"]
[Sun Mar 01 02:07:55.490306 2026] [:error] [pid 11920:tid 11924] [client 20.104.124.39:43241] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaMu-yzLNJUKxvBorrDloAAAAYA"]
[Sun Mar 01 02:07:56.409454 2026] [:error] [pid 30798:tid 30921] [client 20.104.124.39:43186] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaMu_MBkD73gO8wTonaYHQAAAJU"]
[Sun Mar 01 02:07:57.473131 2026] [:error] [pid 30798:tid 30910] [client 20.104.124.39:43328] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaMu_cBkD73gO8wTonaYJgAAAIs"]
[Sun Mar 01 02:07:58.212010 2026] [:error] [pid 30798:tid 30905] [client 20.104.124.39:43227] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaMu_sBkD73gO8wTonaYLQAAAIY"]
[Sun Mar 01 02:07:59.162274 2026] [:error] [pid 11920:tid 11937] [client 20.104.124.39:43289] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaMu_yzLNJUKxvBorrDl0QAAAY0"]
[Sun Mar 01 02:08:00.441668 2026] [:error] [pid 30798:tid 30915] [client 20.104.124.39:43285] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaMvAMBkD73gO8wTonaYPQAAAJA"]
[Sun Mar 01 02:08:01.733858 2026] [:error] [pid 11920:tid 11937] [client 20.104.124.39:43204] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaMvASzLNJUKxvBorrDl7wAAAY0"]
[Sun Mar 01 02:08:02.628589 2026] [:error] [pid 53600:tid 53625] [client 20.104.124.39:43354] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/radio.php"] [unique_id "aaMvAg2UMRAYWtDB23TvCgAAARY"]
[Sun Mar 01 02:08:04.274085 2026] [:error] [pid 30795:tid 30821] [client 20.104.124.39:43142] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/radio.php"] [unique_id "aaMvBGuI44IL94Zgti_IzwAAAA0"]
[Sun Mar 01 02:08:04.838138 2026] [:error] [pid 30795:tid 30826] [client 20.104.124.39:43351] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/radio.php"] [unique_id "aaMvBGuI44IL94Zgti_I0AAAABI"]
[Sun Mar 01 02:08:05.584440 2026] [:error] [pid 7644:tid 7652] [client 20.104.124.39:43228] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/radio.php"] [unique_id "aaMvBfqeDUGmVAHX7VCodQAAAUY"]
[Sun Mar 01 02:08:06.140256 2026] [:error] [pid 30798:tid 30916] [client 20.104.124.39:43250] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaMvBsBkD73gO8wTonaYXwAAAJE"]
[Sun Mar 01 02:08:06.780062 2026] [:error] [pid 11920:tid 11937] [client 20.104.124.39:43297] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaMvBizLNJUKxvBorrDmDQAAAY0"]
[Sun Mar 01 02:08:07.514511 2026] [:error] [pid 7644:tid 7667] [client 20.104.124.39:43224] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaMvB_qeDUGmVAHX7VCofQAAAVU"]
[Sun Mar 01 02:08:08.263873 2026] [:error] [pid 30798:tid 30901] [client 20.104.124.39:43218] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaMvCMBkD73gO8wTonaYbAAAAII"]
[Sun Mar 01 02:08:08.810894 2026] [:error] [pid 30798:tid 30910] [client 20.104.124.39:43199] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/admin.php"] [unique_id "aaMvCMBkD73gO8wTonaYcgAAAIs"]
[Sun Mar 01 02:08:09.336732 2026] [:error] [pid 53600:tid 53611] [client 20.104.124.39:43284] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/admin.php"] [unique_id "aaMvCQ2UMRAYWtDB23TvGgAAAQg"]
[Sun Mar 01 02:08:10.818542 2026] [:error] [pid 11920:tid 11942] [client 20.104.124.39:43345] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/admin.php"] [unique_id "aaMvCizLNJUKxvBorrDmGgAAAZI"]
[Sun Mar 01 02:08:12.518187 2026] [:error] [pid 11920:tid 11938] [client 20.104.124.39:43143] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/admin.php"] [unique_id "aaMvDCzLNJUKxvBorrDmKgAAAY4"]
[Sun Mar 01 02:08:14.580142 2026] [:error] [pid 30798:tid 30911] [client 20.104.124.39:43346] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/admin.php"] [unique_id "aaMvDsBkD73gO8wTonaYiAAAAIw"]
[Sun Mar 01 02:08:16.365139 2026] [:error] [pid 31190:tid 31228] [client 20.104.124.39:43292] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/admin.php"] [unique_id "aaMvEBfvwGOholYpM1GYGQAAANY"]
[Sun Mar 01 02:08:17.325985 2026] [:error] [pid 31190:tid 31225] [client 20.104.124.39:43332] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/admin.php"] [unique_id "aaMvERfvwGOholYpM1GYIAAAANM"]
[Sun Mar 01 02:08:18.341762 2026] [:error] [pid 53600:tid 53616] [client 20.104.124.39:43474] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/admin.php"] [unique_id "aaMvEg2UMRAYWtDB23TvLAAAAQ0"]
[Sun Mar 01 02:08:19.318413 2026] [:error] [pid 30798:tid 30922] [client 20.104.124.39:43151] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaMvE8BkD73gO8wTonaYpQAAAJY"]
[Sun Mar 01 02:08:20.430133 2026] [:error] [pid 31190:tid 31223] [client 20.104.124.39:43196] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaMvFBfvwGOholYpM1GYMAAAANE"]
[Sun Mar 01 02:08:23.892282 2026] [:error] [pid 11920:tid 11939] [client 20.104.124.39:43480] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaMvFyzLNJUKxvBorrDmngAAAY8"]
[Sun Mar 01 02:08:25.301424 2026] [:error] [pid 30798:tid 30924] [client 20.104.124.39:43145] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaMvGcBkD73gO8wTonaYwQAAAJg"]
[Sun Mar 01 02:08:26.263475 2026] [:error] [pid 7644:tid 7668] [client 20.104.124.39:43257] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaMvGvqeDUGmVAHX7VCohgAAAVY"]
[Sun Mar 01 02:08:27.459479 2026] [:error] [pid 53600:tid 53613] [client 20.104.124.39:43173] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaMvGw2UMRAYWtDB23TvNAAAAQo"]
[Sun Mar 01 02:08:29.152736 2026] [:error] [pid 31190:tid 31209] [client 20.104.124.39:43323] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/log.php"] [unique_id "aaMvHRfvwGOholYpM1GYXAAAAMM"]
[Sun Mar 01 02:08:30.403881 2026] [:error] [pid 11920:tid 11936] [client 20.104.124.39:43435] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/log.php"] [unique_id "aaMvHizLNJUKxvBorrDmvQAAAYw"]
[Sun Mar 01 02:08:31.067742 2026] [:error] [pid 11920:tid 11925] [client 20.104.124.39:43355] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/log.php"] [unique_id "aaMvHyzLNJUKxvBorrDmwwAAAYE"]
[Sun Mar 01 02:08:33.381107 2026] [:error] [pid 11920:tid 11948] [client 20.104.124.39:43306] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/log.php"] [unique_id "aaMvISzLNJUKxvBorrDmywAAAZg"]
[Sun Mar 01 02:08:35.600429 2026] [:error] [pid 11920:tid 11927] [client 20.104.124.39:43322] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class.php"] [unique_id "aaMvIyzLNJUKxvBorrDm5AAAAYM"]
[Sun Mar 01 02:08:37.476276 2026] [:error] [pid 31190:tid 31229] [client 20.104.124.39:43296] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class.php"] [unique_id "aaMvJRfvwGOholYpM1GYjgAAANc"]
[Sun Mar 01 02:08:39.857835 2026] [:error] [pid 31190:tid 31226] [client 20.104.124.39:43397] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class.php"] [unique_id "aaMvJxfvwGOholYpM1GYmQAAANQ"]
[Sun Mar 01 02:08:40.914307 2026] [:error] [pid 31190:tid 31215] [client 20.104.124.39:43311] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class.php"] [unique_id "aaMvKBfvwGOholYpM1GYowAAAMk"]
[Sun Mar 01 02:08:42.033988 2026] [:error] [pid 7644:tid 7652] [client 20.104.124.39:43303] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bless5.php"] [unique_id "aaMvKvqeDUGmVAHX7VComQAAAUY"]
[Sun Mar 01 02:08:43.572756 2026] [:error] [pid 31190:tid 31216] [client 20.104.124.39:43416] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bless5.php"] [unique_id "aaMvKxfvwGOholYpM1GYtQAAAMo"]
[Sun Mar 01 02:08:44.612484 2026] [:error] [pid 30795:tid 30831] [client 20.104.124.39:43217] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bless5.php"] [unique_id "aaMvLGuI44IL94Zgti_I5QAAABc"]
[Sun Mar 01 02:08:45.943425 2026] [:error] [pid 30798:tid 30922] [client 20.104.124.39:43254] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bless5.php"] [unique_id "aaMvLcBkD73gO8wTonaZOAAAAJY"]
[Sun Mar 01 02:08:47.708197 2026] [:error] [pid 30798:tid 30911] [client 20.104.124.39:43493] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaMvL8BkD73gO8wTonaZUAAAAIw"]
[Sun Mar 01 02:08:48.941470 2026] [:error] [pid 30795:tid 30823] [client 20.104.124.39:43309] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaMvMGuI44IL94Zgti_I6gAAAA8"]
[Sun Mar 01 02:08:49.472410 2026] [:error] [pid 11920:tid 11932] [client 20.104.124.39:43214] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/lock360.php"] [unique_id "aaMvMSzLNJUKxvBorrDnPAAAAYg"]
[Sun Mar 01 02:08:51.408693 2026] [:error] [pid 11920:tid 11944] [client 20.104.124.39:43264] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/lock360.php"] [unique_id "aaMvMyzLNJUKxvBorrDnRgAAAZQ"]
[Sun Mar 01 02:08:52.974405 2026] [:error] [pid 11920:tid 11930] [client 20.104.124.39:43310] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/lock360.php"] [unique_id "aaMvNCzLNJUKxvBorrDnXwAAAYY"]
[Sun Mar 01 02:08:53.793332 2026] [:error] [pid 11920:tid 11926] [client 20.104.124.39:43372] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/lock360.php"] [unique_id "aaMvNSzLNJUKxvBorrDndAAAAYI"]
[Sun Mar 01 02:08:55.458135 2026] [:error] [pid 11920:tid 11925] [client 20.104.124.39:43252] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/f35.php"] [unique_id "aaMvNyzLNJUKxvBorrDnjgAAAYE"]
[Sun Mar 01 02:08:56.895243 2026] [:error] [pid 53600:tid 53625] [client 20.104.124.39:43321] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/f35.php"] [unique_id "aaMvOA2UMRAYWtDB23TvbAAAARY"]
[Sun Mar 01 02:08:57.682333 2026] [:error] [pid 31190:tid 31229] [client 20.104.124.39:43158] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/f35.php"] [unique_id "aaMvORfvwGOholYpM1GY4gAAANc"]
[Sun Mar 01 02:08:59.322432 2026] [:error] [pid 31190:tid 31222] [client 20.104.124.39:43239] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/f35.php"] [unique_id "aaMvOxfvwGOholYpM1GY7wAAANA"]
[Sun Mar 01 02:09:00.473973 2026] [:error] [pid 7644:tid 7646] [client 20.104.124.39:43388] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ioxi-o1.php"] [unique_id "aaMvPPqeDUGmVAHX7VCorwAAAUA"]
[Sun Mar 01 02:09:01.208873 2026] [:error] [pid 53600:tid 53611] [client 20.104.124.39:43213] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ioxi-o1.php"] [unique_id "aaMvPQ2UMRAYWtDB23TveQAAAQg"]
[Sun Mar 01 02:09:02.043089 2026] [:error] [pid 7644:tid 7669] [client 20.104.124.39:43293] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ioxi-o1.php"] [unique_id "aaMvPvqeDUGmVAHX7VCosQAAAVc"]
[Sun Mar 01 02:09:03.151045 2026] [:error] [pid 11920:tid 11924] [client 20.104.124.39:43368] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ioxi-o1.php"] [unique_id "aaMvPyzLNJUKxvBorrDnsAAAAYA"]
[Sun Mar 01 02:09:04.864789 2026] [:error] [pid 11920:tid 11943] [client 20.104.124.39:43219] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/juuuu.php"] [unique_id "aaMvQCzLNJUKxvBorrDnuAAAAZM"]
[Sun Mar 01 02:09:05.761497 2026] [:error] [pid 30798:tid 30900] [client 20.104.124.39:43244] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/juuuu.php"] [unique_id "aaMvQcBkD73gO8wTonaZnQAAAIE"]
[Sun Mar 01 02:09:06.935241 2026] [:error] [pid 11920:tid 11928] [client 20.104.124.39:43209] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/juuuu.php"] [unique_id "aaMvQizLNJUKxvBorrDnvQAAAYQ"]
[Sun Mar 01 02:09:08.179729 2026] [:error] [pid 11920:tid 11925] [client 20.104.124.39:43243] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/juuuu.php"] [unique_id "aaMvRCzLNJUKxvBorrDnyQAAAYE"]
[Sun Mar 01 02:09:10.656439 2026] [:error] [pid 53600:tid 53606] [client 20.104.124.39:43273] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ha.php"] [unique_id "aaMvRg2UMRAYWtDB23TvhQAAAQM"]
[Sun Mar 01 02:09:12.019696 2026] [:error] [pid 11920:tid 11935] [client 20.104.124.39:43235] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ha.php"] [unique_id "aaMvSCzLNJUKxvBorrDn2wAAAYs"]
[Sun Mar 01 02:09:13.820766 2026] [:error] [pid 30798:tid 30907] [client 20.104.124.39:43163] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ha.php"] [unique_id "aaMvScBkD73gO8wTonaZzAAAAIg"]
[Sun Mar 01 02:09:15.530891 2026] [:error] [pid 30797:tid 30891] [client 20.104.124.39:43342] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ha.php"] [unique_id "aaMvS_QmcmSQL-3rvLAPHQAAAFQ"]
[Sun Mar 01 02:09:18.185077 2026] [:error] [pid 31190:tid 31223] [client 20.104.124.39:43236] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gg.php"] [unique_id "aaMvThfvwGOholYpM1GZNgAAANE"]
[Sun Mar 01 02:09:20.748562 2026] [:error] [pid 31190:tid 31213] [client 20.104.124.39:43147] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gg.php"] [unique_id "aaMvUBfvwGOholYpM1GZOgAAAMc"]
[Sun Mar 01 02:09:27.596737 2026] [:error] [pid 7644:tid 7661] [client 20.104.124.39:43325] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/333.php"] [unique_id "aaMvV_qeDUGmVAHX7VCoxgAAAU8"]
[Sun Mar 01 02:09:28.559067 2026] [:error] [pid 30798:tid 30924] [client 20.104.124.39:43276] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/333.php"] [unique_id "aaMvWMBkD73gO8wTonaaJAAAAJg"]
[Sun Mar 01 02:09:30.145708 2026] [:error] [pid 31190:tid 31214] [client 20.104.124.39:43347] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/333.php"] [unique_id "aaMvWhfvwGOholYpM1GZVAAAAMg"]
[Sun Mar 01 02:09:30.917455 2026] [:error] [pid 11920:tid 11925] [client 20.104.124.39:43272] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/333.php"] [unique_id "aaMvWizLNJUKxvBorrDoWwAAAYE"]
[Sun Mar 01 02:09:32.095462 2026] [:error] [pid 7644:tid 7647] [client 20.104.124.39:43286] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/520.php"] [unique_id "aaMvXPqeDUGmVAHX7VCozAAAAUE"]
[Sun Mar 01 02:09:33.205446 2026] [:error] [pid 11920:tid 11937] [client 20.104.124.39:43140] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/520.php"] [unique_id "aaMvXSzLNJUKxvBorrDoawAAAY0"]
[Sun Mar 01 02:09:34.125083 2026] [:error] [pid 11920:tid 11925] [client 20.104.124.39:43166] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/520.php"] [unique_id "aaMvXizLNJUKxvBorrDodAAAAYE"]
[Sun Mar 01 02:09:35.283267 2026] [:error] [pid 30798:tid 30916] [client 20.104.124.39:43277] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/520.php"] [unique_id "aaMvX8BkD73gO8wTonaaPgAAAJE"]
[Sun Mar 01 02:09:36.504937 2026] [:error] [pid 11920:tid 11932] [client 20.104.124.39:43167] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ar.php"] [unique_id "aaMvYCzLNJUKxvBorrDopwAAAYg"]
[Sun Mar 01 02:09:37.732976 2026] [:error] [pid 11920:tid 11942] [client 20.104.124.39:43363] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ar.php"] [unique_id "aaMvYSzLNJUKxvBorrDosAAAAZI"]
[Sun Mar 01 02:09:39.537218 2026] [:error] [pid 11920:tid 11925] [client 20.104.124.39:43316] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ar.php"] [unique_id "aaMvYyzLNJUKxvBorrDovAAAAYE"]
[Sun Mar 01 02:09:40.844192 2026] [:error] [pid 30798:tid 30914] [client 20.104.124.39:43152] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ar.php"] [unique_id "aaMvZMBkD73gO8wTonaaVwAAAI8"]
[Sun Mar 01 02:09:42.646572 2026] [:error] [pid 30798:tid 30901] [client 20.104.124.39:43447] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/x.php"] [unique_id "aaMvZsBkD73gO8wTonaaZAAAAII"]
[Sun Mar 01 02:09:45.623865 2026] [:error] [pid 31190:tid 31217] [client 20.104.124.39:43246] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/x.php"] [unique_id "aaMvaRfvwGOholYpM1GZZwAAAMs"]
[Sun Mar 01 02:09:47.857192 2026] [:error] [pid 30798:tid 30918] [client 20.104.124.39:43384] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/x.php"] [unique_id "aaMva8BkD73gO8wTonaagQAAAJM"]
[Sun Mar 01 02:09:48.390290 2026] [:error] [pid 11920:tid 11944] [client 20.104.124.39:43399] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/x.php"] [unique_id "aaMvbCzLNJUKxvBorrDo7wAAAZQ"]
[Sun Mar 01 02:09:49.275578 2026] [:error] [pid 31190:tid 31209] [client 20.104.124.39:43230] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xx.php"] [unique_id "aaMvbRfvwGOholYpM1GZegAAAMM"]
[Sun Mar 01 02:09:50.135146 2026] [:error] [pid 11920:tid 11948] [client 20.104.124.39:43330] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xx.php"] [unique_id "aaMvbizLNJUKxvBorrDo8gAAAZg"]
[Sun Mar 01 02:09:50.811551 2026] [:error] [pid 30798:tid 30900] [client 20.104.124.39:43333] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xx.php"] [unique_id "aaMvbsBkD73gO8wTonaajwAAAIE"]
[Sun Mar 01 02:09:51.939322 2026] [:error] [pid 11920:tid 11927] [client 20.104.124.39:43383] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xx.php"] [unique_id "aaMvbyzLNJUKxvBorrDo-wAAAYM"]
[Sun Mar 01 02:09:52.892075 2026] [:error] [pid 11920:tid 11936] [client 20.104.124.39:43427] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gifclass4.php"] [unique_id "aaMvcCzLNJUKxvBorrDpAQAAAYw"]
[Sun Mar 01 02:09:53.612076 2026] [:error] [pid 31190:tid 31215] [client 20.104.124.39:43415] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gifclass4.php"] [unique_id "aaMvcRfvwGOholYpM1GZkAAAAMk"]
[Sun Mar 01 02:09:54.469948 2026] [:error] [pid 11920:tid 11941] [client 20.104.124.39:43281] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gifclass4.php"] [unique_id "aaMvcizLNJUKxvBorrDpEwAAAZE"]
[Sun Mar 01 02:09:55.104766 2026] [:error] [pid 31190:tid 31224] [client 20.104.124.39:43379] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gifclass4.php"] [unique_id "aaMvcxfvwGOholYpM1GZmwAAANI"]
[Sun Mar 01 02:09:56.085151 2026] [:error] [pid 30798:tid 30906] [client 20.104.124.39:43429] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/2clas.php"] [unique_id "aaMvdMBkD73gO8wTonaaoQAAAIc"]
[Sun Mar 01 02:09:57.034333 2026] [:error] [pid 11920:tid 11948] [client 20.104.124.39:43313] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/2clas.php"] [unique_id "aaMvdSzLNJUKxvBorrDpKwAAAZg"]
[Sun Mar 01 02:09:57.760854 2026] [:error] [pid 30798:tid 30901] [client 20.104.124.39:43423] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/2clas.php"] [unique_id "aaMvdcBkD73gO8wTonaapwAAAII"]
[Sun Mar 01 02:09:59.174559 2026] [:error] [pid 7644:tid 7652] [client 20.104.124.39:43148] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/2clas.php"] [unique_id "aaMvd_qeDUGmVAHX7VCo2gAAAUY"]
[Sun Mar 01 02:09:59.739113 2026] [:error] [pid 7644:tid 7650] [client 20.104.124.39:43206] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ave.php"] [unique_id "aaMvd_qeDUGmVAHX7VCo3gAAAUQ"]
[Sun Mar 01 02:10:00.894864 2026] [:error] [pid 31190:tid 31219] [client 20.104.124.39:43181] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ave.php"] [unique_id "aaMveBfvwGOholYpM1GZrAAAAM0"]
[Sun Mar 01 02:10:02.004905 2026] [:error] [pid 53600:tid 53618] [client 20.104.124.39:43178] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ave.php"] [unique_id "aaMveg2UMRAYWtDB23TwBQAAAQ8"]
[Sun Mar 01 02:10:03.113919 2026] [:error] [pid 11920:tid 11948] [client 20.104.124.39:43150] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ave.php"] [unique_id "aaMveyzLNJUKxvBorrDpbAAAAZg"]
[Sun Mar 01 02:10:05.336618 2026] [:error] [pid 11920:tid 11945] [client 20.104.124.39:43256] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wrt.php"] [unique_id "aaMvfSzLNJUKxvBorrDpjwAAAZU"]
[Sun Mar 01 02:10:07.095617 2026] [:error] [pid 53600:tid 53603] [client 20.104.124.39:43335] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wrt.php"] [unique_id "aaMvfw2UMRAYWtDB23TwGAAAAQA"]
[Sun Mar 01 02:10:08.928746 2026] [:error] [pid 31190:tid 31209] [client 20.104.124.39:43320] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wrt.php"] [unique_id "aaMvgBfvwGOholYpM1GZzgAAAMM"]
[Sun Mar 01 02:10:10.986746 2026] [:error] [pid 30795:tid 30829] [client 20.104.124.39:43175] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wrt.php"] [unique_id "aaMvgmuI44IL94Zgti_JIQAAABU"]
[Sun Mar 01 02:10:12.868285 2026] [:error] [pid 30798:tid 30917] [client 20.104.124.39:43344] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bibil.php"] [unique_id "aaMvhMBkD73gO8wTonaa-wAAAJI"]
[Sun Mar 01 02:10:14.467120 2026] [:error] [pid 11920:tid 11947] [client 20.104.124.39:43187] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bibil.php"] [unique_id "aaMvhizLNJUKxvBorrDpzgAAAZc"]
[Sun Mar 01 02:10:15.410481 2026] [:error] [pid 11920:tid 11927] [client 20.104.124.39:43396] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bibil.php"] [unique_id "aaMvhyzLNJUKxvBorrDp2AAAAYM"]
[Sun Mar 01 02:10:16.618194 2026] [:error] [pid 11920:tid 11930] [client 20.104.124.39:43490] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bibil.php"] [unique_id "aaMviCzLNJUKxvBorrDp6wAAAYY"]
[Sun Mar 01 02:10:18.367179 2026] [:error] [pid 30795:tid 30813] [client 20.104.124.39:43260] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/radio.php"] [unique_id "aaMvimuI44IL94Zgti_JLAAAAAU"]
[Sun Mar 01 02:10:19.018942 2026] [:error] [pid 30798:tid 30917] [client 20.104.124.39:43169] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/radio.php"] [unique_id "aaMvi8BkD73gO8wTonabCgAAAJI"]
[Sun Mar 01 02:10:19.970277 2026] [:error] [pid 11920:tid 11946] [client 20.104.124.39:43159] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/radio.php"] [unique_id "aaMviyzLNJUKxvBorrDqAwAAAZY"]
[Sun Mar 01 02:10:21.805861 2026] [:error] [pid 11920:tid 11930] [client 20.104.124.39:43262] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/radio.php"] [unique_id "aaMvjSzLNJUKxvBorrDqCgAAAYY"]
[Sun Mar 01 02:10:22.973281 2026] [:error] [pid 30798:tid 30917] [client 20.104.124.39:43164] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/files.php"] [unique_id "aaMvjsBkD73gO8wTonabGAAAAJI"]
[Sun Mar 01 02:10:24.474268 2026] [:error] [pid 31190:tid 31216] [client 20.104.124.39:43267] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/files.php"] [unique_id "aaMvkBfvwGOholYpM1GZ7wAAAMo"]
[Sun Mar 01 02:10:25.572695 2026] [:error] [pid 11920:tid 11933] [client 20.104.124.39:43226] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/files.php"] [unique_id "aaMvkSzLNJUKxvBorrDqIAAAAYk"]
[Sun Mar 01 02:10:30.347814 2026] [:error] [pid 31190:tid 31212] [client 20.104.124.39:43248] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaMvlhfvwGOholYpM1GZ_wAAAMY"]
[Sun Mar 01 02:10:31.131990 2026] [:error] [pid 11920:tid 11932] [client 20.104.124.39:43221] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaMvlyzLNJUKxvBorrDqZwAAAYg"]
[Sun Mar 01 02:10:31.958206 2026] [:error] [pid 11920:tid 11932] [client 20.104.124.39:43274] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaMvlyzLNJUKxvBorrDqdAAAAYg"]
[Sun Mar 01 02:10:33.070761 2026] [:error] [pid 31190:tid 31230] [client 20.104.124.39:43231] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaMvmRfvwGOholYpM1GaBQAAANg"]
[Sun Mar 01 02:10:34.235839 2026] [:error] [pid 30798:tid 30912] [client 20.104.124.39:43253] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/nox.php"] [unique_id "aaMvmsBkD73gO8wTonabNQAAAI0"]
[Sun Mar 01 02:10:35.637220 2026] [:error] [pid 11920:tid 11930] [client 20.104.124.39:43198] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/nox.php"] [unique_id "aaMvmyzLNJUKxvBorrDqlgAAAYY"]
[Sun Mar 01 02:10:36.744035 2026] [:error] [pid 53600:tid 53627] [client 20.104.124.39:43194] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/nox.php"] [unique_id "aaMvnA2UMRAYWtDB23TwTQAAARg"]
[Sun Mar 01 02:10:37.300536 2026] [:error] [pid 53600:tid 53611] [client 20.104.124.39:43298] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/nox.php"] [unique_id "aaMvnQ2UMRAYWtDB23TwUQAAAQg"]
[Sun Mar 01 02:10:38.242058 2026] [:error] [pid 11920:tid 11946] [client 20.104.124.39:43195] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/file48.php"] [unique_id "aaMvnizLNJUKxvBorrDqpAAAAZY"]
[Sun Mar 01 02:10:38.835471 2026] [:error] [pid 11920:tid 11943] [client 20.104.124.39:43157] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/file48.php"] [unique_id "aaMvnizLNJUKxvBorrDqrQAAAZM"]
[Sun Mar 01 02:10:39.694807 2026] [:error] [pid 30798:tid 30905] [client 20.104.124.39:43223] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/file48.php"] [unique_id "aaMvn8BkD73gO8wTonabSAAAAIY"]
[Sun Mar 01 02:10:40.447300 2026] [:error] [pid 11920:tid 11935] [client 20.104.124.39:43377] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/file48.php"] [unique_id "aaMvoCzLNJUKxvBorrDqtgAAAYs"]
[Sun Mar 01 02:10:42.279227 2026] [:error] [pid 30798:tid 30909] [client 20.104.124.39:43305] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/info.php"] [unique_id "aaMvosBkD73gO8wTonabXAAAAIo"]
[Sun Mar 01 02:10:42.954377 2026] [:error] [pid 30797:tid 30880] [client 20.104.124.39:43189] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/info.php"] [unique_id "aaMvovQmcmSQL-3rvLAPTQAAAEk"]
[Sun Mar 01 02:10:43.583007 2026] [:error] [pid 30797:tid 30891] [client 20.104.124.39:43258] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/info.php"] [unique_id "aaMvo_QmcmSQL-3rvLAPTgAAAFQ"]
[Sun Mar 01 02:10:44.445296 2026] [:error] [pid 30798:tid 30906] [client 20.104.124.39:43139] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/info.php"] [unique_id "aaMvpMBkD73gO8wTonabZQAAAIc"]
[Sun Mar 01 02:10:45.106413 2026] [:error] [pid 30798:tid 30922] [client 20.104.124.39:43155] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class9.php"] [unique_id "aaMvpcBkD73gO8wTonabaAAAAJY"]
[Sun Mar 01 02:10:45.789709 2026] [:error] [pid 53600:tid 53624] [client 20.104.124.39:43222] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class9.php"] [unique_id "aaMvpQ2UMRAYWtDB23TwYQAAARU"]
[Sun Mar 01 02:10:46.519270 2026] [:error] [pid 11920:tid 11927] [client 20.104.124.39:43259] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class9.php"] [unique_id "aaMvpizLNJUKxvBorrDq1QAAAYM"]
[Sun Mar 01 02:10:47.165188 2026] [:error] [pid 30798:tid 30912] [client 20.104.124.39:43201] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/class9.php"] [unique_id "aaMvp8BkD73gO8wTonabbgAAAI0"]
[Sun Mar 01 02:10:47.839523 2026] [:error] [pid 31190:tid 31218] [client 20.104.124.39:43149] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/la.php"] [unique_id "aaMvpxfvwGOholYpM1GaLAAAAMw"]
[Sun Mar 01 02:10:48.831162 2026] [:error] [pid 30798:tid 30902] [client 20.104.124.39:43417] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/la.php"] [unique_id "aaMvqMBkD73gO8wTonabcgAAAIM"]
[Sun Mar 01 02:10:49.647144 2026] [:error] [pid 30798:tid 30913] [client 20.104.124.39:43172] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/la.php"] [unique_id "aaMvqcBkD73gO8wTonabdAAAAI4"]
[Sun Mar 01 02:10:50.258458 2026] [:error] [pid 31190:tid 31226] [client 20.104.124.39:43255] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/la.php"] [unique_id "aaMvqhfvwGOholYpM1GaQwAAANQ"]
[Sun Mar 01 02:10:50.989589 2026] [:error] [pid 11920:tid 11938] [client 20.104.124.39:43211] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bless11.php"] [unique_id "aaMvqizLNJUKxvBorrDq7QAAAY4"]
[Sun Mar 01 02:10:51.884496 2026] [:error] [pid 11920:tid 11939] [client 20.104.124.39:43308] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bless11.php"] [unique_id "aaMvqyzLNJUKxvBorrDq8wAAAY8"]
[Sun Mar 01 02:10:52.542627 2026] [:error] [pid 11920:tid 11937] [client 20.104.124.39:43373] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bless11.php"] [unique_id "aaMvrCzLNJUKxvBorrDq-AAAAY0"]
[Sun Mar 01 02:10:53.240047 2026] [:error] [pid 11920:tid 11939] [client 20.104.124.39:43203] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bless11.php"] [unique_id "aaMvrSzLNJUKxvBorrDq_wAAAY8"]
[Sun Mar 01 02:10:54.228349 2026] [:error] [pid 31190:tid 31224] [client 20.104.124.39:43322] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ccou.php"] [unique_id "aaMvrhfvwGOholYpM1GaTwAAANI"]
[Sun Mar 01 02:10:55.281942 2026] [:error] [pid 11920:tid 11927] [client 20.104.124.39:43319] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ccou.php"] [unique_id "aaMvryzLNJUKxvBorrDrBwAAAYM"]
[Sun Mar 01 02:10:56.100064 2026] [:error] [pid 31190:tid 31207] [client 20.104.124.39:43287] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ccou.php"] [unique_id "aaMvsBfvwGOholYpM1GaVQAAAME"]
[Sun Mar 01 02:10:56.978549 2026] [:error] [pid 31190:tid 31217] [client 20.104.124.39:43426] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ccou.php"] [unique_id "aaMvsBfvwGOholYpM1GaWgAAAMs"]
[Sun Mar 01 02:10:58.091167 2026] [:error] [pid 30798:tid 30911] [client 20.104.124.39:43261] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ton.php"] [unique_id "aaMvssBkD73gO8wTonabmAAAAIw"]
[Sun Mar 01 02:10:59.798506 2026] [:error] [pid 30798:tid 30923] [client 20.104.124.39:43300] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ton.php"] [unique_id "aaMvs8BkD73gO8wTonabowAAAJc"]
[Sun Mar 01 02:11:01.208862 2026] [:error] [pid 7644:tid 7658] [client 20.104.124.39:43352] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ton.php"] [unique_id "aaMvtfqeDUGmVAHX7VCpiwAAAUw"]
[Sun Mar 01 02:11:02.039915 2026] [:error] [pid 53600:tid 53614] [client 20.104.124.39:43387] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ton.php"] [unique_id "aaMvtg2UMRAYWtDB23TwigAAAQs"]
[Sun Mar 01 02:11:03.039170 2026] [:error] [pid 53600:tid 53618] [client 20.104.124.39:43421] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/403.php"] [unique_id "aaMvtw2UMRAYWtDB23TwkgAAAQ8"]
[Sun Mar 01 02:11:04.163186 2026] [:error] [pid 53600:tid 53611] [client 20.104.124.39:43414] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/403.php"] [unique_id "aaMvuA2UMRAYWtDB23TwlAAAAQg"]
[Sun Mar 01 02:11:05.201108 2026] [:error] [pid 31190:tid 31209] [client 20.104.124.39:43343] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/403.php"] [unique_id "aaMvuRfvwGOholYpM1GaagAAAMM"]
[Sun Mar 01 02:11:06.302966 2026] [:error] [pid 31190:tid 31222] [client 20.104.124.39:43275] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/403.php"] [unique_id "aaMvuhfvwGOholYpM1GabAAAANA"]
[Sun Mar 01 02:11:07.518884 2026] [:error] [pid 31190:tid 31214] [client 20.104.124.39:43357] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/file9.php"] [unique_id "aaMvuxfvwGOholYpM1GacAAAAMg"]
[Sun Mar 01 02:11:08.718140 2026] [:error] [pid 11920:tid 11938] [client 20.104.124.39:43524] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/file9.php"] [unique_id "aaMvvCzLNJUKxvBorrDregAAAY4"]
[Sun Mar 01 02:11:10.034955 2026] [:error] [pid 7644:tid 7668] [client 20.104.124.39:43409] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/file9.php"] [unique_id "aaMvvvqeDUGmVAHX7VCprgAAAVY"]
[Sun Mar 01 02:11:11.366502 2026] [:error] [pid 30798:tid 30907] [client 20.104.124.39:43215] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/file9.php"] [unique_id "aaMvv8BkD73gO8wTonacFwAAAIg"]
[Sun Mar 01 02:11:12.425539 2026] [:error] [pid 11920:tid 11937] [client 20.104.124.39:43337] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ac.php"] [unique_id "aaMvwCzLNJUKxvBorrDrjQAAAY0"]
[Sun Mar 01 02:11:13.033719 2026] [:error] [pid 11920:tid 11942] [client 20.104.124.39:43390] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ac.php"] [unique_id "aaMvwSzLNJUKxvBorrDrkgAAAZI"]
[Sun Mar 01 02:11:13.732274 2026] [:error] [pid 11920:tid 11927] [client 20.104.124.39:43271] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ac.php"] [unique_id "aaMvwSzLNJUKxvBorrDrlgAAAYM"]
[Sun Mar 01 02:11:14.348487 2026] [:error] [pid 30798:tid 30907] [client 20.104.124.39:43317] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ac.php"] [unique_id "aaMvwsBkD73gO8wTonacJgAAAIg"]
[Sun Mar 01 02:11:14.966157 2026] [:error] [pid 30798:tid 30904] [client 20.104.124.39:43465] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/new4.php"] [unique_id "aaMvwsBkD73gO8wTonacKgAAAIU"]
[Sun Mar 01 02:11:15.908193 2026] [:error] [pid 30798:tid 30909] [client 20.104.124.39:43200] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/new4.php"] [unique_id "aaMvw8BkD73gO8wTonacMQAAAIo"]
[Sun Mar 01 02:11:16.601662 2026] [:error] [pid 31190:tid 31230] [client 20.104.124.39:43233] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/new4.php"] [unique_id "aaMvxBfvwGOholYpM1GalgAAANg"]
[Sun Mar 01 02:11:17.199041 2026] [:error] [pid 7644:tid 7658] [client 20.104.124.39:43482] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/new4.php"] [unique_id "aaMvxfqeDUGmVAHX7VCpsgAAAUw"]
[Sun Mar 01 02:11:17.829655 2026] [:error] [pid 53600:tid 53616] [client 20.104.124.39:43341] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/pop.php"] [unique_id "aaMvxQ2UMRAYWtDB23TwpgAAAQ0"]
[Sun Mar 01 02:11:18.408577 2026] [:error] [pid 30798:tid 30914] [client 20.104.124.39:43291] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/pop.php"] [unique_id "aaMvxsBkD73gO8wTonacPQAAAI8"]
[Sun Mar 01 02:11:19.002446 2026] [:error] [pid 11920:tid 11940] [client 20.104.124.39:43212] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/pop.php"] [unique_id "aaMvxyzLNJUKxvBorrDroQAAAZA"]
[Sun Mar 01 02:11:19.574518 2026] [:error] [pid 11920:tid 11935] [client 20.104.124.39:43389] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/pop.php"] [unique_id "aaMvxyzLNJUKxvBorrDrpAAAAYs"]
[Sun Mar 01 02:11:20.155928 2026] [:error] [pid 11920:tid 11944] [client 20.104.124.39:43247] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/az.php"] [unique_id "aaMvyCzLNJUKxvBorrDrpwAAAZQ"]
[Sun Mar 01 02:11:21.287553 2026] [:error] [pid 11920:tid 11924] [client 20.104.124.39:43162] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/az.php"] [unique_id "aaMvySzLNJUKxvBorrDrrgAAAYA"]
[Sun Mar 01 02:11:22.285483 2026] [:error] [pid 11920:tid 11936] [client 20.104.124.39:43249] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/az.php"] [unique_id "aaMvyizLNJUKxvBorrDrswAAAYw"]
[Sun Mar 01 02:11:22.807363 2026] [:error] [pid 11920:tid 11930] [client 20.104.124.39:43251] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/az.php"] [unique_id "aaMvyizLNJUKxvBorrDruAAAAYY"]
[Sun Mar 01 02:11:24.093531 2026] [:error] [pid 30798:tid 30916] [client 20.104.124.39:43301] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xaz.php"] [unique_id "aaMvzMBkD73gO8wTonacVgAAAJE"]
[Sun Mar 01 02:11:25.248539 2026] [:error] [pid 11920:tid 11940] [client 20.104.124.39:43307] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xaz.php"] [unique_id "aaMvzSzLNJUKxvBorrDryQAAAZA"]
[Sun Mar 01 02:11:25.719780 2026] [:error] [pid 11920:tid 11943] [client 20.104.124.39:43353] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xaz.php"] [unique_id "aaMvzSzLNJUKxvBorrDrzQAAAZM"]
[Sun Mar 01 02:11:27.050276 2026] [:error] [pid 31190:tid 31207] [client 20.104.124.39:43245] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xaz.php"] [unique_id "aaMvzxfvwGOholYpM1GatAAAAME"]
[Sun Mar 01 02:11:27.984232 2026] [:error] [pid 30798:tid 30921] [client 20.104.124.39:43197] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/up4.php"] [unique_id "aaMvz8BkD73gO8wTonacYAAAAJU"]
[Sun Mar 01 02:11:30.818097 2026] [:error] [pid 31190:tid 31209] [client 20.104.124.39:43160] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/1aa.php"] [unique_id "aaMv0hfvwGOholYpM1GawwAAAMM"]
[Sun Mar 01 02:11:32.164251 2026] [:error] [pid 11920:tid 11926] [client 20.104.124.39:43268] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/1aa.php"] [unique_id "aaMv1CzLNJUKxvBorrDsKgAAAYI"]
[Sun Mar 01 02:11:33.226240 2026] [:error] [pid 11920:tid 11946] [client 20.104.124.39:43381] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/1aa.php"] [unique_id "aaMv1SzLNJUKxvBorrDsPAAAAZY"]
[Sun Mar 01 02:11:34.476968 2026] [:error] [pid 11920:tid 11932] [client 20.104.124.39:43327] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/1aa.php"] [unique_id "aaMv1izLNJUKxvBorrDsSwAAAYg"]
[Sun Mar 01 02:11:35.483530 2026] [:error] [pid 30797:tid 30883] [client 20.104.124.39:43185] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/elp.php"] [unique_id "aaMv1_QmcmSQL-3rvLAPdwAAAEw"]
[Sun Mar 01 02:11:36.937440 2026] [:error] [pid 31190:tid 31218] [client 20.104.124.39:43431] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/elp.php"] [unique_id "aaMv2BfvwGOholYpM1Ga_gAAAMw"]
[Sun Mar 01 02:11:37.929464 2026] [:error] [pid 11920:tid 11941] [client 20.104.124.39:43398] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/elp.php"] [unique_id "aaMv2SzLNJUKxvBorrDsagAAAZE"]
[Sun Mar 01 02:11:38.876434 2026] [:error] [pid 7644:tid 7656] [client 20.104.124.39:43216] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/elp.php"] [unique_id "aaMv2vqeDUGmVAHX7VCpzgAAAUo"]
[Sun Mar 01 02:11:39.736921 2026] [:error] [pid 11920:tid 11931] [client 20.104.124.39:43367] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wtz.php"] [unique_id "aaMv2yzLNJUKxvBorrDsfwAAAYc"]
[Sun Mar 01 02:11:40.652128 2026] [:error] [pid 11920:tid 11928] [client 20.104.124.39:43382] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wtz.php"] [unique_id "aaMv3CzLNJUKxvBorrDsjgAAAYQ"]
[Sun Mar 01 02:11:41.311678 2026] [:error] [pid 11920:tid 11941] [client 20.104.124.39:43454] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wtz.php"] [unique_id "aaMv3SzLNJUKxvBorrDsmAAAAZE"]
[Sun Mar 01 02:11:41.896897 2026] [:error] [pid 11920:tid 11948] [client 20.104.124.39:43453] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wtz.php"] [unique_id "aaMv3SzLNJUKxvBorrDsogAAAZg"]
[Sun Mar 01 02:11:42.981468 2026] [:error] [pid 31190:tid 31230] [client 20.104.124.39:43441] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/galex.php"] [unique_id "aaMv3hfvwGOholYpM1GbEAAAANg"]
[Sun Mar 01 02:11:43.811010 2026] [:error] [pid 11920:tid 11930] [client 20.104.124.39:43428] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/galex.php"] [unique_id "aaMv3yzLNJUKxvBorrDstgAAAYY"]
[Sun Mar 01 02:11:45.000369 2026] [:error] [pid 11920:tid 11924] [client 20.104.124.39:43394] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/galex.php"] [unique_id "aaMv4CzLNJUKxvBorrDsyQAAAYA"]
[Sun Mar 01 02:11:46.245544 2026] [:error] [pid 7644:tid 7661] [client 20.104.124.39:43283] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/galex.php"] [unique_id "aaMv4vqeDUGmVAHX7VCp1wAAAU8"]
[Sun Mar 01 02:11:49.494769 2026] [:error] [pid 11920:tid 11940] [client 20.104.124.39:43179] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xb.php"] [unique_id "aaMv5SzLNJUKxvBorrDtBwAAAZA"]
[Sun Mar 01 02:11:50.080519 2026] [:error] [pid 31190:tid 31229] [client 20.104.124.39:43314] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xb.php"] [unique_id "aaMv5hfvwGOholYpM1GbNQAAANc"]
[Sun Mar 01 02:11:51.320792 2026] [:error] [pid 31190:tid 31219] [client 20.104.124.39:43378] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xb.php"] [unique_id "aaMv5xfvwGOholYpM1GbQAAAAM0"]
[Sun Mar 01 02:11:52.843817 2026] [:error] [pid 11920:tid 11930] [client 20.104.124.39:43452] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xb.php"] [unique_id "aaMv6CzLNJUKxvBorrDtGwAAAYY"]
[Sun Mar 01 02:11:53.614735 2026] [:error] [pid 11920:tid 11938] [client 20.104.124.39:43190] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ova.php"] [unique_id "aaMv6SzLNJUKxvBorrDtHgAAAY4"]
[Sun Mar 01 02:11:54.825025 2026] [:error] [pid 11920:tid 11932] [client 20.104.124.39:43265] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ova.php"] [unique_id "aaMv6izLNJUKxvBorrDtJgAAAYg"]
[Sun Mar 01 02:11:55.726399 2026] [:error] [pid 11920:tid 11928] [client 20.104.124.39:43202] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ova.php"] [unique_id "aaMv6yzLNJUKxvBorrDtMAAAAYQ"]
[Sun Mar 01 02:11:57.261161 2026] [:error] [pid 30798:tid 30901] [client 20.104.124.39:43171] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ova.php"] [unique_id "aaMv7cBkD73gO8wTonacoQAAAII"]
[Sun Mar 01 02:11:57.932307 2026] [:error] [pid 11920:tid 11937] [client 20.104.124.39:43234] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/vx.php"] [unique_id "aaMv7SzLNJUKxvBorrDtRwAAAY0"]
[Sun Mar 01 02:11:58.841101 2026] [:error] [pid 11920:tid 11945] [client 20.104.124.39:43504] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/vx.php"] [unique_id "aaMv7izLNJUKxvBorrDtTAAAAZU"]
[Sun Mar 01 02:11:59.883295 2026] [:error] [pid 11920:tid 11924] [client 20.104.124.39:43183] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/vx.php"] [unique_id "aaMv7yzLNJUKxvBorrDtUgAAAYA"]
[Sun Mar 01 02:12:00.327371 2026] [:error] [pid 31190:tid 31215] [client 20.104.124.39:43290] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/vx.php"] [unique_id "aaMv8BfvwGOholYpM1GbhwAAAMk"]
[Sun Mar 01 02:12:00.903689 2026] [:error] [pid 11920:tid 11933] [client 20.104.124.39:43464] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/rh.php"] [unique_id "aaMv8CzLNJUKxvBorrDtWAAAAYk"]
[Sun Mar 01 02:12:02.122179 2026] [:error] [pid 30798:tid 30924] [client 20.104.124.39:43360] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/rh.php"] [unique_id "aaMv8sBkD73gO8wTonacwgAAAJg"]
[Sun Mar 01 02:12:02.865762 2026] [:error] [pid 11920:tid 11947] [client 20.104.124.39:43170] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/rh.php"] [unique_id "aaMv8izLNJUKxvBorrDtYgAAAZc"]
[Sun Mar 01 02:12:04.246606 2026] [:error] [pid 31190:tid 31206] [client 20.104.124.39:43225] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/rh.php"] [unique_id "aaMv9BfvwGOholYpM1GbnwAAAMA"]
[Sun Mar 01 03:44:47.618442 2026] [:error] [pid 10288:tid 10383] [client 20.151.205.221:54152] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/server.php"] [unique_id "aaNFrxppLTIhFPGINgcFXwAAABE"]
[Sun Mar 01 03:44:48.462810 2026] [:error] [pid 10508:tid 10525] [client 20.151.205.221:59749] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/server.php"] [unique_id "aaNFsPnZ4Ocsz9vZs1NfZQAAAM0"]
[Sun Mar 01 03:44:49.293463 2026] [:error] [pid 10297:tid 10428] [client 20.151.205.221:54145] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/server.php"] [unique_id "aaNFsX5a9rbvPss2V0MpAwAAAIc"]
[Sun Mar 01 03:44:50.140454 2026] [:error] [pid 10508:tid 10517] [client 20.151.205.221:60399] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/server.php"] [unique_id "aaNFsvnZ4Ocsz9vZs1NfagAAAMU"]
[Sun Mar 01 10:06:54.001724 2026] [:error] [pid 33767:tid 33787] [client 20.104.206.150:63299] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/he.php"] [unique_id "aaOfPkGyeKe3MWsxvBj_-AAAAhE"]
[Sun Mar 01 10:06:57.235073 2026] [:error] [pid 33767:tid 33787] [client 20.104.206.150:65143] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/he.php"] [unique_id "aaOfQUGyeKe3MWsxvBgAAgAAAhE"]
[Sun Mar 01 10:06:58.498125 2026] [:error] [pid 33539:tid 33565] [client 20.104.206.150:65060] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/he.php"] [unique_id "aaOfQtCsLwBYg4s018utmwAAAdM"]
[Sun Mar 01 10:06:59.418214 2026] [:error] [pid 33539:tid 33561] [client 20.104.206.150:63265] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/he.php"] [unique_id "aaOfQ9CsLwBYg4s018utpwAAAdA"]
[Sun Mar 01 10:07:00.222764 2026] [:error] [pid 21263:tid 21289] [client 20.104.206.150:63288] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cache.php"] [unique_id "aaOfRNAxjzLvN1upBhkKxAAAANY"]
[Sun Mar 01 10:07:00.963373 2026] [:error] [pid 33767:tid 33774] [client 20.104.206.150:65125] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cache.php"] [unique_id "aaOfREGyeKe3MWsxvBgABwAAAgQ"]
[Sun Mar 01 10:07:02.107263 2026] [:error] [pid 21263:tid 21289] [client 20.104.206.150:58136] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cache.php"] [unique_id "aaOfRtAxjzLvN1upBhkKywAAANY"]
[Sun Mar 01 10:07:03.073916 2026] [:error] [pid 21263:tid 21278] [client 20.104.206.150:65129] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cache.php"] [unique_id "aaOfR9AxjzLvN1upBhkKzgAAAMs"]
[Sun Mar 01 10:07:06.291767 2026] [:error] [pid 33229:tid 33233] [client 20.104.206.150:65027] [client 20.104.206.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tiny.php"] [unique_id "aaOfSnzT4c9ddlGE6FxHagAAAYI"]
[Sun Mar 01 10:07:08.682133 2026] [:error] [pid 33767:tid 33771] [client 20.104.206.150:63251] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-load.php"] [unique_id "aaOfTEGyeKe3MWsxvBgAHAAAAgE"]
[Sun Mar 01 10:07:10.550958 2026] [:error] [pid 21263:tid 21278] [client 20.104.206.150:65137] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-load.php"] [unique_id "aaOfTtAxjzLvN1upBhkK6gAAAMs"]
[Sun Mar 01 10:07:11.663212 2026] [:error] [pid 33539:tid 33553] [client 20.104.206.150:63262] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-load.php"] [unique_id "aaOfT9CsLwBYg4s018utwQAAAcg"]
[Sun Mar 01 10:07:12.690502 2026] [:error] [pid 21263:tid 21289] [client 20.104.206.150:65104] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-load.php"] [unique_id "aaOfUNAxjzLvN1upBhkK9gAAANY"]
[Sun Mar 01 10:07:18.707284 2026] [:error] [pid 33229:tid 33233] [client 20.104.206.150:63298] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/blog.php"] [unique_id "aaOfVnzT4c9ddlGE6FxHfQAAAYI"]
[Sun Mar 01 10:07:19.750322 2026] [:error] [pid 33539:tid 33566] [client 20.104.206.150:63301] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/blog.php"] [unique_id "aaOfV9CsLwBYg4s018utzwAAAdQ"]
[Sun Mar 01 10:07:20.767451 2026] [:error] [pid 8688:tid 8705] [client 20.104.206.150:63284] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/blog.php"] [unique_id "aaOfWDHJ4Nn-RvulD0rPlwAAAU8"]
[Sun Mar 01 10:07:21.325113 2026] [:error] [pid 21263:tid 21287] [client 20.104.206.150:63332] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/blog.php"] [unique_id "aaOfWdAxjzLvN1upBhkLJgAAANQ"]
[Sun Mar 01 10:07:22.429420 2026] [:error] [pid 8688:tid 8705] [client 20.104.206.150:63243] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfanew.php7"] [unique_id "aaOfWjHJ4Nn-RvulD0rPmgAAAU8"]
[Sun Mar 01 10:07:23.363951 2026] [:error] [pid 33229:tid 33248] [client 20.104.206.150:65059] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfanew.php7"] [unique_id "aaOfW3zT4c9ddlGE6FxHnwAAAZE"]
[Sun Mar 01 10:07:24.400383 2026] [:error] [pid 33767:tid 33771] [client 20.104.206.150:58179] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfanew.php7"] [unique_id "aaOfXEGyeKe3MWsxvBgASwAAAgE"]
[Sun Mar 01 10:07:27.489237 2026] [:error] [pid 21159:tid 21237] [client 20.104.206.150:63337] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfanew.php7"] [unique_id "aaOfX-Li3ouy1NZIkgpAOgAAAJA"]
[Sun Mar 01 10:07:28.184294 2026] [:error] [pid 33767:tid 33774] [client 20.104.206.150:63325] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lufix.php"] [unique_id "aaOfYEGyeKe3MWsxvBgAUAAAAgQ"]
[Sun Mar 01 10:07:29.935718 2026] [:error] [pid 33767:tid 33793] [client 20.104.206.150:60829] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lufix.php"] [unique_id "aaOfYUGyeKe3MWsxvBgAXAAAAhc"]
[Sun Mar 01 10:07:32.772812 2026] [:error] [pid 21263:tid 21287] [client 20.104.206.150:65082] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lufix.php"] [unique_id "aaOfZNAxjzLvN1upBhkLYAAAANQ"]
[Sun Mar 01 10:07:34.415766 2026] [:error] [pid 21263:tid 21287] [client 20.104.206.150:60851] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lufix.php"] [unique_id "aaOfZtAxjzLvN1upBhkLZQAAANQ"]
[Sun Mar 01 10:07:35.384953 2026] [:error] [pid 33229:tid 33233] [client 20.104.206.150:63292] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ajax-actions.php"] [unique_id "aaOfZ3zT4c9ddlGE6FxH5AAAAYI"]
[Sun Mar 01 10:07:37.635696 2026] [:error] [pid 33229:tid 33238] [client 20.104.206.150:65080] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ajax-actions.php"] [unique_id "aaOfaXzT4c9ddlGE6FxH8gAAAYc"]
[Sun Mar 01 10:07:41.477943 2026] [:error] [pid 21156:tid 21173] [client 20.104.206.150:63330] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ajax-actions.php"] [unique_id "aaOfbasaG_9IkG8N2p0BjwAAAAc"]
[Sun Mar 01 10:07:43.179187 2026] [:error] [pid 33767:tid 33773] [client 20.104.206.150:63352] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ajax-actions.php"] [unique_id "aaOfb0GyeKe3MWsxvBgAcwAAAgM"]
[Sun Mar 01 10:07:44.925415 2026] [:error] [pid 33229:tid 33238] [client 20.104.206.150:65139] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfa-rex.php7"] [unique_id "aaOfcHzT4c9ddlGE6FxIFQAAAYc"]
[Sun Mar 01 10:07:46.041145 2026] [:error] [pid 8688:tid 8705] [client 20.104.206.150:65126] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfa-rex.php7"] [unique_id "aaOfcjHJ4Nn-RvulD0rPyAAAAU8"]
[Sun Mar 01 10:07:46.890068 2026] [:error] [pid 21159:tid 21221] [client 20.104.206.150:65043] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfa-rex.php7"] [unique_id "aaOfcuLi3ouy1NZIkgpAUQAAAIA"]
[Sun Mar 01 10:07:47.689869 2026] [:error] [pid 33229:tid 33248] [client 20.104.206.150:63289] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfa-rex.php7"] [unique_id "aaOfc3zT4c9ddlGE6FxIHwAAAZE"]
[Sun Mar 01 10:07:48.373322 2026] [:error] [pid 21156:tid 21173] [client 20.104.206.150:60924] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cc.php"] [unique_id "aaOfdKsaG_9IkG8N2p0BlAAAAAc"]
[Sun Mar 01 10:07:48.968901 2026] [:error] [pid 33229:tid 33238] [client 20.104.206.150:63329] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cc.php"] [unique_id "aaOfdHzT4c9ddlGE6FxIJwAAAYc"]
[Sun Mar 01 10:07:49.484028 2026] [:error] [pid 21263:tid 21289] [client 20.104.206.150:63271] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cc.php"] [unique_id "aaOfddAxjzLvN1upBhkLmgAAANY"]
[Sun Mar 01 10:07:49.943886 2026] [:error] [pid 33229:tid 33238] [client 20.104.206.150:58186] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cc.php"] [unique_id "aaOfdXzT4c9ddlGE6FxIKgAAAYc"]
[Sun Mar 01 10:07:50.461297 2026] [:error] [pid 33229:tid 33248] [client 20.104.206.150:65084] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bypass.php"] [unique_id "aaOfdnzT4c9ddlGE6FxILgAAAZE"]
[Sun Mar 01 10:07:51.391193 2026] [:error] [pid 8688:tid 8703] [client 20.104.206.150:65110] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bypass.php"] [unique_id "aaOfdzHJ4Nn-RvulD0rP1AAAAU0"]
[Sun Mar 01 10:07:52.179860 2026] [:error] [pid 21159:tid 21233] [client 20.104.206.150:65057] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bypass.php"] [unique_id "aaOfeOLi3ouy1NZIkgpAXQAAAIw"]
[Sun Mar 01 10:07:52.905357 2026] [:error] [pid 33229:tid 33238] [client 20.104.206.150:65029] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bypass.php"] [unique_id "aaOfeHzT4c9ddlGE6FxIPwAAAYc"]
[Sun Mar 01 14:29:33.743943 2026] [:error] [pid 44644:tid 44650] [client 62.60.131.218:59346] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aaPczZ3RJaXMcw3y9V9vcgAAAAM"]
[Sun Mar 01 16:18:18.882595 2026] [:error] [pid 40750:tid 40759] [client 77.90.185.116:34862] [client 77.90.185.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/HEAD"] [unique_id "aaP2SgfBuk03yQKDyqvWQwAAAcY"]
[Sun Mar 01 19:23:38.678038 2026] [:error] [pid 38034:tid 38048] [client 20.151.11.124:46510] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaQhugxtfZjwlJok9K8AtQAAAQo"]
[Sun Mar 01 19:23:43.131058 2026] [autoindex:error] [pid 40750:tid 40773] [client 20.151.11.124:46491] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 19:23:43.350099 2026] [proxy_fcgi:error] [pid 40750:tid 40768] [client 20.151.11.124:46491] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:23:43.573867 2026] [autoindex:error] [pid 40750:tid 40765] [client 20.151.11.124:46491] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 19:23:44.975827 2026] [:error] [pid 38241:tid 38266] [client 20.151.11.124:34866] [client 20.151.11.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.151.11.124, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aaQhwPKRPk6YnJBxw_zYPAAAANY"]
[Sun Mar 01 19:23:48.729942 2026] [autoindex:error] [pid 40750:tid 40777] [client 20.151.11.124:28512] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 19:23:50.081815 2026] [:error] [pid 40750:tid 40763] [client 20.151.11.124:25015] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaQhxgfBuk03yQKDyqu8vAAAAco"]
[Sun Mar 01 19:23:50.912019 2026] [:error] [pid 7165:tid 7184] [client 20.151.11.124:34898] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aaQhxhRjCrA8qWBjgG_lrgAAAlE"]
[Sun Mar 01 19:23:56.211732 2026] [autoindex:error] [pid 38241:tid 38265] [client 20.151.11.124:33680] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 19:23:57.621709 2026] [:error] [pid 33822:tid 33840] [client 20.151.11.124:28487] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/lv.php"] [unique_id "aaQhzW6W3ygu1YVssuYCbAAAApA"]
[Sun Mar 01 19:24:05.449405 2026] [autoindex:error] [pid 38241:tid 38257] [client 20.151.11.124:31412] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 19:24:10.308234 2026] [:error] [pid 40750:tid 40762] [client 20.151.11.124:34508] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aaQh2gfBuk03yQKDyqu9DwAAAck"]
[Sun Mar 01 19:24:12.324710 2026] [:error] [pid 40750:tid 40753] [client 20.151.11.124:11348] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaQh3AfBuk03yQKDyqu9HgAAAcA"]
[Sun Mar 01 19:24:14.318498 2026] [autoindex:error] [pid 44644:tid 44653] [client 20.151.11.124:31769] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 21:50:57.735146 2026] [:error] [pid 7165:tid 7171] [client 20.63.80.2:37413] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aaREQRRjCrA8qWBjgG9XgwAAAkQ"]
[Sun Mar 01 21:50:58.551971 2026] [:error] [pid 7165:tid 7191] [client 20.63.80.2:37419] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aaREQhRjCrA8qWBjgG9XjwAAAlg"]
[Sun Mar 01 21:50:59.381466 2026] [:error] [pid 33822:tid 33831] [client 20.63.80.2:37392] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aaREQ26W3ygu1YVssuYmxwAAAoc"]
[Sun Mar 01 21:51:00.201005 2026] [:error] [pid 7165:tid 7177] [client 20.63.80.2:37061] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aaRERBRjCrA8qWBjgG9XoAAAAko"]
[Sun Mar 01 22:11:55.817596 2026] [:error] [pid 7133:tid 7159] [client 20.151.11.124:24322] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaRJK_Ctubh8pR64qB9YHAAAAFg"]
[Sun Mar 01 22:11:57.231383 2026] [autoindex:error] [pid 40750:tid 40755] [client 20.151.11.124:13960] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 22:12:02.589743 2026] [autoindex:error] [pid 7133:tid 7141] [client 20.151.11.124:49987] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 22:12:02.800639 2026] [autoindex:error] [pid 7133:tid 7147] [client 20.151.11.124:49987] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/block/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 22:12:03.511541 2026] [:error] [pid 7133:tid 7155] [client 20.151.11.124:49987] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaRJM_Ctubh8pR64qB9YLAAAAFQ"]
[Sun Mar 01 22:12:05.489881 2026] [autoindex:error] [pid 37032:tid 37041] [client 20.151.11.124:15812] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 22:12:08.507881 2026] [autoindex:error] [pid 38034:tid 38044] [client 20.151.11.124:41489] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 22:12:08.713882 2026] [:error] [pid 38034:tid 38038] [client 20.151.11.124:41489] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaRJOAxtfZjwlJok9K8gwwAAAQI"]
[Sun Mar 01 22:12:09.572947 2026] [autoindex:error] [pid 38241:tid 38246] [client 20.151.11.124:38349] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 22:12:12.077741 2026] [:error] [pid 7133:tid 7136] [client 20.151.11.124:45058] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaRJPPCtubh8pR64qB9YOgAAAEE"]
[Sun Mar 01 22:12:14.070067 2026] [autoindex:error] [pid 7165:tid 7173] [client 20.151.11.124:45091] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 22:12:14.276333 2026] [:error] [pid 7165:tid 7191] [client 20.151.11.124:45091] [client 20.151.11.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.11.124, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaRJPhRjCrA8qWBjgG9s1gAAAlg"]
[Sun Mar 01 22:12:16.008756 2026] [autoindex:error] [pid 38241:tid 38251] [client 20.151.11.124:39027] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2023/08/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 22:12:18.564534 2026] [autoindex:error] [pid 7165:tid 7186] [client 20.151.11.124:26018] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 22:12:21.666732 2026] [autoindex:error] [pid 33822:tid 33825] [client 20.151.11.124:8247] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 22:12:22.377791 2026] [autoindex:error] [pid 33822:tid 33826] [client 20.151.11.124:8247] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 22:12:23.826188 2026] [:error] [pid 40750:tid 40769] [client 20.151.11.124:28456] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaRJRwfBuk03yQKDyqtnWwAAAdA"]
[Sun Mar 01 22:12:25.811947 2026] [autoindex:error] [pid 40750:tid 40772] [client 20.151.11.124:26001] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 22:12:27.379043 2026] [:error] [pid 7133:tid 7142] [client 20.151.11.124:40688] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aaRJS_Ctubh8pR64qB9YRAAAAEc"]
[Sun Mar 01 22:12:29.411756 2026] [:error] [pid 40750:tid 40755] [client 20.151.11.124:19661] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaRJTQfBuk03yQKDyqtndQAAAcI"]
[Mon Mar 02 00:15:56.447516 2026] [:error] [pid 33822:tid 33831] [client 20.220.162.180:28143] [client 20.220.162.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.162.180, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaRmPG6W3ygu1YVssuZOIgAAAoc"]
[Mon Mar 02 00:16:05.678708 2026] [:error] [pid 33822:tid 33836] [client 20.220.162.180:28409] [client 20.220.162.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.220.162.180, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aaRmRW6W3ygu1YVssuZONwAAAow"]
[Mon Mar 02 00:16:15.118721 2026] [autoindex:error] [pid 38241:tid 38250] [client 20.220.162.180:28362] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 00:16:19.959743 2026] [autoindex:error] [pid 33822:tid 33846] [client 20.220.162.180:28121] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 00:16:20.165016 2026] [:error] [pid 33822:tid 33843] [client 20.220.162.180:28121] [client 20.220.162.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aaRmVG6W3ygu1YVssuZOTgAAApM"]
[Mon Mar 02 00:16:23.306962 2026] [autoindex:error] [pid 33822:tid 33841] [client 20.220.162.180:28392] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 00:16:23.521682 2026] [autoindex:error] [pid 33822:tid 33848] [client 20.220.162.180:28392] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 00:16:25.374313 2026] [autoindex:error] [pid 7165:tid 7186] [client 20.220.162.180:28357] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 00:16:25.588594 2026] [autoindex:error] [pid 7165:tid 7169] [client 20.220.162.180:28357] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 00:57:22.330085 2026] [:error] [pid 53181:tid 53514] [client 20.104.206.150:34785] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaRv8or_0T1SazTrJOAkiAAAAQA"]
[Mon Mar 02 00:57:22.743314 2026] [:error] [pid 53585:tid 53609] [client 20.104.206.150:34693] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaRv8nbCvYsvu6kKhM11QQAAABU"]
[Mon Mar 02 00:57:23.152944 2026] [:error] [pid 53181:tid 53525] [client 20.104.206.150:34701] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaRv84r_0T1SazTrJOAkjAAAAQo"]
[Mon Mar 02 00:57:23.594245 2026] [:error] [pid 53182:tid 53555] [client 20.104.206.150:34705] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaRv8_v073cA6eM1YCSxhQAAAMs"]
[Mon Mar 02 01:09:47.741999 2026] [:error] [pid 53182:tid 53563] [client 20.151.11.124:51525] [client 20.151.11.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.11.124, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaRy2_v073cA6eM1YCS67gAAANM"]
[Mon Mar 02 01:09:52.412288 2026] [:error] [pid 53182:tid 53561] [client 20.151.11.124:14101] [client 20.151.11.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.11.124, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaRy4Pv073cA6eM1YCS7BQAAANE"]
[Mon Mar 02 01:09:54.761579 2026] [:error] [pid 53182:tid 53567] [client 20.151.11.124:14101] [client 20.151.11.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.151.11.124, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aaRy4vv073cA6eM1YCS7EgAAANc"]
[Mon Mar 02 01:09:55.366800 2026] [autoindex:error] [pid 53182:tid 53545] [client 20.151.11.124:14101] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 01:10:00.183180 2026] [:error] [pid 53585:tid 53607] [client 20.151.11.124:9144] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaRy6HbCvYsvu6kKhM2D6gAAABM"]
[Mon Mar 02 01:10:02.703978 2026] [autoindex:error] [pid 53181:tid 53538] [client 20.151.11.124:42159] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 01:10:04.082982 2026] [autoindex:error] [pid 53585:tid 53607] [client 20.151.11.124:9071] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 01:10:06.540681 2026] [:error] [pid 53585:tid 53589] [client 20.151.11.124:39729] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaRy7nbCvYsvu6kKhM2D_wAAAAE"]
[Mon Mar 02 01:10:07.432467 2026] [:error] [pid 26940:tid 26963] [client 20.151.11.124:9042] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaRy7xrUg-j5GLDtRFmEVAAAAFM"]
[Mon Mar 02 01:10:10.525135 2026] [:error] [pid 53181:tid 53534] [client 20.151.11.124:9075] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/admiin.php"] [unique_id "aaRy8or_0T1SazTrJOArOgAAARM"]
[Mon Mar 02 01:10:14.587332 2026] [autoindex:error] [pid 26940:tid 26952] [client 20.151.11.124:51966] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 01:10:18.112406 2026] [autoindex:error] [pid 26940:tid 26963] [client 20.151.11.124:51941] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2023/08/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 01:10:20.089368 2026] [autoindex:error] [pid 26940:tid 26964] [client 20.151.11.124:9135] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 01:10:20.294675 2026] [:error] [pid 26940:tid 26960] [client 20.151.11.124:9135] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaRy_BrUg-j5GLDtRFmEuAAAAFA"]
[Mon Mar 02 01:10:23.954592 2026] [autoindex:error] [pid 53585:tid 53599] [client 20.151.11.124:63581] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 01:10:29.300757 2026] [autoindex:error] [pid 26940:tid 26960] [client 20.151.11.124:54177] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 01:10:29.511770 2026] [:error] [pid 26940:tid 26963] [client 20.151.11.124:54177] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaRzBRrUg-j5GLDtRFmE9AAAAFM"]
[Mon Mar 02 01:10:32.109056 2026] [:error] [pid 53180:tid 53459] [client 20.151.11.124:54160] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaRzCDPPJpDOBvYnaa1KaAAAAY8"]
[Mon Mar 02 09:49:07.963624 2026] [:error] [pid 31257:tid 31281] [client 20.104.19.195:9209] [client 20.104.19.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tinyfilemanager.php"] [unique_id "aaTsk_-JFLfishX45N8KtgAAARI"]
[Mon Mar 02 09:52:54.869127 2026] [authz_core:error] [pid 31257:tid 31274] [client 138.68.86.32:60626] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Mar 02 09:53:00.969704 2026] [:error] [pid 31257:tid 31267] [client 138.68.86.32:41520] [client 138.68.86.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aaTtfP-JFLfishX45N8M_QAAAQQ"]
[Mon Mar 02 09:53:05.168503 2026] [:error] [pid 28793:tid 28821] [client 138.68.86.32:41536] [client 138.68.86.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aaTtgQ2_fxBANaHo1f5MgQAAAA4"]
[Mon Mar 02 09:53:15.818050 2026] [:error] [pid 28795:tid 28883] [client 138.68.86.32:36014] [client 138.68.86.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aaTti7ROd53wZBkdI_edKwAAAJQ"]
[Mon Mar 02 11:05:58.833481 2026] [:error] [pid 31257:tid 31274] [client 20.63.41.168:19440] [client 20.63.41.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaT-lv-JFLfishX45N9IoQAAAQs"]
[Mon Mar 02 11:06:33.605702 2026] [:error] [pid 23872:tid 23881] [client 20.63.41.168:19375] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sa.php"] [unique_id "aaT-uUzkQFuA2qBk8UPaJwAAAYY"]
[Mon Mar 02 11:06:40.461466 2026] [:error] [pid 31257:tid 31268] [client 20.63.41.168:19316] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sa.php"] [unique_id "aaT-wP-JFLfishX45N9JRwAAAQU"]
[Mon Mar 02 11:34:47.326242 2026] [authz_core:error] [pid 23872:tid 23886] [client 139.59.136.184:47816] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Mar 02 11:34:54.015421 2026] [:error] [pid 21575:tid 21600] [client 139.59.136.184:59830] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aaUFXirocdArcJqFfInl9wAAAVU"]
[Mon Mar 02 11:34:58.755243 2026] [:error] [pid 23872:tid 23880] [client 139.59.136.184:52134] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aaUFYkzkQFuA2qBk8UPxdgAAAYU"]
[Mon Mar 02 11:35:10.735894 2026] [:error] [pid 23872:tid 23893] [client 139.59.136.184:44114] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aaUFbkzkQFuA2qBk8UPxmwAAAZI"]
[Mon Mar 02 18:52:32.485603 2026] [autoindex:error] [pid 59602:tid 59678] [client 74.248.112.126:46332] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:52:42.802059 2026] [:error] [pid 59701:tid 59723] [client 74.248.112.126:33683] [client 74.248.112.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaVr-uUmTDVso96U9_K1UAAAARM"]
[Mon Mar 02 18:52:54.938325 2026] [:error] [pid 59600:tid 59615] [client 74.248.112.126:28295] [client 74.248.112.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.248.112.126, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aaVsBoQ5lE4yocV9IBcQOAAAAAY"]
[Mon Mar 02 18:53:50.870878 2026] [:error] [pid 59701:tid 59707] [client 74.248.112.126:39124] [client 74.248.112.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tinyfilemanager.php"] [unique_id "aaVsPuUmTDVso96U9_K1qAAAAQM"]
[Mon Mar 02 18:54:14.692419 2026] [autoindex:error] [pid 59602:tid 59679] [client 74.248.112.126:25378] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:54:33.924153 2026] [autoindex:error] [pid 28847:tid 28863] [client 74.248.112.126:39191] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:54:51.839293 2026] [autoindex:error] [pid 28847:tid 28867] [client 74.248.112.126:41595] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:55:05.253358 2026] [autoindex:error] [pid 59600:tid 59618] [client 74.248.112.126:26108] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:55:24.641127 2026] [autoindex:error] [pid 59701:tid 59726] [client 74.248.112.126:33246] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2021/02/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:55:38.603027 2026] [:error] [pid 59601:tid 59640] [client 74.248.112.126:28821] [client 74.248.112.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaVsqsQ1lXfvWN0-ZQl3GwAAAEI"]
[Mon Mar 02 18:55:47.899844 2026] [autoindex:error] [pid 59734:tid 59746] [client 74.248.112.126:3186] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:55:54.682758 2026] [autoindex:error] [pid 59734:tid 59759] [client 74.248.112.126:31927] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 21:27:03.382384 2026] [:error] [pid 59601:tid 59645] [client 13.71.189.74:47888] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWQJ8Q1lXfvWN0-ZQmUAwAAAEc"]
[Mon Mar 02 21:27:03.803102 2026] [:error] [pid 59600:tid 59617] [client 13.71.189.74:60496] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWQJ4Q5lE4yocV9IBdmxQAAAAg"]
[Mon Mar 02 21:27:04.220717 2026] [:error] [pid 28847:tid 28851] [client 13.71.189.74:47916] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWQKJ9xbBq8VfeqVDZWJAAAAMI"]
[Mon Mar 02 21:27:04.648191 2026] [:error] [pid 28847:tid 28859] [client 13.71.189.74:2827] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWQKJ9xbBq8VfeqVDZWJgAAAMo"]
[Tue Mar 03 01:30:11.261627 2026] [:error] [pid 18558:tid 18873] [client 20.151.217.152:23301] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXJI7O1kQHjTOLioCnDjQAAAJM"]
[Tue Mar 03 01:30:11.672219 2026] [:error] [pid 18557:tid 18842] [client 20.151.217.152:23390] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXJI9ngZqR9Tp8JM0FdFwAAAFM"]
[Tue Mar 03 01:30:12.084789 2026] [:error] [pid 18558:tid 18868] [client 20.151.217.152:23308] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXJJLO1kQHjTOLioCnDlQAAAI4"]
[Tue Mar 03 01:30:12.500538 2026] [:error] [pid 18960:tid 18986] [client 20.151.217.152:23381] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXJJNCu09icM9oIHwDi0QAAANc"]
[Tue Mar 03 19:16:31.440352 2026] [autoindex:error] [pid 36784:tid 36832] [client 40.75.5.122:35941] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 19:16:31.639877 2026] [:error] [pid 36784:tid 36846] [client 40.75.5.122:35941] [client 40.75.5.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.75.5.122, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aabDD3NeKOSGbW9kDgSzigAAAFc"]
[Tue Mar 03 19:16:34.001758 2026] [autoindex:error] [pid 14042:tid 14059] [client 40.75.5.122:35942] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 19:16:37.515993 2026] [autoindex:error] [pid 20872:tid 20891] [client 40.75.5.122:6268] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 19:16:38.847798 2026] [autoindex:error] [pid 20872:tid 20893] [client 40.75.5.122:46262] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 19:16:46.550252 2026] [:error] [pid 14042:tid 14044] [client 40.75.5.122:6369] [client 40.75.5.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aabDHmeHGCmSEiIBcK5hbgAAAYA"]
[Tue Mar 03 19:16:48.567740 2026] [autoindex:error] [pid 14042:tid 14067] [client 40.75.5.122:47801] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 19:16:54.171675 2026] [:error] [pid 36897:tid 36905] [client 40.75.5.122:28742] [client 40.75.5.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/index.php"] [unique_id "aabDJiZC69_8eM0Uous4PQAAAMM"]
[Tue Mar 03 19:16:55.017830 2026] [autoindex:error] [pid 36897:tid 36914] [client 40.75.5.122:45074] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 19:16:56.470917 2026] [autoindex:error] [pid 14042:tid 14061] [client 40.75.5.122:33462] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/block/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 19:16:57.791073 2026] [:error] [pid 36897:tid 36918] [client 40.75.5.122:47775] [client 40.75.5.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aabDKSZC69_8eM0Uous4XwAAANA"]
[Tue Mar 03 19:17:06.592000 2026] [:error] [pid 36785:tid 36855] [client 40.75.5.122:35029] [client 40.75.5.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/index.php"] [unique_id "aabDMnhJejauENG9qTi9aAAAAIU"]
[Tue Mar 03 19:17:08.626934 2026] [autoindex:error] [pid 20872:tid 20885] [client 40.75.5.122:44654] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 19:17:11.327769 2026] [autoindex:error] [pid 36784:tid 36845] [client 40.75.5.122:44602] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 22:11:33.495270 2026] [:error] [pid 36785:tid 36866] [client 178.16.53.90:59246] [client 178.16.53.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aabsFXhJejauENG9qTgM_wAAAJA"]
[Wed Mar 04 06:45:59.669141 2026] [:error] [pid 18555:tid 18620] [client 52.252.56.196:49144] [client 52.252.56.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/oQGWC1HLhE5.php"] [unique_id "aadkpzQeUDANiOsQ3Gd7bQAAAIE"]
[Wed Mar 04 11:48:41.932253 2026] [:error] [pid 18554:tid 18598] [client 134.122.75.55:56811] [client 134.122.75.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.75.55, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaermZ0fKmKeTIK7QS2HVgAAAEY"]
[Wed Mar 04 11:48:43.383569 2026] [:error] [pid 18554:tid 18604] [client 134.122.75.55:56831] [client 134.122.75.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.75.55, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aaerm50fKmKeTIK7QS2HWQAAAEw"]
[Wed Mar 04 13:01:33.616247 2026] [:error] [pid 18555:tid 18631] [client 43.228.157.73:51331] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aae8rTQeUDANiOsQ3GfQHAAAAIw"]
[Wed Mar 04 13:01:34.274688 2026] [:error] [pid 54487:tid 54497] [client 43.228.157.73:51538] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aae8rvN8030QMpFXddtdjwAAAQg"]
[Wed Mar 04 13:01:34.842513 2026] [:error] [pid 54487:tid 54491] [client 43.228.157.73:51732] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aae8rvN8030QMpFXddtdugAAAQI"]
[Wed Mar 04 13:01:35.418018 2026] [:error] [pid 18554:tid 18606] [client 43.228.157.73:51947] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aae8r50fKmKeTIK7QS3LNAAAAE4"]
[Wed Mar 04 13:01:35.998199 2026] [:error] [pid 45947:tid 46028] [client 43.228.157.73:52159] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aae8r0QXEtszYKy6sasUfwAAAUA"]
[Thu Mar 05 22:40:26.222107 2026] [:error] [pid 62173:tid 62269] [client 157.15.40.88:50356] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/txets.php"] [unique_id "aamV2mj_GWbFb-1ncGmA5AAAABA"]
[Thu Mar 05 22:40:26.480024 2026] [:error] [pid 62177:tid 62322] [client 157.15.40.88:50428] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/txets.php"] [unique_id "aamV2hWSQc2OzPrsnwX6NQAAAIs"]
[Thu Mar 05 22:40:26.738490 2026] [:error] [pid 8151:tid 8244] [client 157.15.40.88:50500] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/txets.php"] [unique_id "aamV2pO3dLEidct1HvCogQAAAZg"]
[Thu Mar 05 22:40:26.994559 2026] [:error] [pid 8151:tid 8227] [client 157.15.40.88:50568] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/txets.php"] [unique_id "aamV2pO3dLEidct1HvCotAAAAYg"]
[Thu Mar 05 22:40:27.263470 2026] [:error] [pid 8151:tid 8233] [client 157.15.40.88:50645] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/schallfuns.php"] [unique_id "aamV25O3dLEidct1HvCoygAAAY0"]
[Thu Mar 05 22:40:27.517960 2026] [:error] [pid 8151:tid 8221] [client 157.15.40.88:50724] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/postnews.php"] [unique_id "aamV25O3dLEidct1HvCo1wAAAYI"]
[Thu Mar 05 22:40:27.779128 2026] [:error] [pid 41459:tid 41488] [client 157.15.40.88:50804] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/postnews.php"] [unique_id "aamV2-dFBZEnZ3pzxrWEOgAAAU4"]
[Thu Mar 05 22:40:28.044732 2026] [:error] [pid 8151:tid 8228] [client 157.15.40.88:50886] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/postnews.php"] [unique_id "aamV3JO3dLEidct1HvCpHAAAAYk"]
[Thu Mar 05 22:40:28.297720 2026] [:error] [pid 62173:tid 62276] [client 157.15.40.88:50964] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/postnews.php"] [unique_id "aamV3Gj_GWbFb-1ncGmBCQAAABY"]
[Fri Mar 06 00:45:09.826067 2026] [:error] [pid 27687:tid 27702] [client 103.77.107.222:55502] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/sftp-config.json"] [unique_id "aamzFUI2IG23EwU7sL8BtgAAAIE"]
[Fri Mar 06 00:45:10.079714 2026] [:error] [pid 48372:tid 48404] [client 103.77.107.222:55634] [client 103.77.107.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.vscode/sftp.json"] [unique_id "aamzFkWaQyQyfhXPRrYGsAAAAU8"]
[Fri Mar 06 23:10:55.533920 2026] [:error] [pid 8656:tid 8834] [client 62.60.131.218:62768] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aaruf5PxTG9Ff1TtP6PK7AAAAJg"]
[Sat Mar 07 06:27:00.296365 2026] [:error] [pid 52484:tid 52528] [client 34.73.57.111:57304] [client 34.73.57.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aatUtPE9AnX6zUICFeT8tQAAARg"]
[Sat Mar 07 08:28:17.270795 2026] [:error] [pid 4307:tid 4393] [client 62.60.131.218:58030] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aatxITeKp4wgnLc38f9esQAAAAs"]
[Sat Mar 07 14:37:32.380577 2026] [:error] [pid 37998:tid 38046] [client 34.24.47.138:62337] [client 34.24.47.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jquery/jquery.js"] [unique_id "aavHrMl3xHpv0STGaSbBBAAAAUM"]
[Sat Mar 07 17:01:21.865853 2026] [:error] [pid 52484:tid 52507] [client 193.32.126.227:62300] [client 193.32.126.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.32.126.227, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aavpYfE9AnX6zUICFeR8IAAAAQQ"]
[Sat Mar 07 21:42:01.294576 2026] [autoindex:error] [pid 50682:tid 50691] [client 85.203.23.159:47167] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Mar 07 21:47:24.186494 2026] [autoindex:error] [pid 4307:tid 4382] [client 85.203.23.122:51027] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Mar 07 21:48:43.478715 2026] [autoindex:error] [pid 36899:tid 36947] [client 85.203.23.122:51199] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/video/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Mar 07 21:48:48.571938 2026] [autoindex:error] [pid 10276:tid 10292] [client 85.203.23.161:65099] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Mar 07 21:51:03.591093 2026] [autoindex:error] [pid 36899:tid 36938] [client 85.203.23.122:37931] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Mar 07 21:51:44.889843 2026] [:error] [pid 4315:tid 4453] [client 85.203.23.159:41503] [client 85.203.23.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "aawtcNDEK9AXzxu9OSgUAQAAAIY"]
[Sat Mar 07 21:52:21.293370 2026] [autoindex:error] [pid 36899:tid 36945] [client 85.203.23.161:31725] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://southerncrosscentre.au/wp-content/uploads
[Sat Mar 07 21:53:01.382419 2026] [proxy_fcgi:error] [pid 4315:tid 4458] [client 85.203.23.122:26089] AH01071: Got error 'PHP message: PHP Warning:  Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/crosscen/public_html/wp-includes/blocks/index.php on line 8PHP message: PHP Warning:  Use of undefined constant WPINC - assumed 'WPINC' (this will throw an Error in a future version of PHP) in /home/crosscen/public_html/wp-includes/blocks/index.php on line 8PHP message: PHP Warning:  require(ABSPATHWPINC/blocks/legacy-widget.php): failed to open stream: No such file or directory in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11PHP message: PHP Warning:  require(ABSPATHWPINC/blocks/legacy-widget.php): failed to open stream: No such file or directory in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11PHP message: PHP Fatal error:  require(): Failed opening required 'ABSPATHWPINC/blocks/legacy-widget.php' (include_path='.:') in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11'
[Sat Mar 07 21:54:49.168276 2026] [autoindex:error] [pid 14885:tid 14914] [client 85.203.23.122:55365] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/navigation-submenu/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Mar 07 21:55:32.081087 2026] [:error] [pid 36899:tid 36944] [client 85.203.23.159:45533] [client 85.203.23.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aawuVDIlMfwxLHrLy_9-5QAAAZU"]
[Sat Mar 07 21:59:30.692649 2026] [:error] [pid 14885:tid 14921] [client 85.203.23.122:33371] [client 85.203.23.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-terms/vx.php"] [unique_id "aawvQlj4t7-EBJadtcXV8QAAA5Y"]
[Sat Mar 07 22:00:39.787185 2026] [:error] [pid 4315:tid 4471] [client 85.203.23.161:39311] [client 85.203.23.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/fields/about.php"] [unique_id "aawvh9DEK9AXzxu9OSgXyQAAAJY"]
[Sat Mar 07 22:02:51.369543 2026] [:error] [pid 4315:tid 4457] [client 85.203.23.122:34985] [client 85.203.23.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/000.php"] [unique_id "aawwC9DEK9AXzxu9OSgZAwAAAIo"]
[Mon Mar 09 07:41:40.571542 2026] [authz_core:error] [pid 17485:tid 17498] [client 206.189.2.13:57760] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Mar 09 07:41:46.527202 2026] [:error] [pid 17485:tid 17500] [client 206.189.2.13:46844] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aa4JOtQOL_kxQEc1PTDQ-AAAAQw"]
[Mon Mar 09 07:41:50.666814 2026] [:error] [pid 6074:tid 6102] [client 206.189.2.13:46876] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aa4JPhgvXHMVGYw_ElwITgAAAMs"]
[Mon Mar 09 07:42:01.270680 2026] [:error] [pid 17485:tid 17492] [client 206.189.2.13:59526] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aa4JSdQOL_kxQEc1PTDRVQAAAQQ"]
[Mon Mar 09 07:42:17.272670 2026] [:error] [pid 17485:tid 17489] [client 206.189.2.13:53130] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "aa4JWdQOL_kxQEc1PTDRlgAAAQE"]
[Mon Mar 09 07:58:43.416039 2026] [authz_core:error] [pid 17485:tid 17503] [client 64.225.75.246:37958] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Mar 09 07:58:49.620225 2026] [:error] [pid 5787:tid 5932] [client 64.225.75.246:38018] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aa4NObGpMgQ18gGUaFOSrwAAAIo"]
[Mon Mar 09 07:58:53.745769 2026] [:error] [pid 17485:tid 17489] [client 64.225.75.246:38034] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aa4NPdQOL_kxQEc1PTDewwAAAQE"]
[Mon Mar 09 07:59:04.466757 2026] [:error] [pid 5783:tid 5917] [client 64.225.75.246:47794] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aa4NSAdiZJ1FQPtsTNQfnAAAAFc"]
[Mon Mar 09 07:59:21.129642 2026] [:error] [pid 17485:tid 17497] [client 64.225.75.246:43408] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "aa4NWdQOL_kxQEc1PTDfMgAAAQk"]
[Tue Mar 10 03:33:34.239778 2026] [:error] [pid 64615:tid 64683] [client 104.28.159.135:25537] [client 104.28.159.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/style.php"] [unique_id "aa8gjiTfqTdxLs_cfGRHwQAAAMQ"]
[Tue Mar 10 05:23:22.561233 2026] [:error] [pid 7904:tid 7993] [client 62.60.131.218:58883] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aa86StqdH-GCmASfJqHe4wAAAAE"]
[Tue Mar 10 05:40:49.405234 2026] [:error] [pid 7904:tid 8002] [client 62.60.131.218:64472] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aa8-YdqdH-GCmASfJqHgVQAAAAo"]
[Tue Mar 10 22:13:49.995687 2026] [proxy_fcgi:error] [pid 3873:tid 3936] [client 5.133.192.105:33908] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Mar 10 22:38:58.063182 2026] [proxy_fcgi:error] [pid 3965:tid 3985] [client 13.56.231.126:53860] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Mar 10 22:38:58.542752 2026] [proxy_fcgi:error] [pid 3965:tid 3977] [client 13.56.231.126:53874] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Mar 10 22:38:59.014860 2026] [proxy_fcgi:error] [pid 3965:tid 3968] [client 13.56.231.126:53886] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Mar 10 22:38:59.515726 2026] [proxy_fcgi:error] [pid 3965:tid 3979] [client 13.56.231.126:53906] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 07:48:36.473710 2026] [:error] [pid 11751:tid 11776] [client 209.87.169.108:40414] [client 209.87.169.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abCt1HKeU7OoUEz26eXGQwAAAVc"]
[Wed Mar 11 07:48:37.653736 2026] [proxy_fcgi:error] [pid 11751:tid 11776] [client 209.87.169.108:40414] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 07:48:39.719314 2026] [proxy_fcgi:error] [pid 11751:tid 11759] [client 209.87.169.108:40560] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 07:48:41.262741 2026] [proxy_fcgi:error] [pid 6222:tid 6245] [client 209.87.169.108:40736] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 08:45:36.105528 2026] [proxy_fcgi:error] [pid 11751:tid 11772] [client 20.151.211.215:54974] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 08:45:36.739044 2026] [proxy_fcgi:error] [pid 11572:tid 11598] [client 20.151.211.215:54980] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 08:45:37.332737 2026] [proxy_fcgi:error] [pid 6222:tid 6232] [client 20.151.211.215:54984] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 08:45:37.911969 2026] [proxy_fcgi:error] [pid 11796:tid 11802] [client 20.151.211.215:54990] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 08:45:38.514706 2026] [proxy_fcgi:error] [pid 11751:tid 11755] [client 20.151.211.215:54996] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 08:45:39.095110 2026] [proxy_fcgi:error] [pid 11751:tid 11775] [client 20.151.211.215:55006] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 08:45:39.674751 2026] [proxy_fcgi:error] [pid 11796:tid 11801] [client 20.151.211.215:55008] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 08:45:40.259786 2026] [proxy_fcgi:error] [pid 11751:tid 11769] [client 20.151.211.215:55020] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 08:45:41.069159 2026] [proxy_fcgi:error] [pid 11751:tid 11772] [client 20.151.211.215:55028] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 08:45:41.645118 2026] [proxy_fcgi:error] [pid 11751:tid 11760] [client 20.151.211.215:55042] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 08:45:42.262061 2026] [proxy_fcgi:error] [pid 11751:tid 11775] [client 20.151.211.215:55052] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 08:45:42.909974 2026] [proxy_fcgi:error] [pid 11751:tid 11761] [client 20.151.211.215:55066] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 08:45:43.611680 2026] [proxy_fcgi:error] [pid 11796:tid 11815] [client 20.151.211.215:55078] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 11:55:09.761358 2026] [:error] [pid 53954:tid 54002] [client 209.87.169.95:41768] [client 209.87.169.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abDnnbbD1J_Nhe6jce17gwAAAFA"]
[Wed Mar 11 11:55:10.151282 2026] [proxy_fcgi:error] [pid 53954:tid 54002] [client 209.87.169.95:41768] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 12:14:14.255557 2026] [:error] [pid 23482:tid 23505] [client 209.87.169.87:58174] [client 209.87.169.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abDsFsrYaTAnN_mLXylS-AAAARQ"]
[Wed Mar 11 12:14:14.749963 2026] [proxy_fcgi:error] [pid 23482:tid 23505] [client 209.87.169.87:58174] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 12:46:02.349359 2026] [:error] [pid 23512:tid 23521] [client 209.87.169.117:55870] [client 209.87.169.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abDziqeuPtNfm7KRzWW_fAAAAUY"]
[Wed Mar 11 12:46:03.109971 2026] [proxy_fcgi:error] [pid 23512:tid 23521] [client 209.87.169.117:55870] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 13:15:49.371379 2026] [proxy_fcgi:error] [pid 53955:tid 54036] [client 74.7.230.53:53818] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 14:45:21.858984 2026] [proxy_fcgi:error] [pid 54045:tid 54062] [client 74.7.175.148:34476] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 17:22:30.632960 2026] [proxy_fcgi:error] [pid 45143:tid 45166] [client 44.222.203.106:56576] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Mar 11 17:22:30.954534 2026] [proxy_fcgi:error] [pid 23482:tid 23509] [client 44.222.203.106:56582] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Mar 12 02:47:18.617531 2026] [proxy_fcgi:error] [pid 55587:tid 55602] [client 35.93.254.2:50070] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Mar 12 02:47:19.090013 2026] [proxy_fcgi:error] [pid 55587:tid 55621] [client 35.93.254.2:50090] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Mar 12 18:25:39.724390 2026] [:error] [pid 22063:tid 22082] [client 103.65.236.149:54045] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/sftp-config.json"] [unique_id "abKUo60RUhS-MJyHWLQcTAAAAhE"]
[Thu Mar 12 18:25:39.947252 2026] [:error] [pid 22063:tid 22073] [client 103.65.236.149:54064] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.vscode/sftp.json"] [unique_id "abKUo60RUhS-MJyHWLQcTwAAAgg"]
[Thu Mar 12 22:05:51.630482 2026] [:error] [pid 8249:tid 8254] [client 52.251.58.105:51524] [client 52.251.58.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "abLIPyK5dL3-8Jdf0M17SAAAAQM"]
[Thu Mar 12 22:05:53.023733 2026] [:error] [pid 8249:tid 8265] [client 52.251.58.105:52392] [client 52.251.58.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "abLIQSK5dL3-8Jdf0M17UQAAAQ4"]
[Thu Mar 12 22:05:54.809835 2026] [:error] [pid 8249:tid 8252] [client 52.251.58.105:53014] [client 52.251.58.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "abLIQiK5dL3-8Jdf0M17WgAAAQE"]
[Thu Mar 12 22:05:55.321164 2026] [:error] [pid 11986:tid 12031] [client 52.251.58.105:49164] [client 52.251.58.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "abLIQzKqY2w-DVCrxTAvgAAAAc0"]
[Fri Mar 13 09:50:27.798919 2026] [:error] [pid 61928:tid 61995] [client 209.87.169.138:47297] [client 209.87.169.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.138, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abNtYwod66AHekJJZipPrwAAAFI"]
[Sat Mar 14 02:02:49.005355 2026] [:error] [pid 47878:tid 47950] [client 4.204.197.4:65322] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "abRRSX8jymmmpr1jcBe1CQAAAEs"]
[Sat Mar 14 02:02:49.417496 2026] [:error] [pid 47878:tid 47943] [client 4.204.197.4:65317] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "abRRSX8jymmmpr1jcBe1CwAAAEQ"]
[Sat Mar 14 02:02:49.830701 2026] [:error] [pid 47878:tid 47962] [client 4.204.197.4:65368] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "abRRSX8jymmmpr1jcBe1DgAAAFc"]
[Sat Mar 14 02:02:50.241374 2026] [:error] [pid 47878:tid 47953] [client 4.204.197.4:63693] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "abRRSn8jymmmpr1jcBe1EAAAAE4"]
[Sat Mar 14 06:28:11.587776 2026] [:error] [pid 3913:tid 3978] [client 44.234.115.188:65348] [client 44.234.115.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 44.234.115.188, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abSPex9qvQd4GQHUp68M0wAAAFU"]
[Sat Mar 14 06:28:25.103405 2026] [:error] [pid 3913:tid 3959] [client 44.234.115.188:65439] [client 44.234.115.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 44.234.115.188, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "abSPiR9qvQd4GQHUp68M4gAAAEI"]
[Sat Mar 14 06:28:40.511910 2026] [autoindex:error] [pid 35801:tid 35820] [client 44.234.115.188:63263] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Mar 14 06:28:49.251077 2026] [autoindex:error] [pid 3913:tid 3964] [client 44.234.115.188:55506] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Mar 14 06:28:49.437688 2026] [:error] [pid 3913:tid 3977] [client 44.234.115.188:55506] [client 44.234.115.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "abSPoR9qvQd4GQHUp68NEwAAAFQ"]
[Sat Mar 14 06:28:55.159787 2026] [autoindex:error] [pid 57226:tid 57230] [client 44.234.115.188:60738] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Mar 14 06:28:55.426034 2026] [autoindex:error] [pid 57226:tid 57237] [client 44.234.115.188:60738] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Mar 14 06:28:58.178408 2026] [autoindex:error] [pid 3913:tid 3979] [client 44.234.115.188:62572] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Mar 14 06:28:58.492218 2026] [autoindex:error] [pid 3913:tid 3973] [client 44.234.115.188:62572] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Mar 14 06:52:50.788332 2026] [:error] [pid 35801:tid 35812] [client 185.137.164.15:30069] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/HEAD"] [unique_id "abSVQm8tVFelXGsqbU-88AAAAQg"]
[Sat Mar 14 11:29:36.853755 2026] [autoindex:error] [pid 3912:tid 3937] [client 44.234.115.188:50855] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Mar 14 11:29:41.140049 2026] [autoindex:error] [pid 54132:tid 54143] [client 44.234.115.188:56393] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Mar 14 11:29:43.748561 2026] [:error] [pid 54020:tid 54098] [client 44.234.115.188:60343] [client 44.234.115.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/test1.php"] [unique_id "abTWJ-PGvbvYnRe_6XkJaQAAAtQ"]
[Sat Mar 14 11:29:44.841342 2026] [:error] [pid 13222:tid 13225] [client 44.234.115.188:62155] [client 44.234.115.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/crop/cropper.php"] [unique_id "abTWKIZhXS6AqVB3-mL-CgAAAIE"]
[Sat Mar 14 11:29:46.339796 2026] [autoindex:error] [pid 13262:tid 13309] [client 44.234.115.188:63407] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 15 06:41:49.028488 2026] [:error] [pid 38536:tid 38565] [client 35.194.140.46:40360] [client 35.194.140.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "abXkLfpTEqkVJ0rBEWud7AAAAAw"]
[Sun Mar 15 16:13:19.258647 2026] [:error] [pid 45801:tid 45816] [client 104.234.53.88:26545] [client 104.234.53.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.88, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abZqH4aKHL9CTKoVzTAKawAAAc0"]
[Sun Mar 15 20:53:36.756508 2026] [:error] [pid 45974:tid 45993] [client 104.234.53.81:50197] [client 104.234.53.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.81, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abar0BWn4R6u72SegejRkwAAAhE"]
[Sun Mar 15 20:53:36.757413 2026] [:error] [pid 50986:tid 50994] [client 104.234.53.91:35837] [client 104.234.53.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.91, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abar0CknK4c779bcQqHgQQAAAUY"]
[Sun Mar 15 21:13:09.603741 2026] [:error] [pid 42570:tid 42586] [client 104.234.53.54:55449] [client 104.234.53.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.54, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abawZcIUXZJLmk_gYCMU4AAAAY0"]
[Sun Mar 15 21:32:18.443854 2026] [:error] [pid 38645:tid 38671] [client 104.234.53.78:40521] [client 104.234.53.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.78, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aba04hFPHtsDUuVrWDbODwAAANg"]
[Mon Mar 16 04:24:26.674033 2026] [:error] [pid 62428:tid 62484] [client 104.234.53.63:25093] [client 104.234.53.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.63, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abcVeqrHSRXFZx1-aIG-LAAAAE8"]
[Mon Mar 16 07:02:29.672541 2026] [:error] [pid 12768:tid 12791] [client 203.188.168.23:24129] [client 203.188.168.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.23, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abc6hYvjhfol0SJym0_AHAAAAZI"]
[Mon Mar 16 07:02:35.929316 2026] [:error] [pid 12768:tid 12789] [client 203.188.168.30:60043] [client 203.188.168.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.30, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abc6i4vjhfol0SJym0_AJwAAAZA"]
[Mon Mar 16 07:02:35.929377 2026] [:error] [pid 12768:tid 12789] [client 203.188.168.30:60043] [client 203.188.168.30] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 203.188.168.30 on wp-login.php, counter = 15"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abc6i4vjhfol0SJym0_AJwAAAZA"]
[Mon Mar 16 08:27:16.705706 2026] [:error] [pid 1411:tid 1415] [client 103.65.237.124:59746] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/sftp-config.json"] [unique_id "abdOZNrCV4sh-le3M-2gugAAAUI"]
[Mon Mar 16 13:15:27.435205 2026] [authz_core:error] [pid 62025:tid 62073] [client 165.22.235.3:43218] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Mar 16 13:15:33.372972 2026] [:error] [pid 62024:tid 62047] [client 165.22.235.3:43240] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "abeR9Yk-5rtjYvjqC_pzBwAAABI"]
[Mon Mar 16 13:15:37.377780 2026] [:error] [pid 62024:tid 62047] [client 165.22.235.3:54970] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "abeR-Yk-5rtjYvjqC_pzDwAAABI"]
[Mon Mar 16 13:15:45.840785 2026] [:error] [pid 62025:tid 62071] [client 165.22.235.3:55060] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "abeSAeimBfLmKh7zLXNJdwAAAEw"]
[Mon Mar 16 13:16:00.860308 2026] [:error] [pid 62025:tid 62060] [client 165.22.235.3:46748] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "abeSEOimBfLmKh7zLXNJiAAAAEE"]
[Mon Mar 16 13:28:55.834826 2026] [authz_core:error] [pid 9400:tid 9432] [client 64.227.70.2:55714] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Mar 16 13:29:02.180912 2026] [:error] [pid 62025:tid 62061] [client 64.227.70.2:41166] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "abeVHuimBfLmKh7zLXNOggAAAEI"]
[Mon Mar 16 13:29:06.520840 2026] [:error] [pid 62026:tid 62100] [client 64.227.70.2:41178] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "abeVIu8oW52PUIYI2O4wqgAAAI4"]
[Mon Mar 16 13:29:17.267370 2026] [:error] [pid 62024:tid 62034] [client 64.227.70.2:58798] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "abeVLYk-5rtjYvjqC_p60AAAAAU"]
[Mon Mar 16 13:29:34.067876 2026] [:error] [pid 62510:tid 62525] [client 64.227.70.2:50572] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "abeVPiE33_T9aKpoDdgeVAAAAQw"]
[Mon Mar 16 19:54:33.683441 2026] [:error] [pid 35838:tid 35855] [client 64.89.163.113:65329] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "abfveRroTe-x3JLtmo6WEgAAAA0"]
[Mon Mar 16 19:54:34.181099 2026] [:error] [pid 1871:tid 1873] [client 64.89.163.113:63723] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "abfvejinTnZ8uiUPekE6ZAAAAYA"]
[Mon Mar 16 19:54:34.701041 2026] [:error] [pid 39154:tid 39180] [client 64.89.163.113:51358] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "abfvehgq1_qjm7J1LqsibgAAAVc"]
[Mon Mar 16 19:54:35.333865 2026] [:error] [pid 35840:tid 35904] [client 64.89.163.113:64172] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "abfve0JFzfEsmtPx-M0InwAAAIc"]
[Mon Mar 16 19:54:35.881255 2026] [:error] [pid 35839:tid 35887] [client 64.89.163.113:51915] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "abfve6xyv6h8-aZrncsJLgAAAFE"]
[Tue Mar 17 04:52:04.703892 2026] [:error] [pid 45916:tid 45962] [client 8.228.82.81:51798] [client 8.228.82.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "abhtdLiS53PnClk_C9DgagAAAEA"]
[Tue Mar 17 07:56:13.218541 2026] [:error] [pid 22541:tid 22547] [client 185.223.152.144:41825] [client 185.223.152.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.144, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abiYnaS6JNY1-CTsTA8fuAAAAQE"]
[Wed Mar 18 02:20:15.626458 2026] [autoindex:error] [pid 63412:tid 63433] [client 45.151.122.139:57361] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 18 08:13:18.509820 2026] [:error] [pid 13716:tid 13738] [client 20.2.90.103:39394] [client 20.2.90.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "abnuHmWKzQVHkZkUHaRUAAAAAVQ"]
[Wed Mar 18 08:27:46.523484 2026] [autoindex:error] [pid 13716:tid 13719] [client 20.116.1.191:31836] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 08:27:46.736795 2026] [:error] [pid 13716:tid 13730] [client 20.116.1.191:31836] [client 20.116.1.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.116.1.191, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abnxgmWKzQVHkZkUHaRhNgAAAUw"]
[Wed Mar 18 08:27:52.100587 2026] [autoindex:error] [pid 13716:tid 13737] [client 20.116.1.191:32203] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 21:32:59.833652 2026] [:error] [pid 42970:tid 42984] [client 104.28.153.21:59802] [client 104.28.153.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/style.php"] [unique_id "abqpi45YFUj4vBJI0KQ-RwAAAMw"]
[Thu Mar 19 06:31:04.480579 2026] [:error] [pid 3278:tid 3305] [client 31.171.130.47:59515] [client 31.171.130.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.47, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "absnqAC2T_lM6ZgvfcQ0qgAAARg"]
[Thu Mar 19 07:50:39.016707 2026] [:error] [pid 3278:tid 3281] [client 91.99.188.0:39060] [client 91.99.188.0] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "abs6TwC2T_lM6ZgvfcQ_CAAAAQA"]
[Thu Mar 19 08:24:18.098389 2026] [:error] [pid 32226:tid 32228] [client 31.171.130.11:41589] [client 31.171.130.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.11, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abtCMrBb58lgPwqxC6qZPwAAAwA"]
[Thu Mar 19 08:35:33.568008 2026] [:error] [pid 3278:tid 3297] [client 31.171.130.3:48089] [client 31.171.130.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.3, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abtE1QC2T_lM6ZgvfcRDUAAAARA"]
[Thu Mar 19 09:50:34.987682 2026] [:error] [pid 31313:tid 31365] [client 91.99.191.72:34946] [client 91.99.191.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/"] [unique_id "abtWag9HuAbqf2tZOycX5wAAAcQ"]
[Thu Mar 19 10:55:51.938280 2026] [:error] [pid 23883:tid 23932] [client 173.239.254.106:30997] [client 173.239.254.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.106, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abtlt9Ni-EnEAH4abz2hxwAAAEM"]
[Thu Mar 19 11:29:02.362890 2026] [:error] [pid 31205:tid 31225] [client 173.239.254.93:54461] [client 173.239.254.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abttflu5gZKGrGz5P1GKPQAAAUg"]
[Thu Mar 19 11:29:02.362893 2026] [:error] [pid 23883:tid 23933] [client 173.239.254.103:53941] [client 173.239.254.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.103, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abttftNi-EnEAH4abz2mSwAAAEQ"]
[Thu Mar 19 12:01:24.867519 2026] [:error] [pid 31735:tid 31752] [client 173.239.254.90:63631] [client 173.239.254.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.90, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abt1FH-gyQbRQWJYccxUHgAAAo0"]
[Thu Mar 19 12:01:24.867523 2026] [:error] [pid 24925:tid 24942] [client 193.19.109.6:23983] [client 193.19.109.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.6, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abt1FPUZEHbnUgjEbWNevAAAAY0"]
[Thu Mar 19 12:36:48.985877 2026] [:error] [pid 24971:tid 24980] [client 173.239.254.94:32853] [client 173.239.254.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.94, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abt9YPUcWA7YXQC7dRvZ7wAAAkU"]
[Thu Mar 19 12:36:48.986147 2026] [:error] [pid 24971:tid 24977] [client 193.19.109.12:20937] [client 193.19.109.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.12, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abt9YPUcWA7YXQC7dRvZ8AAAAkI"]
[Thu Mar 19 12:54:13.501477 2026] [:error] [pid 31205:tid 31226] [client 154.16.49.101:6625] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "abuBdVu5gZKGrGz5P1GnsQAAAUk"]
[Thu Mar 19 12:54:13.994464 2026] [:error] [pid 31205:tid 31227] [client 154.16.49.101:6785] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abuBdVu5gZKGrGz5P1GnzQAAAUo"]
[Thu Mar 19 12:54:14.497599 2026] [:error] [pid 25135:tid 25137] [client 154.16.49.101:6978] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/feed/"] [unique_id "abuBdqKtE0dzgMctjFXtbQAAA0A"]
[Thu Mar 19 13:12:36.657136 2026] [:error] [pid 23882:tid 23909] [client 173.239.254.91:52029] [client 173.239.254.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.91, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abuFxLWnClbtbN12M7-ggwAAAAc"]
[Thu Mar 19 13:12:36.689439 2026] [:error] [pid 23882:tid 23908] [client 193.19.109.11:50429] [client 193.19.109.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.11, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abuFxLWnClbtbN12M7-ghAAAAAY"]
[Thu Mar 19 13:48:46.653160 2026] [:error] [pid 4267:tid 4287] [client 173.239.254.91:26029] [client 173.239.254.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.91, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abuOPsfd5BfK-xx49X7M0AAAAMg"]
[Thu Mar 19 13:48:46.653242 2026] [:error] [pid 4267:tid 4299] [client 193.19.109.12:32245] [client 193.19.109.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.12, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abuOPsfd5BfK-xx49X7M0QAAANQ"]
[Thu Mar 19 14:25:04.309943 2026] [:error] [pid 11014:tid 11035] [client 173.239.254.90:56395] [client 173.239.254.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.90, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abuWwDBVizvrAl0DfCDG9gAAAFA"]
[Thu Mar 19 14:25:04.310279 2026] [:error] [pid 11016:tid 11073] [client 193.19.109.10:22319] [client 193.19.109.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.10, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abuWwBPK94J9G19C6uXjBQAAAQA"]
[Thu Mar 19 15:01:27.700857 2026] [:error] [pid 11016:tid 11093] [client 173.239.254.110:22553] [client 173.239.254.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.110, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abufRxPK94J9G19C6uX85AAAARQ"]
[Thu Mar 19 15:01:27.701657 2026] [:error] [pid 11016:tid 11088] [client 173.239.254.87:58257] [client 173.239.254.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.87, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abufRxPK94J9G19C6uX85QAAAQ8"]
[Thu Mar 19 16:09:56.078556 2026] [:error] [pid 11016:tid 11082] [client 173.239.254.98:57387] [client 173.239.254.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.98, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abuvVBPK94J9G19C6uUtugAAAQk"]
[Thu Mar 19 16:09:56.126777 2026] [:error] [pid 11016:tid 11079] [client 173.239.254.95:54293] [client 173.239.254.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.95, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abuvVBPK94J9G19C6uUtuwAAAQY"]
[Thu Mar 19 16:53:56.405740 2026] [:error] [pid 48106:tid 48117] [client 193.19.109.6:39723] [client 193.19.109.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.6, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abu5pMVZaUGvkz29lZH5lgAAAMM"]
[Thu Mar 19 16:53:56.463820 2026] [:error] [pid 48106:tid 48137] [client 193.19.109.7:36001] [client 193.19.109.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.7, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abu5pMVZaUGvkz29lZH5lwAAANc"]
[Thu Mar 19 17:32:57.850538 2026] [:error] [pid 11110:tid 11130] [client 173.239.254.107:62445] [client 173.239.254.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.107, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abvCyQSNPqGfikw7k8KL3gAAAA8"]
[Thu Mar 19 17:32:57.860981 2026] [:error] [pid 1247:tid 1254] [client 85.8.130.3:23371] [client 85.8.130.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.3, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abvCyQ5tmeOr-yI4XNGEPAAAAcU"]
[Thu Mar 19 18:09:47.266761 2026] [:error] [pid 11015:tid 11049] [client 173.239.254.92:42587] [client 173.239.254.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.92, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abvLa_PcMwFQZAVfzLRKwAAAAIM"]
[Thu Mar 19 18:09:47.267942 2026] [:error] [pid 11015:tid 11060] [client 173.239.254.111:57313] [client 173.239.254.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.111, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abvLa_PcMwFQZAVfzLRKwQAAAI4"]
[Thu Mar 19 18:46:41.175884 2026] [:error] [pid 48106:tid 48137] [client 173.239.254.95:37359] [client 173.239.254.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.95, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abvUEcVZaUGvkz29lZEIXAAAANc"]
[Thu Mar 19 18:46:41.176579 2026] [:error] [pid 11015:tid 11069] [client 173.239.254.108:36769] [client 173.239.254.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.108, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abvUEfPcMwFQZAVfzLRUuQAAAJc"]
[Thu Mar 19 19:23:13.508674 2026] [:error] [pid 51091:tid 51122] [client 173.239.254.98:49889] [client 173.239.254.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.98, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abvcob7LZKhdJPD9CBvFTAAAAUs"]
[Thu Mar 19 19:23:13.508774 2026] [:error] [pid 51091:tid 51127] [client 173.239.254.93:22235] [client 173.239.254.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abvcob7LZKhdJPD9CBvFTQAAAVA"]
[Thu Mar 19 19:59:42.258407 2026] [:error] [pid 11015:tid 11063] [client 173.239.254.86:28355] [client 173.239.254.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.86, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abvlLvPcMwFQZAVfzLRrXQAAAJE"]
[Thu Mar 19 19:59:42.258418 2026] [:error] [pid 1247:tid 1260] [client 173.239.254.104:38089] [client 173.239.254.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.104, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abvlLg5tmeOr-yI4XNG-IgAAAcs"]
[Thu Mar 19 20:38:05.210829 2026] [:error] [pid 1285:tid 1306] [client 193.37.33.213:23363] [client 193.37.33.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.213, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abvuLVE95r3zR75X1HowCAAAAhM"]
[Thu Mar 19 20:38:05.213012 2026] [:error] [pid 1285:tid 1303] [client 173.239.254.90:27561] [client 173.239.254.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.90, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abvuLVE95r3zR75X1HowCQAAAhA"]
[Thu Mar 19 21:19:01.571480 2026] [:error] [pid 1285:tid 1289] [client 193.19.109.9:52651] [client 193.19.109.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.9, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abv3xVE95r3zR75X1Ho-1wAAAgI"]
[Thu Mar 19 21:19:01.576709 2026] [:error] [pid 11014:tid 11037] [client 173.239.254.96:20637] [client 173.239.254.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.96, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abv3xTBVizvrAl0DfCAZZgAAAFI"]
[Thu Mar 19 21:55:46.456578 2026] [:error] [pid 11015:tid 11053] [client 173.239.254.87:52467] [client 173.239.254.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.87, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abwAYvPcMwFQZAVfzLSL1AAAAIc"]
[Thu Mar 19 21:55:46.458413 2026] [:error] [pid 51091:tid 51131] [client 193.19.109.15:58421] [client 193.19.109.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.15, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abwAYr7LZKhdJPD9CBvg8gAAAVQ"]
[Thu Mar 19 22:24:26.959706 2026] [:error] [pid 1397:tid 1402] [client 20.151.141.24:33867] [client 20.151.141.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.141.24, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abwHGnptc6vBjy-kgOMmXQAAAsM"]
[Thu Mar 19 22:24:56.842416 2026] [:error] [pid 48106:tid 48132] [client 20.151.141.24:33907] [client 20.151.141.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.151.141.24, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "abwHOMVZaUGvkz29lZEgpQAAANI"]
[Thu Mar 19 22:25:19.725715 2026] [autoindex:error] [pid 1285:tid 1303] [client 20.151.141.24:33853] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 22:25:35.656358 2026] [autoindex:error] [pid 11015:tid 11046] [client 20.151.141.24:33862] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 22:25:35.861047 2026] [:error] [pid 11015:tid 11067] [client 20.151.141.24:33862] [client 20.151.141.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "abwHX_PcMwFQZAVfzLSUNgAAAJU"]
[Thu Mar 19 22:25:43.031811 2026] [autoindex:error] [pid 1285:tid 1293] [client 20.151.141.24:33911] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 22:25:43.325320 2026] [autoindex:error] [pid 1285:tid 1289] [client 20.151.141.24:33911] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 22:25:46.983158 2026] [autoindex:error] [pid 11015:tid 11058] [client 20.151.141.24:33794] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 22:25:47.199805 2026] [autoindex:error] [pid 11015:tid 11050] [client 20.151.141.24:33794] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 22:33:13.100677 2026] [:error] [pid 11015:tid 11065] [client 173.239.254.106:63235] [client 173.239.254.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.106, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abwJKfPcMwFQZAVfzLSW3wAAAJM"]
[Thu Mar 19 22:33:13.107840 2026] [:error] [pid 1247:tid 1254] [client 173.239.254.84:55071] [client 173.239.254.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.84, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abwJKQ5tmeOr-yI4XNEQAQAAAcU"]
[Thu Mar 19 23:10:20.582807 2026] [:error] [pid 1247:tid 1256] [client 173.239.254.100:31407] [client 173.239.254.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.100, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abwR3A5tmeOr-yI4XNEeCwAAAcc"]
[Thu Mar 19 23:10:20.591095 2026] [:error] [pid 1247:tid 1254] [client 173.239.254.86:26227] [client 173.239.254.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.86, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abwR3A5tmeOr-yI4XNEeDAAAAcU"]
[Thu Mar 19 23:47:22.170117 2026] [:error] [pid 1285:tid 1288] [client 193.19.109.6:55077] [client 193.19.109.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.6, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abwailE95r3zR75X1Hp1GgAAAgE"]
[Thu Mar 19 23:47:22.170251 2026] [:error] [pid 1247:tid 1250] [client 173.239.254.100:52105] [client 173.239.254.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.100, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abwaig5tmeOr-yI4XNErMgAAAcE"]
[Thu Mar 19 23:49:38.004448 2026] [autoindex:error] [pid 1247:tid 1259] [client 20.151.141.24:33939] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 23:49:44.658732 2026] [autoindex:error] [pid 1285:tid 1310] [client 20.151.141.24:33972] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 23:49:46.800290 2026] [:error] [pid 48106:tid 48123] [client 20.151.141.24:33963] [client 20.151.141.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/test1.php"] [unique_id "abwbGsVZaUGvkz29lZEnuQAAAMk"]
[Thu Mar 19 23:49:48.063544 2026] [:error] [pid 1247:tid 1270] [client 20.151.141.24:33970] [client 20.151.141.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/crop/cropper.php"] [unique_id "abwbHA5tmeOr-yI4XNEsgQAAAdU"]
[Thu Mar 19 23:49:52.207796 2026] [autoindex:error] [pid 11110:tid 11135] [client 20.151.141.24:33937] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 20 00:20:36.409481 2026] [:error] [pid 1285:tid 1308] [client 173.239.254.88:44227] [client 173.239.254.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.88, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abwiVFE95r3zR75X1HqAaAAAAhU"]
[Fri Mar 20 00:20:36.409481 2026] [:error] [pid 1285:tid 1288] [client 173.239.254.109:37343] [client 173.239.254.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.109, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abwiVFE95r3zR75X1HqAaQAAAgE"]
[Fri Mar 20 00:52:10.404257 2026] [:error] [pid 46264:tid 46291] [client 193.19.109.11:42155] [client 193.19.109.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.11, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abwpuop3TruHFmWOt5HGvAAAAAg"]
[Fri Mar 20 00:52:10.404297 2026] [:error] [pid 46264:tid 46307] [client 193.19.109.10:63629] [client 193.19.109.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.10, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "abwpuop3TruHFmWOt5HGuwAAABg"]
[Fri Mar 20 01:10:13.296310 2026] [:error] [pid 11258:tid 11275] [client 20.151.141.24:34412] [client 20.151.141.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/about.php"] [unique_id "abwt9ZPHb95f6xzHJOcMuwAAAM8"]
[Fri Mar 20 01:11:06.229655 2026] [:error] [pid 46126:tid 46252] [client 20.151.141.24:34399] [client 20.151.141.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "abwuKqQ44YePbsZz3j7LLQAAARU"]
[Fri Mar 20 02:32:12.629421 2026] [:error] [pid 46264:tid 46292] [client 20.151.141.24:33856] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cah.php"] [unique_id "abxBLIp3TruHFmWOt5EKhAAAAAk"]
[Fri Mar 20 02:32:13.626940 2026] [:error] [pid 46126:tid 46248] [client 20.151.141.24:34718] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cah.php"] [unique_id "abxBLaQ44YePbsZz3j7hlAAAARM"]
[Fri Mar 20 02:32:14.979962 2026] [:error] [pid 11258:tid 11278] [client 20.151.141.24:34739] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cah.php"] [unique_id "abxBLpPHb95f6xzHJOc5_AAAANI"]
[Fri Mar 20 02:32:18.367999 2026] [:error] [pid 46126:tid 46240] [client 20.151.141.24:33857] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cah.php"] [unique_id "abxBMqQ44YePbsZz3j7hnQAAAQ8"]
[Fri Mar 20 03:56:14.410161 2026] [autoindex:error] [pid 58127:tid 58206] [client 20.151.141.24:33880] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 20 03:56:34.930538 2026] [:error] [pid 58126:tid 58177] [client 20.151.141.24:34395] [client 20.151.141.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.141.24, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/.well-known/wp-login.php"] [unique_id "abxU8qKAmdXQSS0Y5KAx0QAAAEU"]
[Fri Mar 20 03:57:13.900525 2026] [:error] [pid 58127:tid 58206] [client 20.151.141.24:33996] [client 20.151.141.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "abxVGbQ_HbYy8C6I_EHExgAAAIc"]
[Fri Mar 20 03:57:40.327828 2026] [autoindex:error] [pid 58125:tid 58149] [client 20.151.141.24:33997] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 20 03:57:42.345288 2026] [:error] [pid 58126:tid 58177] [client 20.151.141.24:33984] [client 20.151.141.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/admin.php"] [unique_id "abxVNqKAmdXQSS0Y5KAykwAAAEU"]
[Fri Mar 20 03:57:57.299025 2026] [:error] [pid 58127:tid 58220] [client 20.151.141.24:60467] [client 20.151.141.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.141.24, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "abxVRbQ_HbYy8C6I_EHFEQAAAJU"]
[Fri Mar 20 05:19:16.465717 2026] [:error] [pid 58127:tid 58218] [client 20.151.141.24:34495] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "abxoVLQ_HbYy8C6I_EHvSAAAAJM"]
[Fri Mar 20 05:19:18.196634 2026] [:error] [pid 58230:tid 58251] [client 20.151.141.24:59722] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "abxoVveBObYxbmHTzfrAmQAAANI"]
[Fri Mar 20 05:19:19.842031 2026] [:error] [pid 43163:tid 43179] [client 20.151.141.24:59714] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "abxoV5_n4JP_ko9XUszwPgAAAQw"]
[Fri Mar 20 05:19:22.355829 2026] [:error] [pid 43163:tid 43177] [client 20.151.141.24:34460] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "abxoWp_n4JP_ko9XUszwQwAAAQo"]
[Fri Mar 20 06:43:26.949280 2026] [:error] [pid 55299:tid 55316] [client 20.151.141.24:33978] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/classsmtps.php"] [unique_id "abx8DvoGhbNgkNIkZwl1FwAAAgs"]
[Fri Mar 20 06:43:30.312117 2026] [:error] [pid 55301:tid 55401] [client 20.151.141.24:60512] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/classsmtps.php"] [unique_id "abx8EsKP1x4sgmjd3xRaaQAAApY"]
[Fri Mar 20 06:43:33.541392 2026] [:error] [pid 55301:tid 55383] [client 20.151.141.24:60515] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/classsmtps.php"] [unique_id "abx8FcKP1x4sgmjd3xRaeQAAAo4"]
[Fri Mar 20 06:43:36.198322 2026] [:error] [pid 55299:tid 55323] [client 20.151.141.24:60348] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/classsmtps.php"] [unique_id "abx8GPoGhbNgkNIkZwl1IwAAAhI"]
[Fri Mar 20 20:13:30.625932 2026] [:error] [pid 49080:tid 49090] [client 216.24.212.46:54987] [client 216.24.212.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.212.46, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ab056ok5CHi4V0A3ttgF4QAAAEQ"]
[Sun Mar 22 19:29:48.562373 2026] [:error] [pid 51361:tid 51374] [client 20.203.162.101:24833] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ab_SrBXYUsdvKC9YWpXXswAAAAM"]
[Sun Mar 22 19:29:52.549333 2026] [:error] [pid 51468:tid 51485] [client 20.203.162.101:53940] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ab_SsE2TppSvA8W5CBRGBAAAAMk"]
[Sun Mar 22 19:29:57.254261 2026] [:error] [pid 40039:tid 40045] [client 20.203.162.101:57684] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ab_StR3aDgUJfBYishmocAAAAQQ"]
[Sun Mar 22 19:30:00.155757 2026] [:error] [pid 51363:tid 51440] [client 20.203.162.101:51601] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ab_SuFwa9x6OCTRkhl2aBwAAAIs"]
[Sun Mar 22 21:32:16.402246 2026] [:error] [pid 51468:tid 51491] [client 52.139.36.109:11399] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wk/index.php"] [unique_id "ab_vYE2TppSvA8W5CBR1fAAAAM8"]
[Sun Mar 22 21:32:17.232455 2026] [:error] [pid 51468:tid 51478] [client 52.139.36.109:11409] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wk/index.php"] [unique_id "ab_vYU2TppSvA8W5CBR1fgAAAMI"]
[Sun Mar 22 21:32:18.068786 2026] [:error] [pid 51362:tid 51405] [client 52.139.36.109:11946] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wk/index.php"] [unique_id "ab_vYsOwPm3DXzTDjUfd3AAAAEQ"]
[Sun Mar 22 21:32:18.892979 2026] [:error] [pid 51468:tid 51485] [client 52.139.36.109:11947] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wk/index.php"] [unique_id "ab_vYk2TppSvA8W5CBR1hQAAAMk"]
[Mon Mar 23 06:24:40.360347 2026] [authz_core:error] [pid 23440:tid 23487] [client 159.65.144.72:42380] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Mar 23 06:24:46.236510 2026] [:error] [pid 57265:tid 57268] [client 159.65.144.72:52458] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "acBsLmNLjPJJkhuqCsi-ugAAAQE"]
[Mon Mar 23 06:24:50.258880 2026] [:error] [pid 14573:tid 14576] [client 159.65.144.72:52472] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "acBsMu-oSmHn3q4_J1HBEAAAAUE"]
[Mon Mar 23 06:25:00.162858 2026] [:error] [pid 14573:tid 14583] [client 159.65.144.72:33458] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "acBsPO-oSmHn3q4_J1HBIAAAAUg"]
[Mon Mar 23 06:25:15.802742 2026] [:error] [pid 23439:tid 23455] [client 159.65.144.72:58518] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "acBsS6Zv8XIzUKdgaMdDBwAAAAY"]
[Mon Mar 23 10:14:17.025668 2026] [authz_core:error] [pid 57265:tid 57288] [client 64.225.75.246:52862] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Mar 23 10:14:22.874559 2026] [:error] [pid 57265:tid 57284] [client 64.225.75.246:52910] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "acCh_mNLjPJJkhuqCsgYTQAAARE"]
[Mon Mar 23 10:14:26.913410 2026] [:error] [pid 23439:tid 23459] [client 64.225.75.246:41872] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "acCiAqZv8XIzUKdgaMdZsgAAAAo"]
[Mon Mar 23 10:14:36.882641 2026] [:error] [pid 35165:tid 35191] [client 64.225.75.246:50928] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "acCiDM6udpN6Esk7JKsGWQAAAZc"]
[Mon Mar 23 10:14:52.023815 2026] [:error] [pid 35165:tid 35174] [client 64.225.75.246:57610] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "acCiHM6udpN6Esk7JKsGbAAAAYY"]
[Mon Mar 23 11:59:18.771698 2026] [authz_core:error] [pid 35165:tid 35179] [client 167.71.175.236:46592] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Mar 23 11:59:24.763759 2026] [:error] [pid 23439:tid 23450] [client 167.71.175.236:48958] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "acC6nKZv8XIzUKdgaMdm6gAAAAE"]
[Mon Mar 23 11:59:28.760819 2026] [:error] [pid 35165:tid 35186] [client 167.71.175.236:48974] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "acC6oM6udpN6Esk7JKs0RwAAAZI"]
[Mon Mar 23 11:59:38.957193 2026] [:error] [pid 35165:tid 35177] [client 167.71.175.236:59898] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "acC6qs6udpN6Esk7JKs0UgAAAYk"]
[Mon Mar 23 11:59:54.286852 2026] [:error] [pid 35165:tid 35181] [client 167.71.175.236:41820] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "acC6us6udpN6Esk7JKs0iAAAAY0"]
[Mon Mar 23 17:54:49.126409 2026] [autoindex:error] [pid 14573:tid 14577] [client 20.102.82.167:2065] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 17:54:49.349624 2026] [:error] [pid 14573:tid 14590] [client 20.102.82.167:2065] [client 20.102.82.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.102.82.167, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acEN6e-oSmHn3q4_J1G1-gAAAU8"]
[Mon Mar 23 17:54:51.723254 2026] [autoindex:error] [pid 14573:tid 14595] [client 20.102.82.167:2059] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 17:54:55.277145 2026] [autoindex:error] [pid 57265:tid 57287] [client 20.102.82.167:2897] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 17:54:56.637136 2026] [autoindex:error] [pid 35165:tid 35174] [client 20.102.82.167:2073] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 17:55:04.466122 2026] [:error] [pid 14573:tid 14580] [client 20.102.82.167:2093] [client 20.102.82.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acEN-O-oSmHn3q4_J1G2IwAAAUU"]
[Mon Mar 23 17:55:06.503295 2026] [autoindex:error] [pid 57265:tid 57285] [client 20.102.82.167:2058] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 17:55:12.238824 2026] [:error] [pid 23441:tid 23526] [client 20.102.82.167:2097] [client 20.102.82.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/index.php"] [unique_id "acEOABq7S-oOqSXZEr7WTAAAAJc"]
[Mon Mar 23 17:55:13.101282 2026] [autoindex:error] [pid 57265:tid 57270] [client 20.102.82.167:2061] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 17:55:14.556353 2026] [autoindex:error] [pid 23539:tid 23562] [client 20.102.82.167:2092] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/block/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 17:55:15.905349 2026] [:error] [pid 23439:tid 23451] [client 20.102.82.167:2100] [client 20.102.82.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "acEOA6Zv8XIzUKdgaMeN5gAAAAI"]
[Mon Mar 23 17:55:24.846738 2026] [:error] [pid 35165:tid 35179] [client 20.102.82.167:2091] [client 20.102.82.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/index.php"] [unique_id "acEODM6udpN6Esk7JKutcQAAAYs"]
[Mon Mar 23 17:55:26.980503 2026] [autoindex:error] [pid 23441:tid 23524] [client 20.102.82.167:2052] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 17:55:29.888672 2026] [autoindex:error] [pid 14573:tid 14594] [client 20.102.82.167:2051] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 18:32:15.947195 2026] [:error] [pid 57265:tid 57270] [client 4.204.193.107:27161] [client 4.204.193.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.204.193.107, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acEWr2NLjPJJkhuqCshB2AAAAQM"]
[Tue Mar 24 09:02:45.247419 2026] [:error] [pid 3137:tid 3140] [client 185.223.152.133:41871] [client 185.223.152.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.133, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acHitZdZesutm6dfYM9XhgAAAME"]
[Tue Mar 24 17:31:41.077828 2026] [:error] [pid 3030:tid 3072] [client 216.81.245.214:42018] [client 216.81.245.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "acJZ_QyOuILyynfcqflKmAAAABc"]
[Tue Mar 24 18:06:22.358580 2026] [:error] [pid 3137:tid 3146] [client 217.64.126.69:51712] [client 217.64.126.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.64.126.69, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acJiHpdZesutm6dfYM8FagAAAMc"]
[Tue Mar 24 23:48:16.027536 2026] [:error] [pid 48214:tid 48252] [client 103.177.150.13:52154] [client 103.177.150.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.177.150.13, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acKyQLeshLWZ3uUDHKmNowAAAcA"]
[Tue Mar 24 23:48:16.032099 2026] [:error] [pid 3032:tid 3110] [client 103.177.150.13:52153] [client 103.177.150.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.177.150.13, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acKyQCa_-JXXD03-JNxvtwAAAIc"]
[Wed Mar 25 01:03:47.338868 2026] [:error] [pid 58154:tid 58171] [client 217.64.126.153:62254] [client 217.64.126.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.64.126.153, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acLD8w0pGUh6bwD3ouKLQwAAAM4"]
[Wed Mar 25 01:03:47.338937 2026] [:error] [pid 58154:tid 58163] [client 217.64.126.153:62246] [client 217.64.126.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.64.126.153, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acLD8w0pGUh6bwD3ouKLQgAAAMY"]
[Wed Mar 25 02:01:51.558919 2026] [autoindex:error] [pid 57711:tid 58080] [client 20.17.162.123:49566] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 25 02:14:17.176126 2026] [:error] [pid 57711:tid 58064] [client 156.59.26.158:63129] [client 156.59.26.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.59.26.158, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acLUeaLdPFdeRRktTdNpEAAAAIs"]
[Wed Mar 25 02:14:17.177043 2026] [:error] [pid 20371:tid 20374] [client 156.59.26.158:63130] [client 156.59.26.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.59.26.158, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acLUeeb25OL4yTv2fF-koAAAAQE"]
[Wed Mar 25 03:24:51.086324 2026] [:error] [pid 62553:tid 62559] [client 217.64.126.101:57118] [client 217.64.126.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.64.126.101, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acLlA34kQqQ2ArQuHmVN2wAAAMQ"]
[Wed Mar 25 03:24:51.086380 2026] [:error] [pid 62553:tid 62562] [client 217.64.126.101:57119] [client 217.64.126.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.64.126.101, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acLlA34kQqQ2ArQuHmVN2gAAAMc"]
[Wed Mar 25 04:47:09.043999 2026] [:error] [pid 892:tid 920] [client 46.101.133.154:58757] [client 46.101.133.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.133.154, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acL4TST_G8WMU3T3yxoXZwAAANU"]
[Wed Mar 25 04:47:09.045856 2026] [:error] [pid 892:tid 906] [client 46.101.133.154:58756] [client 46.101.133.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.133.154, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acL4TST_G8WMU3T3yxoXaAAAAMg"]
[Wed Mar 25 05:34:33.124597 2026] [:error] [pid 47946:tid 47960] [client 148.72.173.218:52710] [client 148.72.173.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.72.173.218, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acMDaTipQTqBMSeKYhfpuQAAAQw"]
[Wed Mar 25 05:34:33.124682 2026] [:error] [pid 47946:tid 47960] [client 148.72.173.218:52710] [client 148.72.173.218] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 148.72.173.218 on wp-login.php, counter = 68"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acMDaTipQTqBMSeKYhfpuQAAAQw"]
[Wed Mar 25 06:02:26.528906 2026] [:error] [pid 755:tid 818] [client 23.90.188.179:63612] [client 23.90.188.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.90.188.179, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acMJ8qS6bdaeEwgCGwo5LgAAAEU"]
[Wed Mar 25 06:02:26.532776 2026] [:error] [pid 47989:tid 48001] [client 23.90.188.179:63611] [client 23.90.188.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.90.188.179, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acMJ8iWKdJMhIccROjlxVwAAAUo"]
[Wed Mar 25 07:19:37.521992 2026] [:error] [pid 755:tid 840] [client 31.171.130.105:53893] [client 31.171.130.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.105, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acMcCaS6bdaeEwgCGwpHawAAAFE"]
[Wed Mar 25 07:23:26.538167 2026] [:error] [pid 756:tid 852] [client 64.31.27.55:60227] [client 64.31.27.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.31.27.55, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acMc7jOaW6oylMIDBCS50AAAAII"]
[Wed Mar 25 07:23:26.539326 2026] [:error] [pid 756:tid 860] [client 64.31.27.55:60225] [client 64.31.27.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.31.27.55, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acMc7jOaW6oylMIDBCS50QAAAIg"]
[Wed Mar 25 08:37:24.157030 2026] [:error] [pid 892:tid 904] [client 38.246.33.214:60553] [client 38.246.33.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.214, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acMuRCT_G8WMU3T3yxpZmAAAAMY"]
[Wed Mar 25 08:37:24.281517 2026] [:error] [pid 892:tid 909] [client 38.246.33.214:60554] [client 38.246.33.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.214, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acMuRCT_G8WMU3T3yxpZmQAAAMs"]
[Wed Mar 25 09:13:15.442748 2026] [:error] [pid 47946:tid 47949] [client 31.171.130.104:46649] [client 31.171.130.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.104, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acM2qzipQTqBMSeKYhc1cQAAAQE"]
[Wed Mar 25 09:13:15.456069 2026] [:error] [pid 47946:tid 47960] [client 31.171.130.97:56299] [client 31.171.130.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.97, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acM2qzipQTqBMSeKYhc1cgAAAQw"]
[Wed Mar 25 09:26:51.406109 2026] [:error] [pid 26449:tid 26454] [client 31.171.130.93:38227] [client 31.171.130.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acM529pZ2T15NDqzAjHX6wAAAkE"]
[Wed Mar 25 09:26:51.444279 2026] [:error] [pid 26449:tid 26465] [client 31.171.130.58:46051] [client 31.171.130.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.58, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acM529pZ2T15NDqzAjHX7AAAAkw"]
[Wed Mar 25 09:40:19.487781 2026] [:error] [pid 892:tid 904] [client 31.171.130.81:24449] [client 31.171.130.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.81, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acM9AyT_G8WMU3T3yxplpAAAAMY"]
[Wed Mar 25 09:40:19.647420 2026] [:error] [pid 26321:tid 26350] [client 31.171.130.100:27793] [client 31.171.130.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.100, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acM9A_KO65qqGZCSPZrEcgAAAgk"]
[Wed Mar 25 09:50:23.527364 2026] [:error] [pid 47946:tid 47949] [client 217.64.126.41:64919] [client 217.64.126.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.64.126.41, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acM_XzipQTqBMSeKYhc_NAAAAQE"]
[Wed Mar 25 09:50:23.527791 2026] [:error] [pid 26449:tid 26461] [client 217.64.126.41:64918] [client 217.64.126.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.64.126.41, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acM_X9pZ2T15NDqzAjHkkQAAAkg"]
[Wed Mar 25 09:57:20.021533 2026] [:error] [pid 26449:tid 26475] [client 31.171.130.74:24467] [client 31.171.130.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.74, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acNBANpZ2T15NDqzAjHqzAAAAlY"]
[Wed Mar 25 09:57:20.049640 2026] [:error] [pid 892:tid 907] [client 31.171.130.101:31803] [client 31.171.130.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.101, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acNBACT_G8WMU3T3yxppyQAAAMk"]
[Wed Mar 25 10:30:25.126569 2026] [:error] [pid 26449:tid 26473] [client 31.171.130.60:54237] [client 31.171.130.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.60, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acNIwdpZ2T15NDqzAjH_UQAAAlQ"]
[Wed Mar 25 10:30:25.126527 2026] [:error] [pid 26449:tid 26472] [client 31.171.130.61:39825] [client 31.171.130.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.61, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acNIwdpZ2T15NDqzAjH_UgAAAlM"]
[Wed Mar 25 11:01:13.099627 2026] [:error] [pid 26449:tid 26455] [client 38.246.32.24:51681] [client 38.246.32.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.24, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acNP-dpZ2T15NDqzAjERvgAAAkI"]
[Wed Mar 25 11:01:13.105784 2026] [:error] [pid 26449:tid 26469] [client 38.246.32.24:51682] [client 38.246.32.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.24, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acNP-dpZ2T15NDqzAjERvwAAAlA"]
[Wed Mar 25 11:19:30.422977 2026] [:error] [pid 47989:tid 48014] [client 31.171.130.82:58809] [client 31.171.130.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.82, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acNUQiWKdJMhIccROjn8KgAAAVc"]
[Wed Mar 25 11:19:30.429195 2026] [:error] [pid 47989:tid 47994] [client 31.171.130.102:34575] [client 31.171.130.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.102, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acNUQiWKdJMhIccROjn8LAAAAUM"]
[Wed Mar 25 12:15:20.205059 2026] [:error] [pid 26449:tid 26468] [client 217.64.126.131:60194] [client 217.64.126.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.64.126.131, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acNhWNpZ2T15NDqzAjEwuwAAAk8"]
[Wed Mar 25 12:15:20.205758 2026] [:error] [pid 25969:tid 26041] [client 217.64.126.131:60195] [client 217.64.126.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.64.126.131, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acNhWBd3aEUmOfdKja_WUgAAA88"]
[Wed Mar 25 13:33:40.241447 2026] [:error] [pid 26321:tid 26342] [client 64.31.27.54:59179] [client 64.31.27.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.31.27.54, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acNztPKO65qqGZCSPZr3DQAAAgM"]
[Wed Mar 25 13:33:40.252762 2026] [:error] [pid 892:tid 909] [client 64.31.27.54:59178] [client 64.31.27.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.31.27.54, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acNztCT_G8WMU3T3yxqjFAAAAMs"]
[Wed Mar 25 14:52:00.751738 2026] [:error] [pid 25969:tid 26030] [client 104.238.151.192:60935] [client 104.238.151.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.238.151.192, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acOGEBd3aEUmOfdKja_qwgAAA8Q"]
[Wed Mar 25 14:52:00.752519 2026] [:error] [pid 26449:tid 26453] [client 104.238.151.192:60937] [client 104.238.151.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.238.151.192, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acOGENpZ2T15NDqzAjFNhgAAAkA"]
[Wed Mar 25 16:04:23.334156 2026] [:error] [pid 25875:tid 25896] [client 198.13.47.69:54620] [client 198.13.47.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.13.47.69, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acOXBxJ38QkS3Nyfshy4FwAAAo8"]
[Wed Mar 25 16:04:23.334408 2026] [:error] [pid 756:tid 858] [client 198.13.47.69:54619] [client 198.13.47.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.13.47.69, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acOXBzOaW6oylMIDBCQRaQAAAIY"]
[Wed Mar 25 17:20:17.579932 2026] [:error] [pid 25967:tid 25985] [client 103.177.150.13:51843] [client 103.177.150.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.177.150.13, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acOo0fg8Qtq7ZM4mSFkewgAAA00"]
[Wed Mar 25 17:20:17.579932 2026] [:error] [pid 25967:tid 25994] [client 103.177.150.13:51776] [client 103.177.150.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.177.150.13, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acOo0fg8Qtq7ZM4mSFkewQAAA1Y"]
[Wed Mar 25 18:43:51.160935 2026] [:error] [pid 25967:tid 25992] [client 146.70.89.152:50574] [client 146.70.89.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.89.152, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acO8Z_g8Qtq7ZM4mSFlAzwAAA1Q"]
[Wed Mar 25 18:43:51.206095 2026] [:error] [pid 25967:tid 25987] [client 146.70.89.152:50575] [client 146.70.89.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.89.152, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acO8Z_g8Qtq7ZM4mSFlA0AAAA08"]
[Wed Mar 25 19:17:53.008173 2026] [:error] [pid 47989:tid 48001] [client 20.220.197.73:34948] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/1.php"] [unique_id "acPEYSWKdJMhIccROjnSBQAAAUo"]
[Wed Mar 25 19:17:53.830347 2026] [:error] [pid 25967:tid 25987] [client 20.220.197.73:35583] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/1.php"] [unique_id "acPEYfg8Qtq7ZM4mSFlRWAAAA08"]
[Wed Mar 25 19:17:54.656119 2026] [:error] [pid 25875:tid 25887] [client 20.220.197.73:34959] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/1.php"] [unique_id "acPEYhJ38QkS3NyfshzxTgAAAoY"]
[Wed Mar 25 19:17:55.491980 2026] [:error] [pid 26321:tid 26362] [client 20.220.197.73:35525] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/1.php"] [unique_id "acPEY_KO65qqGZCSPZpEDgAAAhU"]
[Wed Mar 25 19:59:54.513382 2026] [:error] [pid 892:tid 910] [client 103.177.150.13:61797] [client 103.177.150.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.177.150.13, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acPOOiT_G8WMU3T3yxrUxgAAAMw"]
[Wed Mar 25 19:59:54.520605 2026] [:error] [pid 26269:tid 26291] [client 103.177.150.13:61848] [client 103.177.150.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.177.150.13, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acPOOkn7e-ZQbaIs7qy7sQAAAY8"]
[Wed Mar 25 21:15:15.894259 2026] [:error] [pid 26449:tid 26465] [client 194.187.251.229:52235] [client 194.187.251.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.187.251.229, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acPf49pZ2T15NDqzAjGIzwAAAkw"]
[Wed Mar 25 21:15:15.894853 2026] [:error] [pid 26449:tid 26472] [client 194.187.251.229:52233] [client 194.187.251.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.187.251.229, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acPf49pZ2T15NDqzAjGI0AAAAlM"]
[Wed Mar 25 22:37:01.893780 2026] [:error] [pid 25875:tid 25905] [client 217.64.126.20:65249] [client 217.64.126.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.64.126.20, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acPzDRJ38QkS3NyfshxHXQAAApg"]
[Wed Mar 25 22:37:01.896751 2026] [:error] [pid 25875:tid 25901] [client 217.64.126.20:65250] [client 217.64.126.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.64.126.20, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acPzDRJ38QkS3NyfshxHXgAAApQ"]
[Wed Mar 25 23:48:57.769337 2026] [:error] [pid 25875:tid 25902] [client 193.29.107.153:55788] [client 193.29.107.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.29.107.153, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acQD6RJ38QkS3Nyfshxi0QAAApU"]
[Wed Mar 25 23:48:57.770062 2026] [:error] [pid 25967:tid 25995] [client 193.29.107.153:55786] [client 193.29.107.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.29.107.153, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acQD6fg8Qtq7ZM4mSFma9wAAA1c"]
[Thu Mar 26 01:01:53.408522 2026] [:error] [pid 55733:tid 55775] [client 162.128.181.132:55407] [client 162.128.181.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.128.181.132, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acQVAaMzUauzYCgMHcnS_gAAAJg"]
[Thu Mar 26 01:01:53.408525 2026] [:error] [pid 32829:tid 32839] [client 162.128.181.132:55406] [client 162.128.181.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.128.181.132, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acQVAXFEeazI9mYaKszOYQAAAEg"]
[Thu Mar 26 02:21:02.740220 2026] [:error] [pid 55734:tid 55837] [client 156.59.26.130:62032] [client 156.59.26.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.59.26.130, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acQnjs_x4fL7PCmNzkCKAQAAAMs"]
[Thu Mar 26 02:21:02.740335 2026] [:error] [pid 56131:tid 56147] [client 156.59.26.130:62031] [client 156.59.26.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.59.26.130, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acQnjkg5t1V4ZYPCUhw6XgAAAAg"]
[Thu Mar 26 03:40:56.874549 2026] [:error] [pid 55733:tid 55759] [client 65.20.103.40:52572] [client 65.20.103.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.20.103.40, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acQ6SKMzUauzYCgMHcn9CgAAAIw"]
[Thu Mar 26 03:40:56.882244 2026] [:error] [pid 55734:tid 55828] [client 65.20.103.40:52573] [client 65.20.103.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.20.103.40, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acQ6SM_x4fL7PCmNzkCYmwAAAMI"]
[Thu Mar 26 04:00:32.244175 2026] [:error] [pid 16505:tid 16559] [client 45.131.195.149:30635] [client 45.131.195.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.149, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acQ-4Oa38IckCrCncFkAfAAAAFM"]
[Thu Mar 26 04:59:34.197108 2026] [:error] [pid 19711:tid 19766] [client 193.29.107.134:54280] [client 193.29.107.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.29.107.134, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRMtmj3l1y81GYfluQPGwAAAFE"]
[Thu Mar 26 04:59:34.199250 2026] [:error] [pid 19711:tid 19769] [client 193.29.107.134:54279] [client 193.29.107.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.29.107.134, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRMtmj3l1y81GYfluQPHAAAAFQ"]
[Thu Mar 26 05:38:14.171594 2026] [:error] [pid 19712:tid 19792] [client 45.131.195.164:26455] [client 45.131.195.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.164, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRVxtWhKhRNqm23vFOrVgAAAJA"]
[Thu Mar 26 05:38:14.194567 2026] [:error] [pid 60829:tid 60847] [client 45.131.195.135:63057] [client 45.131.195.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.135, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRVxvTdjHKeZokybaTE0wAAARA"]
[Thu Mar 26 05:59:46.487407 2026] [:error] [pid 19818:tid 19840] [client 45.131.195.169:59385] [client 45.131.195.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.169, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRa0szaSnm3d1BeM5VRtgAAANQ"]
[Thu Mar 26 05:59:46.488027 2026] [:error] [pid 19712:tid 19786] [client 45.131.195.155:41175] [client 45.131.195.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.155, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRa0tWhKhRNqm23vFO0xQAAAIo"]
[Thu Mar 26 06:16:59.337795 2026] [:error] [pid 19818:tid 19834] [client 98.98.171.69:64118] [client 98.98.171.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.171.69, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRe28zaSnm3d1BeM5VeiwAAAM4"]
[Thu Mar 26 06:16:59.350973 2026] [:error] [pid 19818:tid 19828] [client 98.98.171.69:64117] [client 98.98.171.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.171.69, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRe28zaSnm3d1BeM5VejAAAAMg"]
[Thu Mar 26 06:21:19.461304 2026] [:error] [pid 60829:tid 60855] [client 45.131.195.175:64921] [client 45.131.195.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.175, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRf3_TdjHKeZokybaTtXQAAARg"]
[Thu Mar 26 06:21:19.461308 2026] [:error] [pid 60829:tid 60850] [client 45.131.195.116:62365] [client 45.131.195.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.116, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRf3_TdjHKeZokybaTtXAAAARM"]
[Thu Mar 26 06:42:42.426108 2026] [:error] [pid 19818:tid 19832] [client 45.131.195.154:54733] [client 45.131.195.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.154, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRk4szaSnm3d1BeM5V0FQAAAMw"]
[Thu Mar 26 06:42:42.426112 2026] [:error] [pid 19711:tid 19755] [client 45.131.195.119:39283] [client 45.131.195.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.119, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRk4mj3l1y81GYfluQzvQAAAEY"]
[Thu Mar 26 07:04:12.077062 2026] [:error] [pid 60829:tid 60842] [client 45.131.195.184:61483] [client 45.131.195.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.184, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRp7PTdjHKeZokybaQhsAAAAQs"]
[Thu Mar 26 07:04:12.077332 2026] [:error] [pid 60829:tid 60849] [client 45.131.195.136:26027] [client 45.131.195.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.136, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRp7PTdjHKeZokybaQhsQAAARI"]
[Thu Mar 26 07:12:51.902638 2026] [:error] [pid 60829:tid 60848] [client 192.3.207.218:56540] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/artisan"] [unique_id "acRr8_TdjHKeZokybaQpbgAAARE"]
[Thu Mar 26 07:12:52.373654 2026] [:error] [pid 60829:tid 60850] [client 192.3.207.218:57068] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/artisan"] [unique_id "acRr9PTdjHKeZokybaQpdAAAARM"]
[Thu Mar 26 07:12:53.638161 2026] [:error] [pid 60829:tid 60834] [client 192.3.207.218:57580] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/artisan"] [unique_id "acRr9fTdjHKeZokybaQpogAAAQM"]
[Thu Mar 26 07:12:54.066830 2026] [:error] [pid 19711:tid 19749] [client 192.3.207.218:58195] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/artisan"] [unique_id "acRr9mj3l1y81GYfluRJjQAAAEA"]
[Thu Mar 26 07:12:55.014118 2026] [:error] [pid 60829:tid 60839] [client 192.3.207.218:58538] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "acRr9_TdjHKeZokybaQp0wAAAQg"]
[Thu Mar 26 07:12:55.433880 2026] [:error] [pid 31780:tid 31823] [client 192.3.207.218:59368] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "acRr95JDwZsy5O4ZXEiUTQAAAgM"]
[Thu Mar 26 07:12:56.391111 2026] [:error] [pid 31780:tid 31820] [client 192.3.207.218:59901] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "acRr-JJDwZsy5O4ZXEiUdgAAAgA"]
[Thu Mar 26 07:12:56.812796 2026] [:error] [pid 19711:tid 19762] [client 192.3.207.218:60841] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "acRr-Gj3l1y81GYfluRJ1QAAAE0"]
[Thu Mar 26 07:25:37.466979 2026] [:error] [pid 31778:tid 31795] [client 45.131.195.135:39115] [client 45.131.195.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.135, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRu8Q3kybI2o-xasmA-BQAAAcI"]
[Thu Mar 26 07:25:37.466993 2026] [:error] [pid 31778:tid 31796] [client 45.131.195.140:62653] [client 45.131.195.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.140, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRu8Q3kybI2o-xasmA-BAAAAcM"]
[Thu Mar 26 07:30:10.850196 2026] [:error] [pid 60829:tid 60845] [client 64.31.27.152:63474] [client 64.31.27.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.31.27.152, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRwAvTdjHKeZokybaQuhQAAAQ4"]
[Thu Mar 26 07:30:10.864105 2026] [:error] [pid 31670:tid 31695] [client 64.31.27.152:63473] [client 64.31.27.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.31.27.152, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRwAjXVthXxCnWjOTQ8wQAAAVc"]
[Thu Mar 26 07:46:58.635376 2026] [:error] [pid 31778:tid 31810] [client 45.131.195.197:26699] [client 45.131.195.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.197, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRz8g3kybI2o-xasmBF7AAAAdE"]
[Thu Mar 26 07:46:58.635376 2026] [:error] [pid 60829:tid 60839] [client 45.131.195.164:31511] [client 45.131.195.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.164, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acRz8vTdjHKeZokybaQzZgAAAQg"]
[Thu Mar 26 08:08:27.510659 2026] [:error] [pid 31780:tid 31838] [client 45.131.195.145:41167] [client 45.131.195.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.145, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acR4-5JDwZsy5O4ZXEi5OAAAAhE"]
[Thu Mar 26 08:08:27.510844 2026] [:error] [pid 31780:tid 31830] [client 45.131.195.197:58859] [client 45.131.195.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.197, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acR4-5JDwZsy5O4ZXEi5OQAAAgk"]
[Thu Mar 26 08:30:01.513645 2026] [:error] [pid 31670:tid 31691] [client 45.131.195.156:43889] [client 45.131.195.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.156, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acR-CTXVthXxCnWjOTRaVgAAAVM"]
[Thu Mar 26 08:30:01.514075 2026] [:error] [pid 31670:tid 31674] [client 45.131.195.156:52563] [client 45.131.195.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.156, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acR-CTXVthXxCnWjOTRaVwAAAUI"]
[Thu Mar 26 08:43:54.082171 2026] [:error] [pid 31717:tid 31725] [client 135.136.0.234:50419] [client 135.136.0.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.136.0.234, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSBSr-SCF7YDISDX4-A4wAAAYM"]
[Thu Mar 26 08:43:54.083150 2026] [:error] [pid 31778:tid 31816] [client 135.136.0.234:50420] [client 135.136.0.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.136.0.234, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSBSg3kybI2o-xasmBaeAAAAdc"]
[Thu Mar 26 08:52:03.761506 2026] [:error] [pid 19712:tid 19784] [client 45.131.195.165:29047] [client 45.131.195.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.165, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSDM9WhKhRNqm23vFPmzwAAAIg"]
[Thu Mar 26 08:52:03.761568 2026] [:error] [pid 31670:tid 31695] [client 45.131.195.130:22931] [client 45.131.195.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.130, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSDMzXVthXxCnWjOTRqRwAAAVc"]
[Thu Mar 26 09:14:21.521631 2026] [:error] [pid 31717:tid 31743] [client 45.131.195.251:64403] [client 45.131.195.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.251, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSIbb-SCF7YDISDX4-GugAAAZU"]
[Thu Mar 26 09:14:22.034567 2026] [:error] [pid 31670:tid 31674] [client 45.131.195.119:62101] [client 45.131.195.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.119, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSIbjXVthXxCnWjOTR2NgAAAUI"]
[Thu Mar 26 09:36:33.799808 2026] [:error] [pid 60829:tid 60842] [client 45.131.195.186:55851] [client 45.131.195.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.186, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSNofTdjHKeZokybaROiAAAAQs"]
[Thu Mar 26 09:36:34.068793 2026] [:error] [pid 60829:tid 60839] [client 45.131.195.175:44705] [client 45.131.195.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.175, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSNovTdjHKeZokybaROigAAAQg"]
[Thu Mar 26 09:59:02.217454 2026] [:error] [pid 31778:tid 31806] [client 45.131.195.126:24657] [client 45.131.195.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.126, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSS5g3kybI2o-xasmBw_QAAAc0"]
[Thu Mar 26 09:59:02.480681 2026] [:error] [pid 31670:tid 31676] [client 45.131.195.251:52111] [client 45.131.195.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.251, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSS5jXVthXxCnWjOTSLcAAAAUQ"]
[Thu Mar 26 10:00:12.027450 2026] [:error] [pid 19818:tid 19823] [client 165.22.238.38:55799] [client 165.22.238.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.238.38, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSTLMzaSnm3d1BeM5XGkAAAAMM"]
[Thu Mar 26 10:21:42.365215 2026] [:error] [pid 19818:tid 19822] [client 45.131.195.121:27937] [client 45.131.195.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.121, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSYNszaSnm3d1BeM5XUygAAAMI"]
[Thu Mar 26 10:21:42.365357 2026] [:error] [pid 19818:tid 19821] [client 45.131.195.161:38597] [client 45.131.195.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.161, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSYNszaSnm3d1BeM5XUywAAAME"]
[Thu Mar 26 10:44:40.602862 2026] [:error] [pid 31670:tid 31695] [client 45.131.195.204:37269] [client 45.131.195.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.204, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSdmDXVthXxCnWjOTSe1AAAAVc"]
[Thu Mar 26 10:44:40.603034 2026] [:error] [pid 31670:tid 31691] [client 45.131.195.161:45173] [client 45.131.195.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.161, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSdmDXVthXxCnWjOTSe1QAAAVM"]
[Thu Mar 26 11:08:06.758059 2026] [:error] [pid 31717:tid 31727] [client 45.131.195.159:38477] [client 45.131.195.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.159, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSjFr-SCF7YDISDX4-aAgAAAYU"]
[Thu Mar 26 11:08:06.758285 2026] [:error] [pid 19712:tid 19777] [client 45.131.195.116:42049] [client 45.131.195.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.116, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSjFtWhKhRNqm23vFPzMQAAAIE"]
[Thu Mar 26 11:13:35.934843 2026] [:error] [pid 19710:tid 19739] [client 104.166.189.246:62139] [client 104.166.189.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.166.189.246, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSkXwVEWP8Ar68Njk7F8gAAABE"]
[Thu Mar 26 11:13:35.943543 2026] [:error] [pid 31717:tid 31741] [client 104.166.189.246:62140] [client 104.166.189.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.166.189.246, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSkX7-SCF7YDISDX4-atgAAAZM"]
[Thu Mar 26 11:31:36.276563 2026] [:error] [pid 31670:tid 31680] [client 45.131.195.176:57541] [client 45.131.195.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.176, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSomDXVthXxCnWjOTS1mQAAAUg"]
[Thu Mar 26 11:31:36.915498 2026] [:error] [pid 31778:tid 31812] [client 45.131.195.140:25303] [client 45.131.195.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.140, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSomA3kybI2o-xasmCKvwAAAdM"]
[Thu Mar 26 11:55:56.613835 2026] [:error] [pid 31778:tid 31817] [client 45.131.195.171:38237] [client 45.131.195.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.171, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSuTA3kybI2o-xasmCQ8gAAAdg"]
[Thu Mar 26 11:55:56.614670 2026] [:error] [pid 19818:tid 19838] [client 45.131.195.139:25633] [client 45.131.195.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.139, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acSuTMzaSnm3d1BeM5URFwAAANI"]
[Thu Mar 26 12:21:09.425460 2026] [:error] [pid 31670:tid 31680] [client 45.131.195.154:60939] [client 45.131.195.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.154, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acS0NTXVthXxCnWjOTTLlAAAAUg"]
[Thu Mar 26 12:21:10.071589 2026] [:error] [pid 31670:tid 31696] [client 45.131.195.176:25045] [client 45.131.195.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.176, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acS0NjXVthXxCnWjOTTLlgAAAVg"]
[Thu Mar 26 12:25:48.020036 2026] [:error] [pid 19711:tid 19763] [client 217.64.126.100:63818] [client 217.64.126.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.64.126.100, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acS1TGj3l1y81GYfluRpowAAAE4"]
[Thu Mar 26 12:25:48.020568 2026] [:error] [pid 31670:tid 31686] [client 217.64.126.100:63817] [client 217.64.126.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.64.126.100, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acS1TDXVthXxCnWjOTTODAAAAU4"]
[Thu Mar 26 12:46:39.406535 2026] [:error] [pid 19818:tid 19833] [client 45.131.195.159:47171] [client 45.131.195.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.159, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acS6L8zaSnm3d1BeM5UzwgAAAM0"]
[Thu Mar 26 12:46:39.406582 2026] [:error] [pid 19818:tid 19823] [client 45.131.195.155:64391] [client 45.131.195.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.155, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acS6L8zaSnm3d1BeM5UzwQAAAMM"]
[Thu Mar 26 13:12:33.370645 2026] [:error] [pid 31717:tid 31729] [client 45.131.195.186:33679] [client 45.131.195.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.186, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acTAQb-SCF7YDISDX4-s_QAAAYc"]
[Thu Mar 26 13:12:34.223062 2026] [:error] [pid 31717:tid 31736] [client 45.131.195.141:38349] [client 45.131.195.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.141, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acTAQr-SCF7YDISDX4-s_gAAAY4"]
[Thu Mar 26 13:44:35.972194 2026] [:error] [pid 31670:tid 31672] [client 45.131.195.170:59923] [client 45.131.195.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.170, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acTHwzXVthXxCnWjOTTyuQAAAUA"]
[Thu Mar 26 13:44:36.598644 2026] [:error] [pid 31780:tid 31825] [client 45.131.195.204:51999] [client 45.131.195.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.204, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acTHxJJDwZsy5O4ZXEg19QAAAgU"]
[Thu Mar 26 16:02:04.589988 2026] [:error] [pid 19710:tid 19723] [client 148.72.173.174:60519] [client 148.72.173.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.72.173.174, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acTn_AVEWP8Ar68Njk7pqgAAAAE"]
[Thu Mar 26 17:16:04.954646 2026] [:error] [pid 31670:tid 31695] [client 148.72.173.174:65355] [client 148.72.173.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.72.173.174, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acT5VDXVthXxCnWjOTRU_gAAAVc"]
[Thu Mar 26 17:16:04.956410 2026] [:error] [pid 31670:tid 31682] [client 148.72.173.174:65357] [client 148.72.173.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.72.173.174, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acT5VDXVthXxCnWjOTRU_wAAAUo"]
[Thu Mar 26 22:07:56.190807 2026] [:error] [pid 19710:tid 19738] [client 4.206.17.96:24726] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 24"] [hostname "southerncrosscentre.au"] [uri "/1.php"] [unique_id "acU9vAVEWP8Ar68Njk4sTwAAABA"]
[Thu Mar 26 22:07:57.022158 2026] [:error] [pid 19712:tid 19800] [client 4.206.17.96:25351] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 24"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/2024/"] [unique_id "acU9vdWhKhRNqm23vFNMTQAAAJg"]
[Thu Mar 26 22:07:57.859655 2026] [:error] [pid 31780:tid 31831] [client 4.206.17.96:24738] [client 4.206.17.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.206.17.96, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acU9vZJDwZsy5O4ZXEjLCQAAAgo"]
[Thu Mar 26 22:07:57.859761 2026] [:error] [pid 31780:tid 31831] [client 4.206.17.96:24738] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acU9vZJDwZsy5O4ZXEjLCQAAAgo"]
[Thu Mar 26 22:07:58.703431 2026] [:error] [pid 31670:tid 31681] [client 4.206.17.96:24719] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/wp-corn-sample.php"] [unique_id "acU9vjXVthXxCnWjOTTZuwAAAUk"]
[Thu Mar 26 22:07:59.539687 2026] [:error] [pid 19710:tid 19739] [client 4.206.17.96:24759] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/"] [unique_id "acU9vwVEWP8Ar68Njk4sUwAAABE"]
[Thu Mar 26 22:08:00.441555 2026] [:error] [pid 31780:tid 31840] [client 4.206.17.96:24739] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/index.php"] [unique_id "acU9wJJDwZsy5O4ZXEjLDQAAAhM"]
[Thu Mar 26 22:08:01.288821 2026] [:error] [pid 31670:tid 31688] [client 4.206.17.96:24755] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/index.php"] [unique_id "acU9wTXVthXxCnWjOTTZvQAAAVA"]
[Thu Mar 26 22:08:02.145427 2026] [:error] [pid 19818:tid 19830] [client 4.206.17.96:25347] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/server.php"] [unique_id "acU9wszaSnm3d1BeM5U8owAAAMo"]
[Thu Mar 26 22:08:02.973094 2026] [:error] [pid 19711:tid 19756] [client 4.206.17.96:25360] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/library/"] [unique_id "acU9wmj3l1y81GYfluS4hQAAAEc"]
[Thu Mar 26 22:08:03.810960 2026] [:error] [pid 31670:tid 31673] [client 4.206.17.96:24725] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/"] [unique_id "acU9wzXVthXxCnWjOTTZwgAAAUE"]
[Thu Mar 26 22:08:04.646588 2026] [:error] [pid 19711:tid 19773] [client 4.206.17.96:24761] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/wso.php"] [unique_id "acU9xGj3l1y81GYfluS4hwAAAFg"]
[Thu Mar 26 22:08:05.482395 2026] [:error] [pid 31670:tid 31680] [client 4.206.17.96:24746] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acU9xTXVthXxCnWjOTTZxQAAAUg"]
[Thu Mar 26 22:08:06.305509 2026] [:error] [pid 19712:tid 19795] [client 4.206.17.96:25355] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/wp-file.php"] [unique_id "acU9xtWhKhRNqm23vFNMVwAAAJM"]
[Thu Mar 26 22:08:07.184367 2026] [:error] [pid 31778:tid 31793] [client 4.206.17.96:24745] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/adminfuns.php"] [unique_id "acU9xw3kybI2o-xasmAkTwAAAcA"]
[Thu Mar 26 22:08:08.083132 2026] [:error] [pid 19710:tid 19741] [client 4.206.17.96:24762] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/wk/index.php"] [unique_id "acU9yAVEWP8Ar68Njk4sVwAAABM"]
[Thu Mar 26 22:08:08.907676 2026] [:error] [pid 19711:tid 19761] [client 4.206.17.96:24744] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/wp-admin.php"] [unique_id "acU9yGj3l1y81GYfluS4lwAAAEw"]
[Thu Mar 26 22:08:09.736376 2026] [:error] [pid 19710:tid 19739] [client 4.206.17.96:25362] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/admin.php"] [unique_id "acU9yQVEWP8Ar68Njk4sWQAAABE"]
[Thu Mar 26 22:08:10.561400 2026] [:error] [pid 31717:tid 31743] [client 4.206.17.96:25348] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-bindings/"] [unique_id "acU9yr-SCF7YDISDX4_8uwAAAZU"]
[Thu Mar 26 22:08:11.391561 2026] [:error] [pid 19712:tid 19789] [client 4.206.17.96:25344] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/xmrlpc.php"] [unique_id "acU9y9WhKhRNqm23vFNMXAAAAI0"]
[Thu Mar 26 22:08:12.236772 2026] [:error] [pid 60829:tid 60855] [client 4.206.17.96:24720] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acU9zPTdjHKeZokybaTbugAAARg"]
[Thu Mar 26 22:08:13.092906 2026] [:error] [pid 31780:tid 31834] [client 4.206.17.96:24729] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/file.php"] [unique_id "acU9zZJDwZsy5O4ZXEjLFQAAAg0"]
[Thu Mar 26 22:08:13.933167 2026] [:error] [pid 19710:tid 19732] [client 4.206.17.96:24593] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "acU9zQVEWP8Ar68Njk4sYQAAAAo"]
[Thu Mar 26 22:08:14.756620 2026] [:error] [pid 19712:tid 19796] [client 4.206.17.96:24709] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "southerncrosscentre.au"] [uri "/atomlib.php"] [unique_id "acU9ztWhKhRNqm23vFNMYgAAAJQ"]
[Thu Mar 26 22:08:15.583153 2026] [:error] [pid 31717:tid 31746] [client 4.206.17.96:25358] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/css/index.php"] [unique_id "acU9z7-SCF7YDISDX4_8vgAAAZg"]
[Thu Mar 26 22:08:16.420094 2026] [:error] [pid 19712:tid 19787] [client 4.206.17.96:25352] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/wp-content/et-cache/"] [unique_id "acU90NWhKhRNqm23vFNMZQAAAIs"]
[Thu Mar 26 22:08:17.253338 2026] [:error] [pid 31670:tid 31696] [client 4.206.17.96:24736] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "acU90TXVthXxCnWjOTTZzgAAAVg"]
[Thu Mar 26 22:08:18.085522 2026] [:error] [pid 31778:tid 31798] [client 4.206.17.96:24760] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "acU90g3kybI2o-xasmAkWAAAAcU"]
[Thu Mar 26 22:08:18.919755 2026] [:error] [pid 19818:tid 19833] [client 4.206.17.96:24607] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/wp-content/index.php"] [unique_id "acU90szaSnm3d1BeM5U8rgAAAM0"]
[Thu Mar 26 22:08:19.748374 2026] [:error] [pid 19711:tid 19754] [client 4.206.17.96:24710] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/index.php"] [unique_id "acU902j3l1y81GYfluS4qwAAAEU"]
[Thu Mar 26 22:08:20.595503 2026] [:error] [pid 19712:tid 19796] [client 4.206.17.96:24753] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/"] [unique_id "acU91NWhKhRNqm23vFNMbAAAAJQ"]
[Thu Mar 26 22:08:21.422947 2026] [:error] [pid 31670:tid 31694] [client 4.206.17.96:24713] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "acU91TXVthXxCnWjOTTZ0QAAAVY"]
[Thu Mar 26 22:08:22.262007 2026] [:error] [pid 19818:tid 19834] [client 4.206.17.96:24728] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/block/"] [unique_id "acU91szaSnm3d1BeM5U8swAAAM4"]
[Thu Mar 26 22:08:23.090191 2026] [:error] [pid 31778:tid 31803] [client 4.206.17.96:25356] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/as.php"] [unique_id "acU91w3kybI2o-xasmAkXgAAAco"]
[Thu Mar 26 22:08:23.924765 2026] [:error] [pid 31670:tid 31679] [client 4.206.17.96:24716] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "acU91zXVthXxCnWjOTTZ1gAAAUc"]
[Thu Mar 26 22:08:24.758802 2026] [:error] [pid 31778:tid 31797] [client 4.206.17.96:24712] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/buy.php"] [unique_id "acU92A3kybI2o-xasmAkXwAAAcQ"]
[Thu Mar 26 22:08:25.586798 2026] [:error] [pid 31778:tid 31793] [client 4.206.17.96:25403] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "acU92Q3kybI2o-xasmAkYAAAAcA"]
[Thu Mar 26 22:08:26.428760 2026] [:error] [pid 19710:tid 19731] [client 4.206.17.96:24718] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/index.php"] [unique_id "acU92gVEWP8Ar68Njk4sdQAAAAk"]
[Thu Mar 26 22:08:27.326147 2026] [:error] [pid 31778:tid 31804] [client 4.206.17.96:24705] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/about.PHP"] [unique_id "acU92w3kybI2o-xasmAkZAAAAcs"]
[Thu Mar 26 22:08:28.252294 2026] [:error] [pid 19710:tid 19727] [client 4.206.17.96:25363] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/ioxi-o.php"] [unique_id "acU93AVEWP8Ar68Njk4seAAAAAU"]
[Thu Mar 26 22:08:29.103530 2026] [:error] [pid 31670:tid 31681] [client 4.206.17.96:24717] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/index.php"] [unique_id "acU93TXVthXxCnWjOTTZ5QAAAUk"]
[Thu Mar 26 22:08:29.943072 2026] [:error] [pid 31670:tid 31675] [client 4.206.17.96:24737] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/wp-content/edit.php"] [unique_id "acU93TXVthXxCnWjOTTZ7QAAAUM"]
[Thu Mar 26 22:08:30.765372 2026] [:error] [pid 31780:tid 31843] [client 4.206.17.96:24767] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/sf.php"] [unique_id "acU93pJDwZsy5O4ZXEjLJwAAAhY"]
[Thu Mar 26 22:08:31.599345 2026] [:error] [pid 60829:tid 60854] [client 4.206.17.96:24711] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/index.php"] [unique_id "acU93_TdjHKeZokybaTbxAAAARc"]
[Thu Mar 26 22:08:32.433311 2026] [:error] [pid 19710:tid 19731] [client 4.206.17.96:25346] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/file.php"] [unique_id "acU94AVEWP8Ar68Njk4sfgAAAAk"]
[Thu Mar 26 22:08:33.271747 2026] [:error] [pid 19712:tid 19800] [client 4.206.17.96:24754] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "acU94dWhKhRNqm23vFNMcAAAAJg"]
[Thu Mar 26 22:08:34.095409 2026] [:error] [pid 31780:tid 31824] [client 4.206.17.96:25353] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/cgi-bin/"] [unique_id "acU94pJDwZsy5O4ZXEjLKwAAAgQ"]
[Thu Mar 26 22:08:34.920996 2026] [:error] [pid 19710:tid 19738] [client 4.206.17.96:24704] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/test1.php"] [unique_id "acU94gVEWP8Ar68Njk4shAAAABA"]
[Thu Mar 26 22:08:35.753709 2026] [:error] [pid 60829:tid 60851] [client 4.206.17.96:25393] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/wp-cron.php"] [unique_id "acU94_TdjHKeZokybaTbxQAAARQ"]
[Thu Mar 26 22:08:36.579732 2026] [:error] [pid 19710:tid 19746] [client 4.206.17.96:24752] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-supports/"] [unique_id "acU95AVEWP8Ar68Njk4sigAAABg"]
[Thu Mar 26 22:08:37.417771 2026] [:error] [pid 31670:tid 31681] [client 4.206.17.96:24588] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "acU95TXVthXxCnWjOTTZ_AAAAUk"]
[Thu Mar 26 22:08:38.256096 2026] [:error] [pid 19710:tid 19723] [client 4.206.17.96:24764] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/wp-content/1.php"] [unique_id "acU95gVEWP8Ar68Njk4skAAAAAE"]
[Thu Mar 26 22:08:39.087952 2026] [:error] [pid 19711:tid 19756] [client 4.206.17.96:24723] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "southerncrosscentre.au"] [uri "/images/index.php"] [unique_id "acU952j3l1y81GYfluS4wgAAAEc"]
[Fri Mar 27 01:39:15.680177 2026] [:error] [pid 62148:tid 62512] [client 185.169.4.152:57947] [client 185.169.4.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/sftp-config.json"] [unique_id "acVvQ4duik-mTruBKFVvzgAAAE8"]
[Fri Mar 27 16:03:05.578382 2026] [:error] [pid 63897:tid 63906] [client 217.216.37.54:56799] [client 217.216.37.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "acY5uWVSkmYmLu7ycYgHuAAAAQc"]
[Fri Mar 27 16:03:05.790371 2026] [:error] [pid 27749:tid 27803] [client 217.216.37.54:50496] [client 217.216.37.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "acY5ucEqyoMni2Q6_X7L8gAAAEw"]
[Fri Mar 27 16:03:06.002817 2026] [:error] [pid 4293:tid 4319] [client 217.216.37.54:57159] [client 217.216.37.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/media/system/js/core.js"] [unique_id "acY5upLjeJUC3OKtEx_c-wAAAVg"]
[Sat Mar 28 07:15:39.757879 2026] [:error] [pid 64860:tid 64915] [client 94.247.172.129:6617] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.southerncrosscentre.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.southerncrosscentre.au"] [uri "/"] [unique_id "accPmxkU3N0pg_4aEL_OUgAAAEc"]
[Sun Mar 29 21:25:39.425149 2026] [:error] [pid 32257:tid 32329] [client 20.151.111.128:42296] [client 20.151.111.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.111.128, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ackoUyE3TArOFrUtgWolSwAAAIs"]
[Sun Mar 29 21:25:49.600413 2026] [:error] [pid 32359:tid 32361] [client 20.151.111.128:52855] [client 20.151.111.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.151.111.128, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "ackoXQMb8G3UzfQP3WgqwAAAAMA"]
[Sun Mar 29 21:25:58.529877 2026] [autoindex:error] [pid 32257:tid 32321] [client 20.151.111.128:62571] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 29 21:26:03.285877 2026] [autoindex:error] [pid 23167:tid 23191] [client 20.151.111.128:57968] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 29 21:26:03.491633 2026] [:error] [pid 23167:tid 23193] [client 20.151.111.128:57968] [client 20.151.111.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "ackoaxIAHJCFaHff3_e5yAAAAdc"]
[Sun Mar 29 21:26:06.579765 2026] [autoindex:error] [pid 23167:tid 23190] [client 20.151.111.128:53614] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 29 21:26:06.789378 2026] [autoindex:error] [pid 23167:tid 23194] [client 20.151.111.128:53614] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 29 21:26:08.608860 2026] [autoindex:error] [pid 23168:tid 23198] [client 20.151.111.128:64750] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 29 21:26:08.820641 2026] [autoindex:error] [pid 23168:tid 23216] [client 20.151.111.128:64750] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 30 03:50:35.025447 2026] [:error] [pid 4040:tid 4131] [client 20.163.104.123:17532] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acmCiwxlbJV8kpOpFvY8bQAAAJc"]
[Mon Mar 30 03:50:36.357096 2026] [:error] [pid 55884:tid 55954] [client 20.163.104.123:17419] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acmCjDjuYLVkve3Vbhxg7AAAAQE"]
[Mon Mar 30 03:50:36.682483 2026] [:error] [pid 4034:tid 4083] [client 20.163.104.123:17426] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acmCjLfAq8eF_uU4gu2DjQAAAEI"]
[Mon Mar 30 03:50:38.679972 2026] [:error] [pid 55884:tid 55966] [client 20.163.104.123:17429] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acmCjjjuYLVkve3Vbhxg_QAAAQ0"]
[Mon Mar 30 06:47:06.320590 2026] [authz_core:error] [pid 4033:tid 4064] [client 134.122.28.88:41622] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Mar 30 06:47:14.046824 2026] [:error] [pid 4139:tid 4170] [client 134.122.28.88:41674] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "acmr8oYyhg47TZoaP9I2TAAAANc"]
[Mon Mar 30 06:47:18.414611 2026] [:error] [pid 4139:tid 4155] [client 134.122.28.88:52172] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "acmr9oYyhg47TZoaP9I2bQAAAMg"]
[Mon Mar 30 06:47:30.156795 2026] [:error] [pid 14110:tid 14132] [client 134.122.28.88:52306] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "acmsAuHp_fSDxBlHFX9LOgAAAVA"]
[Mon Mar 30 06:47:47.667307 2026] [:error] [pid 14110:tid 14139] [client 134.122.28.88:60536] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "acmsE-Hp_fSDxBlHFX9MggAAAVc"]
[Mon Mar 30 10:47:11.993463 2026] [authz_core:error] [pid 35250:tid 35328] [client 165.227.173.41:42206] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Mar 30 10:47:17.817074 2026] [:error] [pid 41941:tid 41956] [client 165.227.173.41:42230] [client 165.227.173.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "acnkNSB2g7BNCXGBOJN07QAAAQ0"]
[Mon Mar 30 10:47:21.927991 2026] [:error] [pid 41941:tid 41964] [client 165.227.173.41:34462] [client 165.227.173.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "acnkOSB2g7BNCXGBOJN07wAAARU"]
[Mon Mar 30 10:47:31.675297 2026] [:error] [pid 35343:tid 35359] [client 165.227.173.41:53016] [client 165.227.173.41] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "acnkQ6P5HurqmbvwN-JRuQAAAA4"]
[Mon Mar 30 10:47:53.973524 2026] [:error] [pid 35343:tid 35360] [client 165.227.173.41:35266] [client 165.227.173.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "acnkWaP5HurqmbvwN-JR-AAAAA8"]
[Mon Mar 30 11:47:19.230966 2026] [authz_core:error] [pid 35248:tid 35256] [client 165.227.173.41:56192] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Mon Mar 30 11:47:26.228612 2026] [:error] [pid 64743:tid 64768] [client 165.227.173.41:56218] [client 165.227.173.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "acnyTizmpVL6Ubzil4hc2wAAAVc"]
[Mon Mar 30 11:47:30.283788 2026] [:error] [pid 35343:tid 35348] [client 165.227.173.41:34926] [client 165.227.173.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "acnyUqP5HurqmbvwN-Jz1AAAAAM"]
[Mon Mar 30 11:47:41.159774 2026] [:error] [pid 35249:tid 35291] [client 165.227.173.41:60104] [client 165.227.173.41] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "acnyXSqCKiTq85d6rgAfGwAAAIc"]
[Mon Mar 30 11:48:00.612161 2026] [:error] [pid 35248:tid 35269] [client 165.227.173.41:37096] [client 165.227.173.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "acnycL3igMCgAQPFS_8X5wAAAE8"]
[Mon Mar 30 13:44:09.318075 2026] [:error] [pid 35248:tid 35256] [client 104.224.85.167:34666] [client 104.224.85.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/sftp-config.json"] [unique_id "acoNqb3igMCgAQPFS_9JdwAAAEI"]
[Mon Mar 30 14:21:45.869704 2026] [:error] [pid 50663:tid 50688] [client 185.198.240.158:64125] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "acoWeW28b9DKIAMEdfDddAAAAZc"]
[Mon Mar 30 23:32:13.168115 2026] [:error] [pid 60745:tid 60753] [client 20.104.195.176:19873] [client 20.104.195.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.195.176, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "acqXfSQDBn75QnHaPb9UOwAAAEQ"]
[Mon Mar 30 23:32:21.963271 2026] [:error] [pid 63557:tid 63559] [client 20.104.195.176:19536] [client 20.104.195.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.104.195.176, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "acqXha4QNVlzYgEvIjnFygAAAQA"]
[Mon Mar 30 23:32:30.824493 2026] [autoindex:error] [pid 60747:tid 60825] [client 20.104.195.176:19863] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 30 23:32:35.563762 2026] [autoindex:error] [pid 60747:tid 60826] [client 20.104.195.176:19885] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 30 23:32:35.770051 2026] [:error] [pid 60747:tid 60807] [client 20.104.195.176:19885] [client 20.104.195.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "acqXkwU3IY-cCpy_-zFN8wAAAMQ"]
[Mon Mar 30 23:32:38.825913 2026] [autoindex:error] [pid 60745:tid 60759] [client 20.104.195.176:19844] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 30 23:32:39.035738 2026] [autoindex:error] [pid 60745:tid 60756] [client 20.104.195.176:19844] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 30 23:32:40.816937 2026] [autoindex:error] [pid 63557:tid 63565] [client 20.104.195.176:19871] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 30 23:32:41.037091 2026] [autoindex:error] [pid 63557:tid 63573] [client 20.104.195.176:19871] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 31 11:08:48.497139 2026] [:error] [pid 36891:tid 36927] [client 4.204.246.56:21471] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/Text/network.php"] [unique_id "acs6wJJhiMaJUqoqfl5WnQAAAEM"]
[Tue Mar 31 11:08:48.923170 2026] [:error] [pid 6548:tid 6571] [client 4.204.246.56:21477] [client 4.204.246.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.204.246.56, incrementing brute counter"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acs6wLgIz9HgMl9YwE7edQAAAVU"]
[Tue Mar 31 11:08:54.241189 2026] [:error] [pid 36890:tid 36917] [client 4.204.246.56:21446] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/fm.php"] [unique_id "acs6xp8FASPd_uH8z7d-xwAAABY"]
[Tue Mar 31 11:09:14.968552 2026] [:error] [pid 6548:tid 6571] [client 4.204.246.56:21503] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acs62rgIz9HgMl9YwE7euwAAAVU"]
[Tue Mar 31 11:09:15.383130 2026] [:error] [pid 36890:tid 36900] [client 4.204.246.56:21412] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "acs6258FASPd_uH8z7d_UgAAAAU"]
[Tue Mar 31 11:09:15.798499 2026] [:error] [pid 6548:tid 6550] [client 4.204.246.56:21395] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "acs627gIz9HgMl9YwE7evQAAAUA"]
[Tue Mar 31 11:09:19.910374 2026] [autoindex:error] [pid 36982:tid 36999] [client 4.204.246.56:21384] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 31 11:09:20.954714 2026] [:error] [pid 41421:tid 41445] [client 4.204.246.56:21410] [client 4.204.246.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.204.246.56, incrementing brute counter"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acs64BSaDjY9kKFtUQCyigAAARU"]
[Tue Mar 31 11:09:20.954817 2026] [:error] [pid 41421:tid 41445] [client 4.204.246.56:21410] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 11"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acs64BSaDjY9kKFtUQCyigAAARU"]
[Tue Mar 31 11:09:21.373910 2026] [:error] [pid 36982:tid 36992] [client 4.204.246.56:21381] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 11"] [hostname "www.southerncrosscentre.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acs64flMmeoQKN0r_GP0mAAAAMc"]
[Tue Mar 31 11:09:21.787748 2026] [:error] [pid 36890:tid 36918] [client 4.204.246.56:21397] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 11"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acs64Z8FASPd_uH8z7d_WAAAABc"]
[Tue Mar 31 11:09:22.393800 2026] [:error] [pid 6548:tid 6551] [client 4.204.246.56:21475] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "acs64rgIz9HgMl9YwE7ezgAAAUE"]
[Tue Mar 31 11:09:23.540284 2026] [:error] [pid 36982:tid 36990] [client 4.204.246.56:21401] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 11"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "acs64_lMmeoQKN0r_GP0ngAAAMU"]
[Tue Mar 31 11:09:24.073723 2026] [:error] [pid 36982:tid 36986] [client 4.204.246.56:21482] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "acs65PlMmeoQKN0r_GP0oQAAAME"]
[Tue Mar 31 11:09:24.836405 2026] [:error] [pid 41421:tid 41431] [client 4.204.246.56:21460] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "acs65BSaDjY9kKFtUQCyjgAAAQc"]
[Tue Mar 31 11:09:27.122729 2026] [:error] [pid 6548:tid 6556] [client 4.204.246.56:21382] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 11"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acs657gIz9HgMl9YwE7e3QAAAUY"]
[Tue Mar 31 11:09:27.539926 2026] [:error] [pid 6548:tid 6573] [client 4.204.246.56:21427] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 11"] [hostname "www.southerncrosscentre.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acs657gIz9HgMl9YwE7e3wAAAVc"]
[Tue Mar 31 11:09:27.963660 2026] [:error] [pid 6548:tid 6553] [client 4.204.246.56:21387] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 11"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acs657gIz9HgMl9YwE7e4gAAAUM"]
[Tue Mar 31 11:09:28.402094 2026] [:error] [pid 6548:tid 6558] [client 4.204.246.56:21404] [client 4.204.246.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.204.246.56, incrementing brute counter"] [hostname "www.southerncrosscentre.au"] [uri "/assets/images/wp-login.php"] [unique_id "acs66LgIz9HgMl9YwE7e5QAAAUg"]
[Tue Mar 31 11:09:28.402182 2026] [:error] [pid 6548:tid 6558] [client 4.204.246.56:21404] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 12"] [hostname "www.southerncrosscentre.au"] [uri "/assets/images/wp-login.php"] [unique_id "acs66LgIz9HgMl9YwE7e5QAAAUg"]
[Tue Mar 31 11:09:28.816593 2026] [:error] [pid 36982:tid 37003] [client 4.204.246.56:21333] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 12"] [hostname "www.southerncrosscentre.au"] [uri "/css/xp.php"] [unique_id "acs66PlMmeoQKN0r_GP0qAAAANI"]
[Tue Mar 31 11:09:29.240412 2026] [:error] [pid 36891:tid 36947] [client 4.204.246.56:21484] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "acs66ZJhiMaJUqoqfl5WqwAAAFc"]
[Tue Mar 31 11:09:29.663045 2026] [:error] [pid 6548:tid 6567] [client 4.204.246.56:21493] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 12"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "acs66bgIz9HgMl9YwE7e6AAAAVE"]
[Tue Mar 31 11:09:30.088947 2026] [:error] [pid 6548:tid 6566] [client 4.204.246.56:21491] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 12"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "acs66rgIz9HgMl9YwE7e6QAAAVA"]
[Tue Mar 31 11:09:30.503009 2026] [:error] [pid 36982:tid 36991] [client 4.204.246.56:21347] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "acs66vlMmeoQKN0r_GP0swAAAMY"]
[Tue Mar 31 11:09:30.930286 2026] [:error] [pid 36982:tid 37002] [client 4.204.246.56:21406] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "acs66vlMmeoQKN0r_GP0tgAAANE"]
[Tue Mar 31 11:09:31.345068 2026] [:error] [pid 36982:tid 37005] [client 4.204.246.56:21463] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 12"] [hostname "www.southerncrosscentre.au"] [uri "/js/style.php"] [unique_id "acs66_lMmeoQKN0r_GP0twAAANQ"]
[Tue Mar 31 11:09:31.771602 2026] [:error] [pid 36982:tid 37001] [client 4.204.246.56:21343] [client 4.204.246.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.204.246.56, incrementing brute counter"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acs66_lMmeoQKN0r_GP0ugAAANA"]
[Tue Mar 31 11:09:31.771663 2026] [:error] [pid 36982:tid 37001] [client 4.204.246.56:21343] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acs66_lMmeoQKN0r_GP0ugAAANA"]
[Tue Mar 31 11:09:32.208928 2026] [:error] [pid 41421:tid 41436] [client 4.204.246.56:21348] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/lock.php"] [unique_id "acs67BSaDjY9kKFtUQCykwAAAQw"]
[Tue Mar 31 11:09:32.629615 2026] [:error] [pid 41421:tid 41434] [client 4.204.246.56:21431] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "acs67BSaDjY9kKFtUQCylQAAAQo"]
[Tue Mar 31 11:09:33.043009 2026] [:error] [pid 36892:tid 36957] [client 4.204.246.56:21456] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "acs67Uyj9S4G0ek3O4L5qAAAAIY"]
[Tue Mar 31 11:09:33.465219 2026] [:error] [pid 6548:tid 6563] [client 4.204.246.56:21345] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/dropdown.php"] [unique_id "acs67bgIz9HgMl9YwE7e6wAAAU0"]
[Tue Mar 31 11:09:33.880864 2026] [:error] [pid 36890:tid 36907] [client 4.204.246.56:21457] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "acs67Z8FASPd_uH8z7d_YwAAAAw"]
[Tue Mar 31 11:09:34.314146 2026] [:error] [pid 36982:tid 37007] [client 4.204.246.56:21434] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/readme.php"] [unique_id "acs67vlMmeoQKN0r_GP0wQAAANY"]
[Tue Mar 31 11:09:34.727311 2026] [:error] [pid 36982:tid 36995] [client 4.204.246.56:21429] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/edit.php"] [unique_id "acs67vlMmeoQKN0r_GP0xAAAAMo"]
[Tue Mar 31 11:09:35.151489 2026] [:error] [pid 36982:tid 37009] [client 4.204.246.56:21403] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acs67_lMmeoQKN0r_GP0yAAAANg"]
[Tue Mar 31 11:09:35.569508 2026] [:error] [pid 41421:tid 41442] [client 4.204.246.56:21405] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acs67xSaDjY9kKFtUQCymwAAARI"]
[Tue Mar 31 11:09:35.987988 2026] [:error] [pid 36891:tid 36946] [client 4.204.246.56:21433] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/plugins/DaoZM.php"] [unique_id "acs675JhiMaJUqoqfl5WrwAAAFY"]
[Tue Mar 31 11:09:36.405789 2026] [:error] [pid 36982:tid 36994] [client 4.204.246.56:21464] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/install.php"] [unique_id "acs68PlMmeoQKN0r_GP0ygAAAMk"]
[Tue Mar 31 11:09:36.828784 2026] [:error] [pid 41421:tid 41434] [client 4.204.246.56:21415] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Content/Type/alfa-rex.php"] [unique_id "acs68BSaDjY9kKFtUQCyoAAAAQo"]
[Tue Mar 31 11:09:37.267826 2026] [:error] [pid 36982:tid 36989] [client 4.204.246.56:21326] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/uploads/link.php"] [unique_id "acs68flMmeoQKN0r_GP0zgAAAMQ"]
[Tue Mar 31 11:09:37.683500 2026] [:error] [pid 36982:tid 37003] [client 4.204.246.56:21438] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/403.php"] [unique_id "acs68flMmeoQKN0r_GP00QAAANI"]
[Tue Mar 31 11:09:38.102091 2026] [:error] [pid 36982:tid 37009] [client 4.204.246.56:21396] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "acs68vlMmeoQKN0r_GP01QAAANg"]
[Tue Mar 31 11:09:38.544352 2026] [:error] [pid 6548:tid 6559] [client 4.204.246.56:21455] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "acs68rgIz9HgMl9YwE7e9wAAAUk"]
[Tue Mar 31 11:09:38.958335 2026] [:error] [pid 36982:tid 37007] [client 4.204.246.56:21409] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/plugin.php"] [unique_id "acs68vlMmeoQKN0r_GP02AAAANY"]
[Tue Mar 31 11:09:39.391183 2026] [:error] [pid 36982:tid 36995] [client 4.204.246.56:21430] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "acs68_lMmeoQKN0r_GP03QAAAMo"]
[Tue Mar 31 11:09:39.812290 2026] [:error] [pid 36891:tid 36932] [client 4.204.246.56:21432] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/Assets/edit.php"] [unique_id "acs685JhiMaJUqoqfl5WsgAAAEg"]
[Tue Mar 31 11:09:40.237373 2026] [:error] [pid 41421:tid 41432] [client 4.204.246.56:21314] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "acs69BSaDjY9kKFtUQCypQAAAQg"]
[Tue Mar 31 11:09:40.650308 2026] [:error] [pid 41421:tid 41436] [client 4.204.246.56:21318] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/file.php"] [unique_id "acs69BSaDjY9kKFtUQCyqQAAAQw"]
[Tue Mar 31 11:09:41.062173 2026] [:error] [pid 41421:tid 41446] [client 4.204.246.56:21380] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acs69RSaDjY9kKFtUQCyqwAAARY"]
[Tue Mar 31 11:09:41.479739 2026] [:error] [pid 36982:tid 36992] [client 4.204.246.56:21480] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acs69flMmeoQKN0r_GP06gAAAMc"]
[Tue Mar 31 11:09:41.896429 2026] [:error] [pid 36982:tid 36995] [client 4.204.246.56:21255] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/packed.php"] [unique_id "acs69flMmeoQKN0r_GP07AAAAMo"]
[Tue Mar 31 11:09:42.316034 2026] [:error] [pid 6548:tid 6555] [client 4.204.246.56:21338] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/user.php"] [unique_id "acs69rgIz9HgMl9YwE7fBwAAAUU"]
[Tue Mar 31 11:09:42.736761 2026] [:error] [pid 36890:tid 36913] [client 4.204.246.56:21331] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.204.246.56 on wp-login.php, counter = 13"] [hostname "www.southerncrosscentre.au"] [uri "/about.php"] [unique_id "acs69p8FASPd_uH8z7d_bwAAABI"]
[Tue Mar 31 11:09:43.167423 2026] [:error] [pid 36982:tid 37006] [client 4.204.246.56:21483] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "acs69_lMmeoQKN0r_GP07gAAANU"]
[Tue Mar 31 11:09:43.586682 2026] [:error] [pid 36891:tid 36947] [client 4.204.246.56:21327] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/style-engine/wp-login.php"] [unique_id "acs695JhiMaJUqoqfl5WtAAAAFc"]
[Wed Apr 01 21:25:38.308545 2026] [:error] [pid 8909:tid 8963] [client 44.252.54.35:38542] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "ac0c0jvP_a0662gDl6DYogAAANY"]
[Wed Apr 01 21:25:39.043326 2026] [:error] [pid 8909:tid 8944] [client 44.252.54.35:38578] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.local"] [unique_id "ac0c0zvP_a0662gDl6DYpgAAAMM"]
[Wed Apr 01 21:25:39.768788 2026] [:error] [pid 17856:tid 17879] [client 44.252.54.35:38608] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.production"] [unique_id "ac0c0z7Idlm5j9frhqRAMAAAAFU"]
[Wed Apr 01 21:25:40.498038 2026] [:error] [pid 8909:tid 8960] [client 44.252.54.35:38640] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.staging"] [unique_id "ac0c1DvP_a0662gDl6DYqgAAANM"]
[Wed Apr 01 21:25:41.236517 2026] [:error] [pid 62559:tid 62563] [client 44.252.54.35:38698] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.development"] [unique_id "ac0c1S7NKI8IaNKZFIenAAAAAUI"]
[Wed Apr 01 21:25:41.970276 2026] [:error] [pid 17856:tid 17870] [client 44.252.54.35:38750] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.test"] [unique_id "ac0c1T7Idlm5j9frhqRAPgAAAEw"]
[Wed Apr 01 21:25:42.696005 2026] [:error] [pid 8908:tid 8936] [client 44.252.54.35:38818] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.remote"] [unique_id "ac0c1vkmxtJXGnLdvgCTNAAAAJc"]
[Wed Apr 01 21:25:43.428035 2026] [:error] [pid 62559:tid 62584] [client 44.252.54.35:38892] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "ac0c1y7NKI8IaNKZFIenBAAAAVc"]
[Wed Apr 01 21:25:44.164806 2026] [:error] [pid 17856:tid 17875] [client 44.252.54.35:38934] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.backup"] [unique_id "ac0c2D7Idlm5j9frhqRARQAAAFE"]
[Wed Apr 01 21:25:44.892802 2026] [:error] [pid 8995:tid 9010] [client 44.252.54.35:38968] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.save"] [unique_id "ac0c2OonaBjs3qxcRefQIAAAAAw"]
[Wed Apr 01 21:25:45.625761 2026] [:error] [pid 8995:tid 8999] [client 44.252.54.35:39016] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.old"] [unique_id "ac0c2eonaBjs3qxcRefQIgAAAAE"]
[Wed Apr 01 21:25:46.357735 2026] [:error] [pid 8995:tid 9022] [client 44.252.54.35:39062] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.sample"] [unique_id "ac0c2uonaBjs3qxcRefQJwAAABg"]
[Wed Apr 01 21:25:47.082292 2026] [:error] [pid 8909:tid 8946] [client 44.252.54.35:39096] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/vendor/.env"] [unique_id "ac0c2zvP_a0662gDl6DYsAAAAMU"]
[Wed Apr 01 21:25:47.811195 2026] [:error] [pid 8995:tid 9016] [client 44.252.54.35:39136] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/lib/.env"] [unique_id "ac0c2-onaBjs3qxcRefQLAAAABI"]
[Wed Apr 01 21:25:48.550600 2026] [:error] [pid 17856:tid 17863] [client 44.252.54.35:39174] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/lab/.env"] [unique_id "ac0c3D7Idlm5j9frhqRASAAAAEU"]
[Wed Apr 01 21:25:49.287047 2026] [:error] [pid 62559:tid 62571] [client 44.252.54.35:39216] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/cronlab/.env"] [unique_id "ac0c3S7NKI8IaNKZFIenBwAAAUo"]
[Wed Apr 01 21:25:50.027126 2026] [:error] [pid 8909:tid 8959] [client 44.252.54.35:39266] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/cron/.env"] [unique_id "ac0c3jvP_a0662gDl6DYtQAAANI"]
[Wed Apr 01 21:25:50.760445 2026] [:error] [pid 8908:tid 8937] [client 44.252.54.35:39306] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/core/.env"] [unique_id "ac0c3vkmxtJXGnLdvgCTVQAAAJg"]
[Wed Apr 01 21:25:51.492086 2026] [:error] [pid 17856:tid 17879] [client 44.252.54.35:39346] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/core/app/.env"] [unique_id "ac0c3z7Idlm5j9frhqRAWAAAAFU"]
[Wed Apr 01 21:25:52.224310 2026] [:error] [pid 17856:tid 17881] [client 44.252.54.35:39380] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/core/Datavase/.env"] [unique_id "ac0c4D7Idlm5j9frhqRAYAAAAFc"]
[Wed Apr 01 21:25:52.948782 2026] [:error] [pid 8909:tid 8951] [client 44.252.54.35:39420] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/database/.env"] [unique_id "ac0c4DvP_a0662gDl6DYuwAAAMo"]
[Wed Apr 01 21:25:53.678153 2026] [:error] [pid 8909:tid 8960] [client 44.252.54.35:39456] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/config/.env"] [unique_id "ac0c4TvP_a0662gDl6DYwwAAANM"]
[Wed Apr 01 21:25:54.410103 2026] [:error] [pid 8909:tid 8952] [client 44.252.54.35:39486] [client 44.252.54.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/assets/.env"] [unique_id "ac0c4jvP_a0662gDl6DYxgAAAMs"]
[Wed Apr 01 23:00:36.706464 2026] [:error] [pid 62559:tid 62564] [client 161.178.3.80:51145] [client 161.178.3.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.178.3.80, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ac0zFC7NKI8IaNKZFIfg0AAAAUM"]
[Wed Apr 01 23:37:20.417743 2026] [:error] [pid 8909:tid 8964] [client 16.16.142.63:44818] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "ac07sDvP_a0662gDl6AXXAAAANc"]
[Wed Apr 01 23:37:21.476252 2026] [:error] [pid 8909:tid 8948] [client 16.16.142.63:44834] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.local"] [unique_id "ac07sTvP_a0662gDl6AXZwAAAMc"]
[Wed Apr 01 23:37:22.532400 2026] [:error] [pid 8995:tid 9018] [client 16.16.142.63:44864] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.production"] [unique_id "ac07suonaBjs3qxcRef3gAAAABQ"]
[Wed Apr 01 23:37:23.581555 2026] [:error] [pid 8908:tid 8913] [client 16.16.142.63:44890] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.staging"] [unique_id "ac07s_kmxtJXGnLdvgDZUQAAAIA"]
[Wed Apr 01 23:37:24.633366 2026] [:error] [pid 8908:tid 8937] [client 16.16.142.63:44924] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.development"] [unique_id "ac07tPkmxtJXGnLdvgDZWQAAAJg"]
[Wed Apr 01 23:37:25.686456 2026] [:error] [pid 62559:tid 62580] [client 16.16.142.63:44988] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.test"] [unique_id "ac07tS7NKI8IaNKZFIf-nAAAAVM"]
[Wed Apr 01 23:37:26.741034 2026] [:error] [pid 8908:tid 8921] [client 16.16.142.63:45052] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.remote"] [unique_id "ac07tvkmxtJXGnLdvgDZZAAAAIg"]
[Wed Apr 01 23:37:27.793279 2026] [:error] [pid 8908:tid 8924] [client 16.16.142.63:45090] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "ac07t_kmxtJXGnLdvgDZagAAAIs"]
[Wed Apr 01 23:37:28.845476 2026] [:error] [pid 8908:tid 8931] [client 16.16.142.63:45152] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.backup"] [unique_id "ac07uPkmxtJXGnLdvgDZcAAAAJI"]
[Wed Apr 01 23:37:29.900029 2026] [:error] [pid 8908:tid 8925] [client 16.16.142.63:45186] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.save"] [unique_id "ac07ufkmxtJXGnLdvgDZegAAAIw"]
[Wed Apr 01 23:37:30.954745 2026] [:error] [pid 8909:tid 8942] [client 16.16.142.63:45228] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.old"] [unique_id "ac07ujvP_a0662gDl6AXcgAAAME"]
[Wed Apr 01 23:37:32.000652 2026] [:error] [pid 8909:tid 8963] [client 16.16.142.63:45264] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.sample"] [unique_id "ac07uzvP_a0662gDl6AXdgAAANY"]
[Wed Apr 01 23:37:33.049608 2026] [:error] [pid 8910:tid 8969] [client 16.16.142.63:45292] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/vendor/.env"] [unique_id "ac07vaJZINUcF3tYgEyHJQAAAQE"]
[Wed Apr 01 23:37:34.107124 2026] [:error] [pid 8909:tid 8953] [client 16.16.142.63:45312] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/lib/.env"] [unique_id "ac07vjvP_a0662gDl6AXgAAAAMw"]
[Wed Apr 01 23:37:35.157706 2026] [:error] [pid 8909:tid 8965] [client 16.16.142.63:45344] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/lab/.env"] [unique_id "ac07vzvP_a0662gDl6AXgwAAANg"]
[Wed Apr 01 23:37:36.204078 2026] [:error] [pid 8995:tid 9002] [client 16.16.142.63:45366] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/cronlab/.env"] [unique_id "ac07wOonaBjs3qxcRef3jQAAAAQ"]
[Wed Apr 01 23:37:37.253710 2026] [:error] [pid 62559:tid 62577] [client 16.16.142.63:45392] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/cron/.env"] [unique_id "ac07wS7NKI8IaNKZFIf-ugAAAVA"]
[Wed Apr 01 23:37:38.308265 2026] [:error] [pid 8995:tid 9022] [client 16.16.142.63:45420] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/core/.env"] [unique_id "ac07wuonaBjs3qxcRef3kgAAABg"]
[Wed Apr 01 23:37:39.353960 2026] [:error] [pid 8909:tid 8952] [client 16.16.142.63:45472] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/core/app/.env"] [unique_id "ac07wzvP_a0662gDl6AXigAAAMs"]
[Wed Apr 01 23:37:40.407833 2026] [:error] [pid 62559:tid 62569] [client 16.16.142.63:45508] [client 16.16.142.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/core/Datavase/.env"] [unique_id "ac07xC7NKI8IaNKZFIf-wwAAAUg"]
[Thu Apr 02 15:35:13.830632 2026] [:error] [pid 59201:tid 59287] [client 4.232.186.45:25248] [client 4.232.186.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tinyfilemanager.php"] [unique_id "ac4cMcAC0Tw8eL6gzZ7iUAAAAJQ"]
[Thu Apr 02 15:35:17.400328 2026] [autoindex:error] [pid 23927:tid 23938] [client 4.232.186.45:24170] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 15:35:33.767267 2026] [autoindex:error] [pid 59305:tid 59322] [client 4.232.186.45:25622] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 15:35:42.461756 2026] [autoindex:error] [pid 37543:tid 37569] [client 4.232.186.45:23675] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2021/02/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 15:35:48.622796 2026] [:error] [pid 23927:tid 23937] [client 4.232.186.45:24116] [client 4.232.186.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ac4cVEsZwqCndhl9uKBILwAAAYg"]
[Thu Apr 02 15:35:50.657946 2026] [autoindex:error] [pid 23927:tid 23951] [client 4.232.186.45:23652] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 15:35:50.953227 2026] [autoindex:error] [pid 23927:tid 23936] [client 4.232.186.45:23652] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 16:47:05.463669 2026] [:error] [pid 29467:tid 29476] [client 172.161.104.93:47721] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac4tCb4VUBFCJAq-WOnvSAAAAQY"]
[Thu Apr 02 17:40:35.565180 2026] [authz_core:error] [pid 29467:tid 29478] [client 164.90.208.56:52682] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Thu Apr 02 17:40:41.188109 2026] [:error] [pid 54384:tid 54401] [client 164.90.208.56:55910] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "ac45mdWWpaby3TVN7MffDwAAAc8"]
[Thu Apr 02 17:40:45.264746 2026] [:error] [pid 29467:tid 29471] [client 164.90.208.56:55938] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ac45nb4VUBFCJAq-WOkSWwAAAQE"]
[Thu Apr 02 17:40:54.111794 2026] [:error] [pid 29467:tid 29473] [client 164.90.208.56:37832] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ac45pr4VUBFCJAq-WOkSgQAAAQM"]
[Thu Apr 02 17:41:09.135533 2026] [:error] [pid 29467:tid 29471] [client 164.90.208.56:41444] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "ac45tb4VUBFCJAq-WOkS1QAAAQE"]
[Fri Apr 03 02:11:15.062302 2026] [autoindex:error] [pid 25035:tid 25449] [client 158.158.120.135:45555] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 03 02:11:39.534440 2026] [:error] [pid 25470:tid 25489] [client 158.158.120.135:39445] [client 158.158.120.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ac6xW3hROcck6_9HYyhCJAAAANE"]
[Fri Apr 03 02:11:49.232333 2026] [:error] [pid 25035:tid 25454] [client 158.158.120.135:59661] [client 158.158.120.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "ac6xZRhR292toNOkLqHNlwAAAIw"]
[Fri Apr 03 02:12:08.246357 2026] [:error] [pid 25018:tid 25418] [client 158.158.120.135:53339] [client 158.158.120.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ac6xeHupR6lXnAUzFGoMuwAAAEU"]
[Fri Apr 03 02:12:17.045250 2026] [:error] [pid 25010:tid 25356] [client 158.158.120.135:61581] [client 158.158.120.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "ac6xgY_KcjFQF5TuqTXFBQAAAAg"]
[Fri Apr 03 02:12:22.518568 2026] [:error] [pid 25010:tid 25347] [client 158.158.120.135:59707] [client 158.158.120.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "ac6xho_KcjFQF5TuqTXFHAAAAAA"]
[Fri Apr 03 02:13:46.880161 2026] [autoindex:error] [pid 25018:tid 25435] [client 158.158.120.135:59664] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 03 02:13:48.798366 2026] [autoindex:error] [pid 25470:tid 25478] [client 158.158.120.135:39455] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 03 02:52:36.008765 2026] [:error] [pid 25470:tid 25481] [client 74.248.134.192:48677] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac669HhROcck6_9HYyhxPAAAAMk"]
[Fri Apr 03 02:52:39.495419 2026] [:error] [pid 25035:tid 25462] [client 74.248.134.192:20713] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac669xhR292toNOkLqHlPgAAAJQ"]
[Fri Apr 03 02:52:40.849834 2026] [:error] [pid 25470:tid 25485] [client 74.248.134.192:21253] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac66-HhROcck6_9HYyhxUQAAAM0"]
[Fri Apr 03 02:52:41.804662 2026] [:error] [pid 25035:tid 25444] [client 74.248.134.192:37976] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac66-RhR292toNOkLqHlRgAAAII"]
[Fri Apr 03 18:38:52.636881 2026] [:error] [pid 33446:tid 33485] [client 216.24.210.149:58085] [client 216.24.210.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ac-YvNg3dCqFYIIdw0oE0gAAAEg"]
[Fri Apr 03 21:45:45.002859 2026] [:error] [pid 35469:tid 35482] [client 20.215.240.160:7371] [client 20.215.240.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac_EiaGvTIc8-wY3jUSr-wAAAQs"]
[Fri Apr 03 21:45:59.298882 2026] [:error] [pid 40562:tid 40565] [client 20.215.240.160:7502] [client 20.215.240.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/tiny.php"] [unique_id "ac_ElzfFMXuP9zvqCeqPswAAAYA"]
[Fri Apr 03 21:46:18.690502 2026] [:error] [pid 33446:tid 33478] [client 20.215.240.160:7954] [client 20.215.240.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac_Eqtg3dCqFYIIdw0p7NgAAAEE"]
[Fri Apr 03 21:46:37.402802 2026] [:error] [pid 35469:tid 35473] [client 20.215.240.160:7296] [client 20.215.240.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/app.php"] [unique_id "ac_EvaGvTIc8-wY3jUStbwAAAQI"]
[Sat Apr 04 00:16:15.526211 2026] [:error] [pid 33445:tid 33472] [client 51.103.137.154:11129] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac_nz1lRNZ0iDVmJWM18VwAAABY"]
[Sat Apr 04 00:16:16.825544 2026] [:error] [pid 33542:tid 33565] [client 51.103.137.154:15961] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac_n0Hwb6uB1LaGtepY5xgAAANQ"]
[Sat Apr 04 00:16:18.377505 2026] [:error] [pid 40562:tid 40581] [client 51.103.137.154:39738] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac_n0jfFMXuP9zvqCeq-hQAAAZA"]
[Sat Apr 04 00:16:19.783761 2026] [:error] [pid 40562:tid 40566] [client 51.103.137.154:8268] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac_n0zfFMXuP9zvqCeq-hwAAAYE"]
[Sat Apr 04 00:16:20.738015 2026] [:error] [pid 33542:tid 33564] [client 51.103.137.154:16211] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_n1Hwb6uB1LaGtepY50gAAANM"]
[Sat Apr 04 00:16:22.142075 2026] [:error] [pid 40533:tid 40539] [client 51.103.137.154:21443] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_n1vbIAA8AViDmwssBhQAAAUQ"]
[Sat Apr 04 00:16:23.070684 2026] [:error] [pid 40562:tid 40584] [client 51.103.137.154:2852] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_n1zfFMXuP9zvqCeq-iwAAAZM"]
[Sat Apr 04 00:16:23.716892 2026] [:error] [pid 35469:tid 35490] [client 51.103.137.154:15944] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_n16GvTIc8-wY3jUTTxQAAARM"]
[Sat Apr 04 00:16:24.472550 2026] [:error] [pid 35469:tid 35495] [client 51.103.137.154:39082] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac_n2KGvTIc8-wY3jUTTyQAAARg"]
[Sat Apr 04 00:16:25.143333 2026] [:error] [pid 33445:tid 33456] [client 51.103.137.154:16145] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac_n2VlRNZ0iDVmJWM18YQAAAAY"]
[Sat Apr 04 00:16:25.928154 2026] [:error] [pid 40562:tid 40567] [client 51.103.137.154:2478] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac_n2TfFMXuP9zvqCeq-lAAAAYI"]
[Sat Apr 04 00:16:26.507026 2026] [:error] [pid 40533:tid 40552] [client 51.103.137.154:2514] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac_n2vbIAA8AViDmwssBkgAAAVE"]
[Sat Apr 04 00:16:27.061963 2026] [:error] [pid 33542:tid 33557] [client 51.103.137.154:11841] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/tfm.php"] [unique_id "ac_n23wb6uB1LaGtepY53QAAAMw"]
[Sat Apr 04 00:16:27.799946 2026] [:error] [pid 40533:tid 40551] [client 51.103.137.154:16183] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/tfm.php"] [unique_id "ac_n2_bIAA8AViDmwssBlwAAAVA"]
[Sat Apr 04 00:16:28.426496 2026] [:error] [pid 40533:tid 40546] [client 51.103.137.154:21433] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/tfm.php"] [unique_id "ac_n3PbIAA8AViDmwssBmgAAAUs"]
[Sat Apr 04 00:16:28.952585 2026] [:error] [pid 40533:tid 40550] [client 51.103.137.154:16128] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/tfm.php"] [unique_id "ac_n3PbIAA8AViDmwssBoAAAAU8"]
[Sat Apr 04 00:16:29.469215 2026] [:error] [pid 40533:tid 40545] [client 51.103.137.154:39097] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lib.php"] [unique_id "ac_n3fbIAA8AViDmwssBowAAAUo"]
[Sat Apr 04 00:16:30.012068 2026] [:error] [pid 40562:tid 40586] [client 51.103.137.154:38341] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lib.php"] [unique_id "ac_n3jfFMXuP9zvqCeq-mQAAAZU"]
[Sat Apr 04 00:16:30.532410 2026] [:error] [pid 35469:tid 35472] [client 51.103.137.154:50757] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lib.php"] [unique_id "ac_n3qGvTIc8-wY3jUTTzAAAAQE"]
[Sat Apr 04 00:16:31.272141 2026] [:error] [pid 55174:tid 55178] [client 51.103.137.154:36103] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lib.php"] [unique_id "ac_n35_WKqUonPNUHYwaSwAAAcI"]
[Sat Apr 04 00:16:31.857166 2026] [:error] [pid 55174:tid 55186] [client 51.103.137.154:38361] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/rithin.php"] [unique_id "ac_n35_WKqUonPNUHYwaTAAAAco"]
[Sat Apr 04 00:16:32.475751 2026] [:error] [pid 40533:tid 40540] [client 51.103.137.154:2489] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/rithin.php"] [unique_id "ac_n4PbIAA8AViDmwssBrAAAAUU"]
[Sat Apr 04 00:16:32.975440 2026] [:error] [pid 33445:tid 33452] [client 51.103.137.154:21401] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/rithin.php"] [unique_id "ac_n4FlRNZ0iDVmJWM18cAAAAAI"]
[Sat Apr 04 00:16:33.519011 2026] [:error] [pid 55174:tid 55196] [client 51.103.137.154:11097] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/rithin.php"] [unique_id "ac_n4Z_WKqUonPNUHYwaTgAAAdQ"]
[Sat Apr 04 00:16:34.043396 2026] [:error] [pid 33447:tid 33519] [client 51.103.137.154:52638] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac_n4kgaPmDHz92j4lNuyAAAAI8"]
[Sat Apr 04 00:16:34.552916 2026] [:error] [pid 40533:tid 40559] [client 51.103.137.154:52614] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac_n4vbIAA8AViDmwssBvAAAAVg"]
[Sat Apr 04 00:16:35.095098 2026] [:error] [pid 40533:tid 40547] [client 51.103.137.154:2517] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac_n4_bIAA8AViDmwssBwQAAAUw"]
[Sat Apr 04 00:16:35.663249 2026] [:error] [pid 40533:tid 40554] [client 51.103.137.154:7416] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac_n4_bIAA8AViDmwssBygAAAVM"]
[Sat Apr 04 00:16:36.172486 2026] [:error] [pid 33542:tid 33563] [client 51.103.137.154:38346] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/0yellow.php"] [unique_id "ac_n5Hwb6uB1LaGtepY55AAAANI"]
[Sat Apr 04 00:16:36.665326 2026] [:error] [pid 33445:tid 33459] [client 51.103.137.154:21441] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/0yellow.php"] [unique_id "ac_n5FlRNZ0iDVmJWM18gQAAAAk"]
[Sat Apr 04 00:16:37.181180 2026] [:error] [pid 33447:tid 33523] [client 51.103.137.154:50759] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/0yellow.php"] [unique_id "ac_n5UgaPmDHz92j4lNuzAAAAJM"]
[Sat Apr 04 00:16:37.721925 2026] [:error] [pid 33542:tid 33551] [client 51.103.137.154:25844] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/0yellow.php"] [unique_id "ac_n5Xwb6uB1LaGtepY56gAAAMY"]
[Sat Apr 04 00:16:38.221658 2026] [:error] [pid 33445:tid 33474] [client 51.103.137.154:7374] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ws86.php"] [unique_id "ac_n5llRNZ0iDVmJWM18hgAAABg"]
[Sat Apr 04 00:16:38.724342 2026] [:error] [pid 33542:tid 33546] [client 51.103.137.154:39091] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ws86.php"] [unique_id "ac_n5nwb6uB1LaGtepY57wAAAME"]
[Sat Apr 04 00:16:39.212577 2026] [:error] [pid 33542:tid 33561] [client 51.103.137.154:16188] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ws86.php"] [unique_id "ac_n53wb6uB1LaGtepY58wAAANA"]
[Sat Apr 04 00:16:39.727073 2026] [:error] [pid 35469:tid 35480] [client 51.103.137.154:11113] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ws86.php"] [unique_id "ac_n56GvTIc8-wY3jUTT0AAAAQk"]
[Sat Apr 04 00:16:40.212965 2026] [:error] [pid 35469:tid 35495] [client 51.103.137.154:21383] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac_n6KGvTIc8-wY3jUTT1QAAARg"]
[Sat Apr 04 00:16:40.731327 2026] [:error] [pid 33445:tid 33470] [client 51.103.137.154:21454] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac_n6FlRNZ0iDVmJWM18iQAAABQ"]
[Sat Apr 04 00:16:41.253541 2026] [:error] [pid 35469:tid 35491] [client 51.103.137.154:21384] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac_n6aGvTIc8-wY3jUTT2gAAARQ"]
[Sat Apr 04 00:16:41.793125 2026] [:error] [pid 55174:tid 55185] [client 51.103.137.154:16231] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac_n6Z_WKqUonPNUHYwaUgAAAck"]
[Sat Apr 04 00:16:42.345077 2026] [:error] [pid 33542:tid 33546] [client 51.103.137.154:21438] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bless.php"] [unique_id "ac_n6nwb6uB1LaGtepY5-wAAAME"]
[Sat Apr 04 00:16:42.846303 2026] [:error] [pid 33445:tid 33470] [client 51.103.137.154:2492] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bless.php"] [unique_id "ac_n6llRNZ0iDVmJWM18lQAAABQ"]
[Sat Apr 04 00:16:43.393953 2026] [:error] [pid 35469:tid 35492] [client 51.103.137.154:19505] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bless.php"] [unique_id "ac_n66GvTIc8-wY3jUTT3AAAARU"]
[Sat Apr 04 00:16:43.882590 2026] [:error] [pid 55174:tid 55176] [client 51.103.137.154:50752] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/bless.php"] [unique_id "ac_n65_WKqUonPNUHYwaVwAAAcA"]
[Sat Apr 04 00:16:44.365579 2026] [:error] [pid 55174:tid 55179] [client 51.103.137.154:19053] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_n7J_WKqUonPNUHYwaWgAAAcM"]
[Sat Apr 04 00:16:44.840939 2026] [:error] [pid 35469:tid 35489] [client 51.103.137.154:16210] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_n7KGvTIc8-wY3jUTT4AAAARI"]
[Sat Apr 04 00:16:45.421990 2026] [:error] [pid 33542:tid 33547] [client 51.103.137.154:2848] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_n7Xwb6uB1LaGtepY5_AAAAMI"]
[Sat Apr 04 00:16:45.972066 2026] [:error] [pid 55174:tid 55197] [client 51.103.137.154:16233] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_n7Z_WKqUonPNUHYwaXAAAAdU"]
[Sat Apr 04 00:16:46.477370 2026] [:error] [pid 33445:tid 33452] [client 51.103.137.154:2869] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/aligk.php"] [unique_id "ac_n7llRNZ0iDVmJWM18pAAAAAI"]
[Sat Apr 04 00:16:46.965588 2026] [:error] [pid 40562:tid 40571] [client 51.103.137.154:50808] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/aligk.php"] [unique_id "ac_n7jfFMXuP9zvqCeq-owAAAYY"]
[Sat Apr 04 00:16:47.586387 2026] [:error] [pid 33445:tid 33450] [client 51.103.137.154:16245] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/aligk.php"] [unique_id "ac_n71lRNZ0iDVmJWM18qwAAAAA"]
[Sat Apr 04 00:16:48.080961 2026] [:error] [pid 40533:tid 40553] [client 51.103.137.154:2549] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/aligk.php"] [unique_id "ac_n8PbIAA8AViDmwssB2gAAAVI"]
[Sat Apr 04 00:16:48.627782 2026] [:error] [pid 55174:tid 55199] [client 51.103.137.154:21413] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a7.php"] [unique_id "ac_n8J_WKqUonPNUHYwaYQAAAdc"]
[Sat Apr 04 00:16:49.176027 2026] [:error] [pid 40533:tid 40539] [client 51.103.137.154:19062] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a7.php"] [unique_id "ac_n8fbIAA8AViDmwssB3QAAAUQ"]
[Sat Apr 04 00:16:49.686302 2026] [:error] [pid 40533:tid 40541] [client 51.103.137.154:38364] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a7.php"] [unique_id "ac_n8fbIAA8AViDmwssB5AAAAUY"]
[Sat Apr 04 00:16:50.218555 2026] [:error] [pid 40533:tid 40550] [client 51.103.137.154:21494] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a7.php"] [unique_id "ac_n8vbIAA8AViDmwssB6gAAAU8"]
[Sat Apr 04 00:16:50.739659 2026] [:error] [pid 33445:tid 33471] [client 51.103.137.154:16182] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ta0ol.php"] [unique_id "ac_n8llRNZ0iDVmJWM18tAAAABU"]
[Sat Apr 04 00:16:51.338711 2026] [:error] [pid 33445:tid 33466] [client 51.103.137.154:19497] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ta0ol.php"] [unique_id "ac_n81lRNZ0iDVmJWM18twAAABA"]
[Sat Apr 04 00:16:51.894060 2026] [:error] [pid 33542:tid 33559] [client 51.103.137.154:25832] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ta0ol.php"] [unique_id "ac_n83wb6uB1LaGtepY6CAAAAM4"]
[Sat Apr 04 00:16:52.405752 2026] [:error] [pid 33542:tid 33547] [client 51.103.137.154:16162] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ta0ol.php"] [unique_id "ac_n9Hwb6uB1LaGtepY6CgAAAMI"]
[Sat Apr 04 00:16:52.888160 2026] [:error] [pid 40533:tid 40551] [client 51.103.137.154:60580] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/tx79.php"] [unique_id "ac_n9PbIAA8AViDmwssB9gAAAVA"]
[Sat Apr 04 00:16:53.382641 2026] [:error] [pid 33445:tid 33458] [client 51.103.137.154:11876] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/tx79.php"] [unique_id "ac_n9VlRNZ0iDVmJWM18vAAAAAg"]
[Sat Apr 04 00:16:54.052685 2026] [:error] [pid 33542:tid 33552] [client 51.103.137.154:11095] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/tx79.php"] [unique_id "ac_n9nwb6uB1LaGtepY6DgAAAMc"]
[Sat Apr 04 00:16:54.947381 2026] [:error] [pid 40533:tid 40542] [client 51.103.137.154:36134] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/tx79.php"] [unique_id "ac_n9vbIAA8AViDmwssCAAAAAUc"]
[Sat Apr 04 00:16:55.650501 2026] [:error] [pid 40562:tid 40586] [client 51.103.137.154:21417] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "ac_n9zfFMXuP9zvqCeq-qgAAAZU"]
[Sat Apr 04 00:16:56.283371 2026] [:error] [pid 33446:tid 33490] [client 51.103.137.154:39715] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "ac_n-Ng3dCqFYIIdw0qmdQAAAE0"]
[Sat Apr 04 00:16:57.010982 2026] [:error] [pid 40533:tid 40548] [client 51.103.137.154:21444] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "ac_n-fbIAA8AViDmwssCCAAAAU0"]
[Sat Apr 04 00:16:58.088944 2026] [:error] [pid 33445:tid 33451] [client 51.103.137.154:2825] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "ac_n-llRNZ0iDVmJWM18zQAAAAE"]
[Sat Apr 04 00:16:59.234661 2026] [:error] [pid 33445:tid 33453] [client 51.103.137.154:50763] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-good.php"] [unique_id "ac_n-1lRNZ0iDVmJWM182AAAAAM"]
[Sat Apr 04 00:16:59.776121 2026] [:error] [pid 33445:tid 33468] [client 51.103.137.154:7421] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-good.php"] [unique_id "ac_n-1lRNZ0iDVmJWM183AAAABI"]
[Sat Apr 04 00:17:00.555495 2026] [:error] [pid 33445:tid 33465] [client 51.103.137.154:16178] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-good.php"] [unique_id "ac_n_FlRNZ0iDVmJWM183wAAAA8"]
[Sat Apr 04 00:17:01.286321 2026] [:error] [pid 33445:tid 33450] [client 51.103.137.154:2459] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-good.php"] [unique_id "ac_n_VlRNZ0iDVmJWM185gAAAAA"]
[Sat Apr 04 00:17:01.839121 2026] [:error] [pid 40562:tid 40579] [client 51.103.137.154:56929] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/zoper1.php"] [unique_id "ac_n_TfFMXuP9zvqCeq-rQAAAY4"]
[Sat Apr 04 00:17:02.330473 2026] [:error] [pid 40562:tid 40588] [client 51.103.137.154:19483] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/zoper1.php"] [unique_id "ac_n_jfFMXuP9zvqCeq-rgAAAZc"]
[Sat Apr 04 00:17:02.877113 2026] [:error] [pid 40562:tid 40567] [client 51.103.137.154:21445] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/zoper1.php"] [unique_id "ac_n_jfFMXuP9zvqCeq-rwAAAYI"]
[Sat Apr 04 00:17:03.443378 2026] [:error] [pid 33542:tid 33565] [client 51.103.137.154:22430] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/zoper1.php"] [unique_id "ac_n_3wb6uB1LaGtepY6IwAAANQ"]
[Sat Apr 04 00:17:03.979461 2026] [:error] [pid 40562:tid 40575] [client 51.103.137.154:2871] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac_n_zfFMXuP9zvqCeq-sAAAAYo"]
[Sat Apr 04 00:17:04.631474 2026] [:error] [pid 33542:tid 33554] [client 51.103.137.154:2843] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac_oAHwb6uB1LaGtepY6JgAAAMk"]
[Sat Apr 04 00:17:05.144389 2026] [:error] [pid 33446:tid 33495] [client 51.103.137.154:21389] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac_oAdg3dCqFYIIdw0qmfQAAAFI"]
[Sat Apr 04 00:17:05.654004 2026] [:error] [pid 40562:tid 40576] [client 51.103.137.154:2550] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac_oATfFMXuP9zvqCeq-swAAAYs"]
[Sat Apr 04 00:17:06.189654 2026] [:error] [pid 33542:tid 33551] [client 51.103.137.154:11101] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gifclass.php"] [unique_id "ac_oAnwb6uB1LaGtepY6KgAAAMY"]
[Sat Apr 04 00:17:06.723845 2026] [:error] [pid 33445:tid 33467] [client 51.103.137.154:39702] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gifclass.php"] [unique_id "ac_oAllRNZ0iDVmJWM189AAAABE"]
[Sat Apr 04 00:17:07.211405 2026] [:error] [pid 33445:tid 33451] [client 51.103.137.154:50787] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gifclass.php"] [unique_id "ac_oA1lRNZ0iDVmJWM189QAAAAE"]
[Sat Apr 04 00:17:07.696549 2026] [:error] [pid 33542:tid 33562] [client 51.103.137.154:8282] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gifclass.php"] [unique_id "ac_oA3wb6uB1LaGtepY6LAAAANE"]
[Sat Apr 04 00:17:08.233175 2026] [:error] [pid 33445:tid 33469] [client 51.103.137.154:21394] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gptsh.php"] [unique_id "ac_oBFlRNZ0iDVmJWM18-wAAABM"]
[Sat Apr 04 00:17:08.722094 2026] [:error] [pid 35469:tid 35474] [client 51.103.137.154:16169] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gptsh.php"] [unique_id "ac_oBKGvTIc8-wY3jUTT9gAAAQM"]
[Sat Apr 04 00:17:09.257644 2026] [:error] [pid 40533:tid 40537] [client 51.103.137.154:60577] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gptsh.php"] [unique_id "ac_oBfbIAA8AViDmwssCIgAAAUI"]
[Sat Apr 04 00:17:09.783393 2026] [:error] [pid 33445:tid 33455] [client 51.103.137.154:2446] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gptsh.php"] [unique_id "ac_oBVlRNZ0iDVmJWM18_wAAAAU"]
[Sat Apr 04 00:17:10.298910 2026] [:error] [pid 33446:tid 33488] [client 51.103.137.154:52664] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/new3.php"] [unique_id "ac_oBtg3dCqFYIIdw0qmhQAAAEs"]
[Sat Apr 04 00:17:10.823172 2026] [:error] [pid 33446:tid 33478] [client 51.103.137.154:8307] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/new3.php"] [unique_id "ac_oBtg3dCqFYIIdw0qmigAAAEE"]
[Sat Apr 04 00:17:11.325317 2026] [:error] [pid 40533:tid 40553] [client 51.103.137.154:39102] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/new3.php"] [unique_id "ac_oB_bIAA8AViDmwssCJwAAAVI"]
[Sat Apr 04 00:17:11.857817 2026] [:error] [pid 33447:tid 33514] [client 51.103.137.154:2530] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/new3.php"] [unique_id "ac_oB0gaPmDHz92j4lNu4gAAAIo"]
[Sat Apr 04 00:17:12.469415 2026] [:error] [pid 35469:tid 35493] [client 51.103.137.154:2834] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp5.php"] [unique_id "ac_oCKGvTIc8-wY3jUTUAQAAARY"]
[Sat Apr 04 00:17:13.014840 2026] [:error] [pid 55174:tid 55194] [client 51.103.137.154:11888] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp5.php"] [unique_id "ac_oCZ_WKqUonPNUHYwaywAAAdI"]
[Sat Apr 04 00:17:13.670960 2026] [:error] [pid 40533:tid 40542] [client 51.103.137.154:16983] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp5.php"] [unique_id "ac_oCfbIAA8AViDmwssCMgAAAUc"]
[Sat Apr 04 00:17:25.295033 2026] [:error] [pid 33445:tid 33457] [client 51.103.137.154:20535] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp9.php"] [unique_id "ac_oFVlRNZ0iDVmJWM19WwAAAAc"]
[Sat Apr 04 00:17:25.799980 2026] [:error] [pid 33446:tid 33496] [client 51.103.137.154:13877] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp9.php"] [unique_id "ac_oFdg3dCqFYIIdw0qmkwAAAFM"]
[Sat Apr 04 00:17:26.362169 2026] [:error] [pid 35469:tid 35487] [client 51.103.137.154:32673] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp9.php"] [unique_id "ac_oFqGvTIc8-wY3jUTUCgAAARA"]
[Sat Apr 04 00:17:26.838766 2026] [:error] [pid 33542:tid 33564] [client 51.103.137.154:14389] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp9.php"] [unique_id "ac_oFnwb6uB1LaGtepY6SwAAANM"]
[Sat Apr 04 00:17:27.386931 2026] [:error] [pid 33447:tid 33528] [client 51.103.137.154:37884] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xsas.php"] [unique_id "ac_oF0gaPmDHz92j4lNu5wAAAJg"]
[Sat Apr 04 00:17:27.880639 2026] [:error] [pid 33542:tid 33557] [client 51.103.137.154:20499] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xsas.php"] [unique_id "ac_oF3wb6uB1LaGtepY6TgAAAMw"]
[Sat Apr 04 00:17:28.432350 2026] [:error] [pid 35469:tid 35475] [client 51.103.137.154:37273] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xsas.php"] [unique_id "ac_oGKGvTIc8-wY3jUTUCwAAAQQ"]
[Sat Apr 04 00:17:29.020862 2026] [:error] [pid 40533:tid 40543] [client 51.103.137.154:17153] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xsas.php"] [unique_id "ac_oGfbIAA8AViDmwssCZAAAAUg"]
[Sat Apr 04 00:17:29.597999 2026] [:error] [pid 55174:tid 55181] [client 51.103.137.154:17215] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sid3.php"] [unique_id "ac_oGZ_WKqUonPNUHYwa3QAAAcU"]
[Sat Apr 04 00:17:30.125925 2026] [:error] [pid 40533:tid 40545] [client 51.103.137.154:10025] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sid3.php"] [unique_id "ac_oGvbIAA8AViDmwssCZwAAAUo"]
[Sat Apr 04 00:17:30.692154 2026] [:error] [pid 55174:tid 55184] [client 51.103.137.154:28962] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sid3.php"] [unique_id "ac_oGp_WKqUonPNUHYwa4AAAAcg"]
[Sat Apr 04 00:17:31.195154 2026] [:error] [pid 33446:tid 33486] [client 51.103.137.154:2063] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sid3.php"] [unique_id "ac_oG9g3dCqFYIIdw0qmmwAAAEk"]
[Sat Apr 04 00:17:31.765963 2026] [:error] [pid 33447:tid 33508] [client 51.103.137.154:27135] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nw.php"] [unique_id "ac_oG0gaPmDHz92j4lNu6wAAAIQ"]
[Sat Apr 04 00:17:32.239790 2026] [:error] [pid 33445:tid 33472] [client 51.103.137.154:13073] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nw.php"] [unique_id "ac_oHFlRNZ0iDVmJWM19gQAAABY"]
[Sat Apr 04 00:17:32.805013 2026] [:error] [pid 33542:tid 33566] [client 51.103.137.154:28972] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nw.php"] [unique_id "ac_oHHwb6uB1LaGtepY6UwAAANU"]
[Sat Apr 04 00:17:33.322280 2026] [:error] [pid 40562:tid 40571] [client 51.103.137.154:44000] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nw.php"] [unique_id "ac_oHTfFMXuP9zvqCeq-yQAAAYY"]
[Sat Apr 04 00:17:33.898656 2026] [:error] [pid 33446:tid 33494] [client 51.103.137.154:10037] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/hhxc.php"] [unique_id "ac_oHdg3dCqFYIIdw0qmowAAAFE"]
[Sat Apr 04 00:17:34.822734 2026] [:error] [pid 40562:tid 40566] [client 51.103.137.154:54401] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/hhxc.php"] [unique_id "ac_oHjfFMXuP9zvqCeq-zwAAAYE"]
[Sat Apr 04 00:17:35.319005 2026] [:error] [pid 40562:tid 40574] [client 51.103.137.154:53237] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/hhxc.php"] [unique_id "ac_oHzfFMXuP9zvqCeq-0wAAAYk"]
[Sat Apr 04 00:17:35.814098 2026] [:error] [pid 40562:tid 40577] [client 51.103.137.154:19969] [client 51.103.137.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/hhxc.php"] [unique_id "ac_oHzfFMXuP9zvqCeq-1gAAAYw"]
[Sat Apr 04 01:06:24.180137 2026] [:error] [pid 12081:tid 12119] [client 157.66.24.235:59748] [client 157.66.24.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "ac_zkKMJBCYerZTQdmLtQAAAAFM"]
[Sat Apr 04 01:06:24.180546 2026] [:error] [pid 12081:tid 12122] [client 157.66.24.235:59746] [client 157.66.24.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/app/.env"] [unique_id "ac_zkKMJBCYerZTQdmLtQQAAAFY"]
[Sat Apr 04 01:06:24.879937 2026] [:error] [pid 12233:tid 12254] [client 157.66.24.235:45954] [client 157.66.24.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/app/.env"] [unique_id "ac_zkBQDAzkmdfiSgI2QewAAARM"]
[Sat Apr 04 01:06:24.882451 2026] [:error] [pid 12233:tid 12256] [client 157.66.24.235:45956] [client 157.66.24.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "ac_zkBQDAzkmdfiSgI2QfAAAARU"]
[Sat Apr 04 04:14:58.837351 2026] [:error] [pid 37114:tid 37125] [client 185.93.89.100:44784] [client 185.93.89.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/app/.env"] [unique_id "adAfws-DnSj3fGMexeJSmwAAAQk"]
[Sat Apr 04 04:14:58.837348 2026] [:error] [pid 2567:tid 2589] [client 185.93.89.100:44796] [client 185.93.89.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "adAfwmJJmfRsTrAKjdQbowAAAM8"]
[Sat Apr 04 04:15:00.181212 2026] [:error] [pid 2567:tid 2584] [client 185.93.89.100:52898] [client 185.93.89.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "adAfxGJJmfRsTrAKjdQbpwAAAMo"]
[Sat Apr 04 04:15:00.181212 2026] [:error] [pid 2458:tid 2526] [client 185.93.89.100:52904] [client 185.93.89.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/app/.env"] [unique_id "adAfxCNozic5SuWqclnBLAAAAFY"]
[Sat Apr 04 08:39:14.708283 2026] [autoindex:error] [pid 2567:tid 2577] [client 85.203.21.26:56715] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:14.805108 2026] [:error] [pid 2567:tid 2594] [client 85.203.21.26:56715] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/config.php"] [unique_id "adBdsmJJmfRsTrAKjdTY1AAAANQ"]
[Sat Apr 04 08:39:15.516976 2026] [:error] [pid 2567:tid 2583] [client 85.203.21.42:45657] [client 85.203.21.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/header.php"] [unique_id "adBds2JJmfRsTrAKjdTY2wAAAMk"]
[Sat Apr 04 08:39:15.715098 2026] [:error] [pid 2567:tid 2593] [client 85.203.21.19:30019] [client 85.203.21.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-bindings/system_core.php"] [unique_id "adBds2JJmfRsTrAKjdTY4AAAANM"]
[Sat Apr 04 08:39:17.425501 2026] [:error] [pid 37114:tid 37119] [client 85.203.21.22:49135] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adBdtc-DnSj3fGMexeLSaQAAAQM"]
[Sat Apr 04 08:39:18.729773 2026] [:error] [pid 2567:tid 2583] [client 85.203.21.36:47591] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "adBdtmJJmfRsTrAKjdTY8gAAAMk"]
[Sat Apr 04 08:39:21.991068 2026] [:error] [pid 2567:tid 2592] [client 85.203.21.43:49543] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/speculative8.php"] [unique_id "adBduWJJmfRsTrAKjdTZBwAAANI"]
[Sat Apr 04 08:39:24.987384 2026] [:error] [pid 2459:tid 2548] [client 85.203.21.27:59929] [client 85.203.21.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "adBdvAefyCmu4LR_PlqtUQAAAJA"]
[Sat Apr 04 08:39:25.195017 2026] [access_compat:error] [pid 2458:tid 2517] [client 85.203.21.4:25851] AH01797: client denied by server configuration: /home/crosscen/public_html/wp-content/updraft/plugins-old/updraftplus/vendor/team-updraft/
[Sat Apr 04 08:39:25.410154 2026] [autoindex:error] [pid 2458:tid 2518] [client 85.203.21.4:25851] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:26.009669 2026] [autoindex:error] [pid 2567:tid 2590] [client 85.203.21.47:37101] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:26.111743 2026] [autoindex:error] [pid 2567:tid 2595] [client 85.203.21.47:37101] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:33.497812 2026] [autoindex:error] [pid 2567:tid 2580] [client 85.203.21.23:48249] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:33.601642 2026] [autoindex:error] [pid 2567:tid 2578] [client 85.203.21.23:48249] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:33.707560 2026] [autoindex:error] [pid 2567:tid 2593] [client 85.203.21.23:48249] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:33.815582 2026] [autoindex:error] [pid 2567:tid 2588] [client 85.203.21.23:48249] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/block-library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:34.430662 2026] [autoindex:error] [pid 2457:tid 2501] [client 85.203.21.43:40141] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:35.628985 2026] [autoindex:error] [pid 2457:tid 2488] [client 85.203.21.3:25421] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:36.748353 2026] [autoindex:error] [pid 2459:tid 2552] [client 85.203.21.44:60919] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:36.862127 2026] [autoindex:error] [pid 2459:tid 2544] [client 85.203.21.44:60919] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:39.545039 2026] [autoindex:error] [pid 37114:tid 37140] [client 85.203.21.23:53789] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:39.645873 2026] [autoindex:error] [pid 37114:tid 37119] [client 85.203.21.23:53789] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/mediaelement/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:39.751194 2026] [autoindex:error] [pid 37114:tid 37139] [client 85.203.21.23:53789] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:39.895202 2026] [autoindex:error] [pid 37114:tid 37136] [client 85.203.21.23:53789] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:40.005611 2026] [autoindex:error] [pid 37114:tid 37130] [client 85.203.21.23:53789] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:40.108429 2026] [autoindex:error] [pid 37114:tid 37122] [client 85.203.21.23:53789] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:40.216669 2026] [autoindex:error] [pid 37114:tid 37134] [client 85.203.21.23:53789] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:40.321168 2026] [autoindex:error] [pid 37114:tid 37128] [client 85.203.21.23:53789] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:42.903898 2026] [:error] [pid 2567:tid 2574] [client 85.203.21.5:51249] [client 85.203.21.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adBdzmJJmfRsTrAKjdTZjwAAAMA"]
[Sat Apr 04 08:39:45.436865 2026] [autoindex:error] [pid 2459:tid 2547] [client 85.203.21.5:23091] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sodium_compat/src/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:46.045940 2026] [autoindex:error] [pid 2459:tid 2531] [client 85.203.21.38:52291] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:46.148437 2026] [autoindex:error] [pid 2459:tid 2538] [client 85.203.21.38:52291] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/comment-content/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:47.296538 2026] [autoindex:error] [pid 2567:tid 2587] [client 85.203.21.64:60075] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/languages/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:47.410700 2026] [autoindex:error] [pid 2567:tid 2593] [client 85.203.21.64:60075] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/nextpage/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:48.022447 2026] [autoindex:error] [pid 2567:tid 2588] [client 85.203.21.64:57131] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:49.207441 2026] [autoindex:error] [pid 2459:tid 2556] [client 85.203.21.68:46685] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:49.310033 2026] [autoindex:error] [pid 2459:tid 2543] [client 85.203.21.68:46685] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/image/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:49.939697 2026] [autoindex:error] [pid 37114:tid 37121] [client 85.203.21.29:46159] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:50.045938 2026] [autoindex:error] [pid 37114:tid 37118] [client 85.203.21.29:46159] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:50.696018 2026] [autoindex:error] [pid 2567:tid 2582] [client 85.203.21.38:33145] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:51.346670 2026] [autoindex:error] [pid 2567:tid 2579] [client 85.203.21.27:43675] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:51.999008 2026] [autoindex:error] [pid 2457:tid 2490] [client 85.203.21.56:31751] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/post-comments-form/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:55.293912 2026] [autoindex:error] [pid 2567:tid 2598] [client 85.203.21.42:34787] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:55.393589 2026] [:error] [pid 2567:tid 2581] [client 85.203.21.42:34787] [client 85.203.21.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "adBd22JJmfRsTrAKjdTaEAAAAMc"]
[Sat Apr 04 08:39:56.600317 2026] [autoindex:error] [pid 2459:tid 2554] [client 85.203.21.21:54125] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/column/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:57.226584 2026] [autoindex:error] [pid 2458:tid 2511] [client 85.203.21.10:39881] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:57.329499 2026] [autoindex:error] [pid 2458:tid 2522] [client 85.203.21.10:39881] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:39:57.432434 2026] [autoindex:error] [pid 2458:tid 2504] [client 85.203.21.10:39881] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:00.052287 2026] [autoindex:error] [pid 2567:tid 2595] [client 85.203.21.26:46131] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:03.860888 2026] [autoindex:error] [pid 37114:tid 37122] [client 85.203.21.51:62735] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:05.014469 2026] [autoindex:error] [pid 37114:tid 37138] [client 85.203.21.46:28123] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/social-links/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:05.623778 2026] [autoindex:error] [pid 2567:tid 2587] [client 85.203.21.14:56205] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/navigation-submenu/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:05.727312 2026] [autoindex:error] [pid 2567:tid 2576] [client 85.203.21.14:56205] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/paragraph/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:06.370359 2026] [autoindex:error] [pid 2567:tid 2583] [client 85.203.21.47:42407] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/video/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:07.516061 2026] [autoindex:error] [pid 2567:tid 2595] [client 85.203.21.15:41469] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:07.618208 2026] [autoindex:error] [pid 2567:tid 2596] [client 85.203.21.15:41469] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:07.731086 2026] [autoindex:error] [pid 2567:tid 2577] [client 85.203.21.15:41469] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:10.111769 2026] [autoindex:error] [pid 2567:tid 2581] [client 85.203.21.15:41469] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:10.217659 2026] [autoindex:error] [pid 2567:tid 2583] [client 85.203.21.15:41469] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:10.335175 2026] [:error] [pid 2567:tid 2584] [client 85.203.21.15:41469] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/k.php"] [unique_id "adBd6mJJmfRsTrAKjdTaXAAAAMo"]
[Sat Apr 04 08:40:11.049040 2026] [autoindex:error] [pid 37114:tid 37120] [client 85.203.21.3:42573] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:12.249912 2026] [autoindex:error] [pid 37114:tid 37137] [client 85.203.21.48:28307] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:12.460072 2026] [autoindex:error] [pid 37114:tid 37117] [client 85.203.21.48:28307] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://southerncrosscentre.au/wp-includes/js/dist
[Sat Apr 04 08:40:12.568430 2026] [autoindex:error] [pid 37114:tid 37131] [client 85.203.21.48:28307] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:14.907275 2026] [:error] [pid 2459:tid 2536] [client 85.203.21.29:36057] [client 85.203.21.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "adBd7gefyCmu4LR_Plqt_gAAAIU"]
[Sat Apr 04 08:40:16.123391 2026] [:error] [pid 2567:tid 2593] [client 85.203.21.3:50261] [client 85.203.21.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.21.3, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "adBd8GJJmfRsTrAKjdTagQAAANM"]
[Sat Apr 04 08:40:17.609454 2026] [autoindex:error] [pid 2459:tid 2533] [client 85.203.21.22:20931] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:20.778033 2026] [autoindex:error] [pid 2459:tid 2555] [client 85.203.21.21:49097] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/customize-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:20.896409 2026] [autoindex:error] [pid 2459:tid 2543] [client 85.203.21.21:49097] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:22.421094 2026] [autoindex:error] [pid 2459:tid 2556] [client 85.203.21.21:49097] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:25.999443 2026] [autoindex:error] [pid 37114:tid 37135] [client 85.203.21.10:55539] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:30.749388 2026] [autoindex:error] [pid 37114:tid 37116] [client 85.203.21.67:46591] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:30.855562 2026] [autoindex:error] [pid 37114:tid 37137] [client 85.203.21.67:46591] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:31.606147 2026] [autoindex:error] [pid 2567:tid 2596] [client 85.203.21.29:39521] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/page-list/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:34.742913 2026] [proxy_fcgi:error] [pid 2567:tid 2598] [client 85.203.21.36:34915] AH01071: Got error 'PHP message: PHP Warning:  Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/crosscen/public_html/wp-includes/blocks/index.php on line 8PHP message: PHP Warning:  Use of undefined constant WPINC - assumed 'WPINC' (this will throw an Error in a future version of PHP) in /home/crosscen/public_html/wp-includes/blocks/index.php on line 8PHP message: PHP Warning:  require(ABSPATHWPINC/blocks/legacy-widget.php): failed to open stream: No such file or directory in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11PHP message: PHP Warning:  require(ABSPATHWPINC/blocks/legacy-widget.php): failed to open stream: No such file or directory in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11PHP message: PHP Fatal error:  require(): Failed opening required 'ABSPATHWPINC/blocks/legacy-widget.php' (include_path='.:') in /home/crosscen/public_html/wp-includes/blocks/index.php on line 11'
[Sat Apr 04 08:40:34.943140 2026] [autoindex:error] [pid 37114:tid 37135] [client 85.203.21.29:30813] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:36.035801 2026] [autoindex:error] [pid 2567:tid 2591] [client 85.203.21.38:65045] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:36.642155 2026] [autoindex:error] [pid 2567:tid 2574] [client 85.203.21.23:38683] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/query-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:36.752905 2026] [autoindex:error] [pid 2567:tid 2591] [client 85.203.21.23:38683] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/query-pagination/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:36.892061 2026] [autoindex:error] [pid 2567:tid 2589] [client 85.203.21.23:38683] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/separator/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:37.603094 2026] [autoindex:error] [pid 2567:tid 2575] [client 85.203.21.47:64663] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:38.740227 2026] [:error] [pid 2457:tid 2488] [client 85.203.21.30:32773] [client 85.203.21.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/themes.php"] [unique_id "adBeBkmNHppaMd92Zpd--wAAAAs"]
[Sat Apr 04 08:40:38.944866 2026] [autoindex:error] [pid 37114:tid 37119] [client 85.203.21.16:32887] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/freeform/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:39.044244 2026] [:error] [pid 37114:tid 37134] [client 85.203.21.16:32887] [client 85.203.21.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adBeB8-DnSj3fGMexeLTuAAAARI"]
[Sat Apr 04 08:40:39.242392 2026] [:error] [pid 2567:tid 2577] [client 85.203.21.23:64035] [client 85.203.21.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "adBeB2JJmfRsTrAKjdTbJQAAAMM"]
[Sat Apr 04 08:40:41.502945 2026] [autoindex:error] [pid 2567:tid 2589] [client 85.203.21.27:28789] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/languages/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:42.624292 2026] [:error] [pid 37114:tid 37121] [client 85.203.21.59:62899] [client 85.203.21.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adBeCs-DnSj3fGMexeLTygAAAQU"]
[Sat Apr 04 08:40:42.837834 2026] [autoindex:error] [pid 2567:tid 2583] [client 85.203.21.34:64887] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:43.948581 2026] [autoindex:error] [pid 2458:tid 2516] [client 85.203.21.29:32511] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:44.050292 2026] [autoindex:error] [pid 2458:tid 2525] [client 85.203.21.29:32511] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:44.653724 2026] [autoindex:error] [pid 37114:tid 37119] [client 85.203.21.56:45201] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/tag-cloud/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:45.230781 2026] [:error] [pid 2567:tid 2588] [client 85.203.21.56:64073] [client 85.203.21.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/crop/about.php"] [unique_id "adBeDWJJmfRsTrAKjdTbPAAAAM4"]
[Sat Apr 04 08:40:45.429989 2026] [:error] [pid 37114:tid 37127] [client 85.203.21.48:25281] [client 85.203.21.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "adBeDc-DnSj3fGMexeLT6QAAAQs"]
[Sat Apr 04 08:40:45.629098 2026] [autoindex:error] [pid 2567:tid 2590] [client 85.203.21.17:61185] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:45.726156 2026] [access_compat:error] [pid 2567:tid 2582] [client 85.203.21.17:61185] AH01797: client denied by server configuration: /home/crosscen/public_html/wp-content/updraft/emptydir
[Sat Apr 04 08:40:48.362378 2026] [autoindex:error] [pid 37114:tid 37120] [client 85.203.21.46:34007] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:48.460543 2026] [:error] [pid 37114:tid 37124] [client 85.203.21.46:34007] [client 85.203.21.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "adBeEM-DnSj3fGMexeLUBQAAAQg"]
[Sat Apr 04 08:40:50.840632 2026] [autoindex:error] [pid 2567:tid 2592] [client 85.203.21.53:43497] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:51.456740 2026] [:error] [pid 37114:tid 37127] [client 85.203.21.49:32679] [client 85.203.21.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adBeE8-DnSj3fGMexeLUIAAAAQs"]
[Sat Apr 04 08:40:52.140820 2026] [:error] [pid 2567:tid 2588] [client 85.203.21.14:56027] [client 85.203.21.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "adBeFGJJmfRsTrAKjdTbbgAAAM4"]
[Sat Apr 04 08:40:53.837836 2026] [:error] [pid 2567:tid 2592] [client 85.203.21.26:45897] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "adBeFWJJmfRsTrAKjdTbggAAANI"]
[Sat Apr 04 08:40:55.104647 2026] [autoindex:error] [pid 2567:tid 2587] [client 85.203.21.4:48319] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:56.229310 2026] [autoindex:error] [pid 2567:tid 2584] [client 85.203.21.53:55137] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/post-content/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:40:57.904457 2026] [:error] [pid 37114:tid 37140] [client 85.203.21.7:48227] [client 85.203.21.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/joker.php"] [unique_id "adBeGc-DnSj3fGMexeLURAAAARg"]
[Sat Apr 04 08:40:59.729684 2026] [:error] [pid 37114:tid 37132] [client 85.203.21.43:32421] [client 85.203.21.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comment-date/"] [unique_id "adBeG8-DnSj3fGMexeLUVAAAARA"]
[Sat Apr 04 08:40:59.940039 2026] [:error] [pid 2459:tid 2539] [client 85.203.21.50:51131] [client 85.203.21.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/crop/joker.php"] [unique_id "adBeGwefyCmu4LR_PlqubgAAAIc"]
[Sat Apr 04 08:41:05.393791 2026] [:error] [pid 2567:tid 2593] [client 85.203.21.50:42673] [client 85.203.21.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "adBeIWJJmfRsTrAKjdTbugAAANM"]
[Sat Apr 04 08:41:05.602561 2026] [:error] [pid 2567:tid 2579] [client 85.203.21.43:35419] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "adBeIWJJmfRsTrAKjdTbvQAAAMU"]
[Sat Apr 04 08:41:07.363664 2026] [:error] [pid 2567:tid 2586] [client 85.203.21.7:22741] [client 85.203.21.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "adBeI2JJmfRsTrAKjdTb0gAAAMw"]
[Sat Apr 04 08:41:08.052912 2026] [autoindex:error] [pid 37114:tid 37130] [client 85.203.21.25:60953] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/table/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:41:09.728907 2026] [autoindex:error] [pid 2567:tid 2587] [client 85.203.21.53:43777] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/edit-post/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:41:12.394349 2026] [:error] [pid 2458:tid 2525] [client 85.203.21.21:52845] [client 85.203.21.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-wp-widget-text-cron.php"] [unique_id "adBeKCNozic5SuWqclkRTAAAAFU"]
[Sat Apr 04 08:41:13.101364 2026] [autoindex:error] [pid 2567:tid 2587] [client 85.203.21.15:31049] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:41:13.207423 2026] [autoindex:error] [pid 2567:tid 2576] [client 85.203.21.15:31049] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/home-link/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:41:14.338601 2026] [:error] [pid 37114:tid 37123] [client 85.203.21.25:56547] [client 85.203.21.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/post-template-path.php"] [unique_id "adBeKs-DnSj3fGMexeLUhgAAAQc"]
[Sat Apr 04 08:41:14.536581 2026] [:error] [pid 2567:tid 2577] [client 85.203.21.21:30321] [client 85.203.21.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/plex1.php"] [unique_id "adBeKmJJmfRsTrAKjdTcFgAAAMM"]
[Sat Apr 04 08:41:15.272951 2026] [autoindex:error] [pid 37114:tid 37130] [client 85.203.21.42:34197] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/post-template/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:41:17.411521 2026] [:error] [pid 2567:tid 2582] [client 85.203.21.56:55789] [client 85.203.21.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/nextpage/wp-cron.php"] [unique_id "adBeLWJJmfRsTrAKjdTcLAAAAMg"]
[Sat Apr 04 08:41:19.134906 2026] [:error] [pid 2459:tid 2555] [client 85.203.21.18:39893] [client 85.203.21.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/button/admiin.php"] [unique_id "adBeLwefyCmu4LR_PlqukwAAAJc"]
[Sat Apr 04 08:41:24.986320 2026] [:error] [pid 37114:tid 37131] [client 85.203.21.13:35117] [client 85.203.21.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/plugins/users.php"] [unique_id "adBeNM-DnSj3fGMexeLUrgAAAQ8"]
[Sat Apr 04 08:41:28.309694 2026] [autoindex:error] [pid 37114:tid 37140] [client 85.203.21.2:36847] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/comments-pagination-next/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:41:32.514290 2026] [:error] [pid 2457:tid 2501] [client 85.203.21.47:53155] [client 85.203.21.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/upload.php"] [unique_id "adBePEmNHppaMd92Zpd_NgAAABg"]
[Sat Apr 04 08:41:32.725388 2026] [:error] [pid 2567:tid 2584] [client 85.203.21.10:35695] [client 85.203.21.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp-cron.php"] [unique_id "adBePGJJmfRsTrAKjdTccAAAAMo"]
[Sat Apr 04 08:41:32.921622 2026] [:error] [pid 2457:tid 2498] [client 85.203.21.4:56219] [client 85.203.21.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/plugins/api.php"] [unique_id "adBePEmNHppaMd92Zpd_NwAAABU"]
[Sat Apr 04 08:41:33.119648 2026] [:error] [pid 37114:tid 37133] [client 85.203.21.68:53695] [client 85.203.21.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/panel.php"] [unique_id "adBePc-DnSj3fGMexeLU3AAAARE"]
[Sat Apr 04 08:41:33.813669 2026] [:error] [pid 2567:tid 2598] [client 85.203.21.59:56605] [client 85.203.21.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/tx1.php"] [unique_id "adBePWJJmfRsTrAKjdTceAAAANg"]
[Sat Apr 04 08:41:34.537088 2026] [:error] [pid 2567:tid 2582] [client 85.203.21.42:24305] [client 85.203.21.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "adBePmJJmfRsTrAKjdTcfAAAAMg"]
[Sat Apr 04 08:41:34.733454 2026] [:error] [pid 2567:tid 2589] [client 85.203.21.15:61039] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adBePmJJmfRsTrAKjdTcfgAAAM8"]
[Sat Apr 04 08:41:35.438654 2026] [:error] [pid 2459:tid 2536] [client 85.203.21.47:39251] [client 85.203.21.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/news-portal/sitebar.php"] [unique_id "adBePwefyCmu4LR_PlquvQAAAIU"]
[Sat Apr 04 08:41:36.129055 2026] [:error] [pid 2459:tid 2543] [client 85.203.21.8:40127] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/script-loader-react-refresh.php"] [unique_id "adBeQAefyCmu4LR_PlquvwAAAIs"]
[Sat Apr 04 08:41:38.350562 2026] [:error] [pid 2459:tid 2542] [client 85.203.21.47:57651] [client 85.203.21.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/install-helper-new.php"] [unique_id "adBeQgefyCmu4LR_PlquxQAAAIo"]
[Sat Apr 04 08:41:40.128446 2026] [:error] [pid 2567:tid 2579] [client 85.203.21.50:59011] [client 85.203.21.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/author-template-object.php"] [unique_id "adBeRGJJmfRsTrAKjdTcpAAAAMU"]
[Sat Apr 04 08:41:40.326755 2026] [:error] [pid 37114:tid 37124] [client 85.203.21.55:40217] [client 85.203.21.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/doc.php"] [unique_id "adBeRM-DnSj3fGMexeLU8gAAAQg"]
[Sat Apr 04 08:41:40.524356 2026] [:error] [pid 2459:tid 2538] [client 85.203.21.69:36113] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "adBeRAefyCmu4LR_Plqu1AAAAIY"]
[Sat Apr 04 08:41:40.729841 2026] [:error] [pid 2567:tid 2585] [client 85.203.21.3:49521] [client 85.203.21.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Exception/177.php"] [unique_id "adBeRGJJmfRsTrAKjdTcpgAAAMs"]
[Sat Apr 04 08:41:40.927242 2026] [:error] [pid 37114:tid 37122] [client 85.203.21.34:25677] [client 85.203.21.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/site-title-restful.php"] [unique_id "adBeRM-DnSj3fGMexeLU9gAAAQY"]
[Sat Apr 04 08:41:42.653189 2026] [:error] [pid 37114:tid 37133] [client 85.203.21.42:61035] [client 85.203.21.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.21.42, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-content/fonts/poppins/wp-login.php"] [unique_id "adBeRs-DnSj3fGMexeLU_wAAARE"]
[Sat Apr 04 08:41:43.211603 2026] [:error] [pid 2567:tid 2586] [client 85.203.21.67:29067] [client 85.203.21.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/goods.php"] [unique_id "adBeR2JJmfRsTrAKjdTcsgAAAMw"]
[Sat Apr 04 08:41:45.423116 2026] [:error] [pid 37114:tid 37125] [client 85.203.21.47:31501] [client 85.203.21.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/ftde.php"] [unique_id "adBeSc-DnSj3fGMexeLVCwAAAQk"]
[Sat Apr 04 08:41:46.610019 2026] [autoindex:error] [pid 37114:tid 37140] [client 85.203.21.59:53605] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/comment-reply-link/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:41:46.712831 2026] [autoindex:error] [pid 37114:tid 37136] [client 85.203.21.59:53605] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/pattern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:41:46.817282 2026] [autoindex:error] [pid 37114:tid 37139] [client 85.203.21.59:53605] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:41:47.445700 2026] [autoindex:error] [pid 37114:tid 37135] [client 85.203.21.68:41579] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/skins/lightgray/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:41:48.028625 2026] [autoindex:error] [pid 2458:tid 2524] [client 85.203.21.42:63367] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/legacy-widget/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:41:49.037380 2026] [:error] [pid 37114:tid 37139] [client 85.203.21.69:26573] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "adBeTc-DnSj3fGMexeLVIgAAARc"], referer: http://southerncrosscentre.au/wp-includes/customize/wp-conflg.php?p=
[Sat Apr 04 08:41:49.240110 2026] [autoindex:error] [pid 37114:tid 37127] [client 85.203.21.34:60799] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 04 08:41:52.929466 2026] [:error] [pid 2567:tid 2587] [client 85.203.21.53:35183] [client 85.203.21.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "adBeUGJJmfRsTrAKjdTc4AAAAM0"]
[Sat Apr 04 08:41:54.037445 2026] [proxy_fcgi:error] [pid 2567:tid 2596] [client 85.203.21.20:44157] AH01071: Got error 'PHP message: PHP Warning:  Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/crosscen/public_html/wp-settings.php on line 33PHP message: PHP Warning:  require(ABSPATHwp-includes/version.php): failed to open stream: No such file or directory in /home/crosscen/public_html/wp-settings.php on line 33PHP message: PHP Warning:  require(ABSPATHwp-includes/version.php): failed to open stream: No such file or directory in /home/crosscen/public_html/wp-settings.php on line 33PHP message: PHP Fatal error:  require(): Failed opening required 'ABSPATHwp-includes/version.php' (include_path='.:') in /home/crosscen/public_html/wp-settings.php on line 33'
[Sat Apr 04 08:41:54.235298 2026] [:error] [pid 2567:tid 2575] [client 85.203.21.4:47079] [client 85.203.21.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-blog-header.php"] [unique_id "adBeUmJJmfRsTrAKjdTc6gAAAME"]
[Sat Apr 04 08:41:55.951678 2026] [:error] [pid 2459:tid 2545] [client 85.203.21.2:37557] [client 85.203.21.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/latest-posts.php"] [unique_id "adBeUwefyCmu4LR_PlqvAAAAAI0"]
[Sat Apr 04 08:41:56.147966 2026] [:error] [pid 37114:tid 37132] [client 85.203.21.16:53545] [client 85.203.21.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/rss.php"] [unique_id "adBeVM-DnSj3fGMexeLVSgAAARA"]
[Sat Apr 04 08:41:56.347447 2026] [:error] [pid 2459:tid 2552] [client 85.203.21.48:34117] [client 85.203.21.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/search.php"] [unique_id "adBeVAefyCmu4LR_PlqvAwAAAJQ"]
[Sat Apr 04 08:41:56.547272 2026] [:error] [pid 2459:tid 2541] [client 85.203.21.38:26997] [client 85.203.21.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-comments.php"] [unique_id "adBeVAefyCmu4LR_PlqvBgAAAIk"]
[Sat Apr 04 08:42:00.287241 2026] [:error] [pid 2567:tid 2583] [client 85.203.21.4:53607] [client 85.203.21.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/images/core.php"] [unique_id "adBeWGJJmfRsTrAKjdTdBAAAAMk"]
[Sun Apr 05 05:18:10.180340 2026] [:error] [pid 45305:tid 45391] [client 45.131.195.175:33161] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adGAEujDQjr7aWhjflDyngAAAJQ"]
[Mon Apr 06 20:29:18.710557 2026] [autoindex:error] [pid 10280:tid 10294] [client 51.12.83.215:31210] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 20:29:25.811060 2026] [autoindex:error] [pid 9442:tid 9450] [client 51.12.83.215:29045] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 20:29:50.495131 2026] [:error] [pid 9442:tid 9465] [client 51.12.83.215:26731] [client 51.12.83.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adOnPkPsNnAJTnmz6sbdDgAAARU"]
[Mon Apr 06 20:29:52.079117 2026] [:error] [pid 38562:tid 38573] [client 51.12.83.215:3647] [client 51.12.83.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adOnQKeD6Ohe6wzRuy6LEQAAAUg"]
[Mon Apr 06 20:30:03.204664 2026] [:error] [pid 10280:tid 10294] [client 51.12.83.215:23654] [client 51.12.83.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "adOnS18QUJkf8g-BFfP_aQAAAcs"]
[Mon Apr 06 20:30:09.998646 2026] [:error] [pid 35688:tid 35764] [client 51.12.83.215:3611] [client 51.12.83.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "adOnUeZ85qg4jLsRpQy21QAAAI4"]
[Mon Apr 06 20:30:23.468157 2026] [:error] [pid 9442:tid 9453] [client 51.12.83.215:23635] [client 51.12.83.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adOnX0PsNnAJTnmz6sbdgwAAAQk"]
[Mon Apr 06 20:30:30.607687 2026] [:error] [pid 10280:tid 10305] [client 51.12.83.215:3189] [client 51.12.83.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adOnZl8QUJkf8g-BFfP_uQAAAdY"]
[Mon Apr 06 20:30:32.417931 2026] [:error] [pid 10280:tid 10287] [client 51.12.83.215:26712] [client 51.12.83.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/fm.php"] [unique_id "adOnaF8QUJkf8g-BFfP_vgAAAcQ"]
[Mon Apr 06 20:30:38.524931 2026] [:error] [pid 35688:tid 35756] [client 51.12.83.215:21508] [client 51.12.83.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adOnbuZ85qg4jLsRpQy3RwAAAIY"]
[Mon Apr 06 20:30:41.735419 2026] [:error] [pid 35688:tid 35763] [client 51.12.83.215:24152] [client 51.12.83.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/fm.php"] [unique_id "adOnceZ85qg4jLsRpQy3UwAAAI0"]
[Mon Apr 06 20:30:50.390843 2026] [:error] [pid 1827:tid 1849] [client 51.12.83.215:17401] [client 51.12.83.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adOneuVeb6S_DnjZ2xEVlAAAAhQ"]
[Mon Apr 06 20:30:57.948334 2026] [autoindex:error] [pid 38562:tid 38575] [client 74.248.150.154:3102] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 20:30:58.140181 2026] [autoindex:error] [pid 38562:tid 38574] [client 74.248.150.154:60183] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 20:31:23.782600 2026] [:error] [pid 10280:tid 10285] [client 74.248.150.154:21347] [client 74.248.150.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adOnm18QUJkf8g-BFfMAFgAAAcI"]
[Mon Apr 06 20:31:27.586068 2026] [:error] [pid 9442:tid 9446] [client 74.248.150.154:26561] [client 74.248.150.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adOnn0PsNnAJTnmz6sbelAAAAQI"]
[Mon Apr 06 20:31:47.628956 2026] [:error] [pid 35686:tid 35714] [client 74.248.150.154:3903] [client 74.248.150.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "adOns8MKdea6oORd2fzZKgAAABI"]
[Mon Apr 06 20:31:47.792267 2026] [:error] [pid 9413:tid 9419] [client 74.248.150.154:24813] [client 74.248.150.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "adOns3llvEK3chn01wHFNQAAAYQ"]
[Mon Apr 06 20:32:09.070500 2026] [:error] [pid 35687:tid 35740] [client 74.248.150.154:34539] [client 74.248.150.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adOnyZ3LtDozV0i8BitrjAAAAFE"]
[Mon Apr 06 20:32:09.280751 2026] [:error] [pid 35687:tid 35733] [client 74.248.150.154:45987] [client 74.248.150.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adOnyZ3LtDozV0i8BitrjQAAAEo"]
[Mon Apr 06 20:32:16.452397 2026] [:error] [pid 9442:tid 9448] [client 74.248.150.154:24830] [client 74.248.150.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/fm.php"] [unique_id "adOn0EPsNnAJTnmz6sbfTQAAAQQ"]
[Mon Apr 06 20:32:16.969379 2026] [:error] [pid 9442:tid 9453] [client 74.248.150.154:3901] [client 74.248.150.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/fm.php"] [unique_id "adOn0EPsNnAJTnmz6sbfUgAAAQk"]
[Mon Apr 06 20:32:23.658381 2026] [autoindex:error] [pid 35686:tid 35711] [client 51.12.83.215:26468] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 20:32:26.157898 2026] [:error] [pid 9442:tid 9468] [client 74.248.150.154:19139] [client 74.248.150.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adOn2kPsNnAJTnmz6sbffwAAARg"]
[Mon Apr 06 20:32:26.516232 2026] [autoindex:error] [pid 9442:tid 9464] [client 51.12.83.215:21803] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 20:32:26.887374 2026] [:error] [pid 9442:tid 9446] [client 74.248.150.154:3879] [client 74.248.150.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adOn2kPsNnAJTnmz6sbfhAAAAQI"]
[Mon Apr 06 20:32:27.295737 2026] [autoindex:error] [pid 35786:tid 35814] [client 51.12.83.215:3500] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 20:32:29.919004 2026] [autoindex:error] [pid 10280:tid 10306] [client 51.12.83.215:3874] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 20:33:48.981181 2026] [autoindex:error] [pid 35688:tid 35772] [client 74.248.150.154:46009] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 20:33:50.858103 2026] [autoindex:error] [pid 35688:tid 35756] [client 74.248.150.154:25234] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 20:33:51.628922 2026] [autoindex:error] [pid 35688:tid 35768] [client 74.248.150.154:34496] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 20:33:55.882741 2026] [autoindex:error] [pid 35688:tid 35764] [client 74.248.150.154:25228] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 20:36:08.768553 2026] [autoindex:error] [pid 9442:tid 9461] [client 51.120.80.210:30119] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 20:36:31.689468 2026] [:error] [pid 9413:tid 9430] [client 51.120.80.210:37954] [client 51.120.80.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adOoz3llvEK3chn01wHFugAAAY8"]
[Mon Apr 06 20:36:47.872950 2026] [:error] [pid 38562:tid 38566] [client 51.120.80.210:28700] [client 51.120.80.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "adOo36eD6Ohe6wzRuy6NHQAAAUE"]
[Mon Apr 06 20:37:09.481444 2026] [:error] [pid 35686:tid 35702] [client 51.120.80.210:19991] [client 51.120.80.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adOo9cMKdea6oORd2fzaBwAAAAY"]
[Mon Apr 06 20:37:17.395376 2026] [:error] [pid 1827:tid 1853] [client 51.120.80.210:3543] [client 51.120.80.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/fm.php"] [unique_id "adOo_eVeb6S_DnjZ2xEXSwAAAhg"]
[Mon Apr 06 20:37:25.638312 2026] [:error] [pid 9413:tid 9417] [client 51.120.80.210:18880] [client 51.120.80.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adOpBXllvEK3chn01wHF1AAAAYI"]
[Mon Apr 06 20:39:08.020995 2026] [autoindex:error] [pid 9442:tid 9449] [client 51.120.80.210:38851] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 20:39:11.706282 2026] [autoindex:error] [pid 38562:tid 38580] [client 51.120.80.210:12314] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 20:52:32.824890 2026] [autoindex:error] [pid 1827:tid 1843] [client 98.71.81.80:10473] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 20:52:51.548857 2026] [:error] [pid 9442:tid 9466] [client 98.71.81.80:10368] [client 98.71.81.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adOso0PsNnAJTnmz6sbwVQAAARY"]
[Mon Apr 06 20:53:03.191167 2026] [:error] [pid 1827:tid 1841] [client 98.71.81.80:10462] [client 98.71.81.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "adOsr-Veb6S_DnjZ2xEbRAAAAgw"]
[Mon Apr 06 20:53:30.794469 2026] [:error] [pid 35687:tid 35744] [client 98.71.81.80:3035] [client 98.71.81.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adOsyp3LtDozV0i8BitvlwAAAFU"]
[Mon Apr 06 20:53:39.792853 2026] [:error] [pid 38562:tid 38570] [client 98.71.81.80:2984] [client 98.71.81.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/fm.php"] [unique_id "adOs06eD6Ohe6wzRuy6TJAAAAUU"]
[Mon Apr 06 20:53:44.748616 2026] [:error] [pid 10280:tid 10286] [client 98.71.81.80:3051] [client 98.71.81.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adOs2F8QUJkf8g-BFfMJ_gAAAcM"]
[Mon Apr 06 20:54:58.112596 2026] [autoindex:error] [pid 9413:tid 9439] [client 98.71.81.80:10415] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 20:55:01.415259 2026] [autoindex:error] [pid 9442:tid 9460] [client 98.71.81.80:3029] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 07 10:23:45.098366 2026] [:error] [pid 12948:tid 12955] [client 64.247.196.51:55914] [client 64.247.196.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "adRqscbeSPAN8LvMqsYY7AAAAQQ"]
[Tue Apr 07 10:56:55.600671 2026] [:error] [pid 37596:tid 37611] [client 217.216.72.68:50575] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/"] [unique_id "adRyd6paAOZHEjRWjP1XCgAAAAU"]
[Tue Apr 07 10:56:59.635092 2026] [:error] [pid 37719:tid 37741] [client 217.216.72.68:65435] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/"] [unique_id "adRye009Xv52u2xXGLDvNQAAANM"]
[Tue Apr 07 10:56:59.742728 2026] [:error] [pid 37719:tid 37737] [client 217.216.72.68:65527] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/"] [unique_id "adRye009Xv52u2xXGLDvRAAAAM8"]
[Tue Apr 07 10:57:09.154567 2026] [:error] [pid 59551:tid 59570] [client 217.216.72.68:54320] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "adRyhV7LN7Ubyqs-sVsf1wAAAZE"]
[Tue Apr 07 10:57:09.300319 2026] [:error] [pid 12948:tid 12951] [client 217.216.72.68:54578] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "adRyhcbeSPAN8LvMqsY3JAAAAQA"]
[Tue Apr 07 10:57:22.226297 2026] [:error] [pid 37598:tid 37669] [client 217.216.72.68:60119] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/"] [unique_id "adRyku9g7q_cV2WhPawTtQAAAIg"]
[Tue Apr 07 10:57:22.339842 2026] [:error] [pid 37597:tid 37638] [client 217.216.72.68:61600] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/readme.html"] [unique_id "adRykg6uAY0QAy-8EELALQAAAEQ"]
[Tue Apr 07 16:15:14.943177 2026] [:error] [pid 59551:tid 59561] [client 20.234.6.239:7264] [client 20.234.6.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tinyfilemanager.php"] [unique_id "adS9El7LN7Ubyqs-sVuaWAAAAYg"]
[Tue Apr 07 16:15:37.802935 2026] [autoindex:error] [pid 37598:tid 37684] [client 20.234.6.239:16531] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 07 16:16:23.546695 2026] [autoindex:error] [pid 37597:tid 37636] [client 20.234.6.239:14828] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 07 16:17:08.178815 2026] [autoindex:error] [pid 59660:tid 59678] [client 20.234.6.239:20764] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2021/02/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 07 16:18:04.086969 2026] [:error] [pid 12948:tid 12971] [client 20.234.6.239:15994] [client 20.234.6.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adS9vMbeSPAN8LvMqsZ2AwAAARQ"]
[Tue Apr 07 16:18:13.896954 2026] [autoindex:error] [pid 59660:tid 59668] [client 20.234.6.239:9458] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 07 16:18:14.844337 2026] [autoindex:error] [pid 59660:tid 59672] [client 20.234.6.239:9458] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:25:41.427938 2026] [:error] [pid 47732:tid 47753] [client 103.168.67.159:63822] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "adWulYm4N5QW9Mh7G128WQAAANM"]
[Wed Apr 08 09:25:42.135408 2026] [:error] [pid 47626:tid 47687] [client 103.168.67.159:64182] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "adWulqjWI8TWtHx2sdZKfwAAAFM"]
[Wed Apr 08 09:25:42.834311 2026] [:error] [pid 47732:tid 47743] [client 103.168.67.159:64602] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "adWulom4N5QW9Mh7G128aAAAAMk"]
[Wed Apr 08 09:25:43.542851 2026] [:error] [pid 47732:tid 47754] [client 103.168.67.159:64980] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "adWul4m4N5QW9Mh7G128aQAAANQ"]
[Wed Apr 08 09:25:44.244803 2026] [:error] [pid 47625:tid 47646] [client 103.168.67.159:65362] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dashboard"] [unique_id "adWumCVuHyNWzZlE8PA3awAAAAw"]
[Wed Apr 08 09:25:44.950844 2026] [:error] [pid 47625:tid 47647] [client 103.168.67.159:1214] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dashboard"] [unique_id "adWumCVuHyNWzZlE8PA3fgAAAA0"]
[Wed Apr 08 09:25:45.650027 2026] [:error] [pid 47627:tid 47713] [client 103.168.67.159:1550] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dashboard"] [unique_id "adWumXOljf1Quv_kDjn1JwAAAI4"]
[Wed Apr 08 09:25:46.350532 2026] [:error] [pid 47732:tid 47744] [client 103.168.67.159:1856] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/dashboard"] [unique_id "adWumom4N5QW9Mh7G128ewAAAMo"]
[Thu Apr 09 13:39:43.491643 2026] [proxy_fcgi:error] [pid 24927:tid 24942] [client 128.199.182.55:55158] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:39:44.555542 2026] [proxy_fcgi:error] [pid 24927:tid 24949] [client 128.199.182.55:55168] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:39:45.406864 2026] [proxy_fcgi:error] [pid 24516:tid 24564] [client 128.199.182.55:55170] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:39:46.349384 2026] [authz_core:error] [pid 24515:tid 24543] [client 128.199.182.55:55184] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Thu Apr 09 13:39:48.506918 2026] [proxy_fcgi:error] [pid 24624:tid 24640] [client 128.199.182.55:55186] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:39:49.408940 2026] [proxy_fcgi:error] [pid 24927:tid 24938] [client 128.199.182.55:55196] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:39:50.466574 2026] [proxy_fcgi:error] [pid 24927:tid 24941] [client 128.199.182.55:40654] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:39:50.965488 2026] [proxy_fcgi:error] [pid 24624:tid 24631] [client 128.199.182.55:40662] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:39:51.684412 2026] [:error] [pid 24517:tid 24595] [client 128.199.182.55:40668] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "adc7p3boYEn2ZFM_PS88HwAAAJU"]
[Thu Apr 09 13:39:54.083306 2026] [proxy_fcgi:error] [pid 24624:tid 24641] [client 128.199.182.55:40678] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:39:55.794519 2026] [:error] [pid 24517:tid 24588] [client 128.199.182.55:40688] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "adc7q3boYEn2ZFM_PS88IQAAAI4"]
[Thu Apr 09 13:39:56.965116 2026] [proxy_fcgi:error] [pid 24515:tid 24531] [client 128.199.182.55:40698] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:39:57.438588 2026] [proxy_fcgi:error] [pid 24515:tid 24522] [client 128.199.182.55:40700] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:39:57.997055 2026] [proxy_fcgi:error] [pid 24624:tid 24638] [client 128.199.182.55:40716] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:39:58.450919 2026] [proxy_fcgi:error] [pid 24624:tid 24636] [client 128.199.182.55:40720] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:39:58.907580 2026] [proxy_fcgi:error] [pid 24927:tid 24936] [client 128.199.182.55:40728] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:39:59.386618 2026] [proxy_fcgi:error] [pid 24517:tid 24587] [client 128.199.182.55:40730] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:00.411547 2026] [proxy_fcgi:error] [pid 24624:tid 24639] [client 128.199.182.55:40744] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:02.508188 2026] [proxy_fcgi:error] [pid 24927:tid 24954] [client 128.199.182.55:58212] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:02.700085 2026] [:error] [pid 24624:tid 24634] [client 128.199.182.55:58214] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "adc7su4Jn-WvK1ZBTvhqdwAAAMg"]
[Thu Apr 09 13:40:03.988447 2026] [proxy_fcgi:error] [pid 24927:tid 24941] [client 128.199.182.55:58228] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:04.981767 2026] [proxy_fcgi:error] [pid 24927:tid 24939] [client 128.199.182.55:58230] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:06.013859 2026] [proxy_fcgi:error] [pid 24927:tid 24930] [client 128.199.182.55:58234] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:07.977505 2026] [proxy_fcgi:error] [pid 24927:tid 24932] [client 128.199.182.55:58240] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:09.075439 2026] [proxy_fcgi:error] [pid 24515:tid 24525] [client 128.199.182.55:58252] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:09.995907 2026] [proxy_fcgi:error] [pid 24624:tid 24644] [client 128.199.182.55:58258] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:11.104804 2026] [proxy_fcgi:error] [pid 24517:tid 24597] [client 128.199.182.55:47348] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:11.984014 2026] [proxy_fcgi:error] [pid 24927:tid 24948] [client 128.199.182.55:47352] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:12.978704 2026] [proxy_fcgi:error] [pid 24624:tid 24633] [client 128.199.182.55:47358] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:13.972900 2026] [proxy_fcgi:error] [pid 24624:tid 24648] [client 128.199.182.55:47364] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:14.978523 2026] [proxy_fcgi:error] [pid 24624:tid 24626] [client 128.199.182.55:47376] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:16.104806 2026] [proxy_fcgi:error] [pid 24624:tid 24649] [client 128.199.182.55:47392] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:16.998964 2026] [proxy_fcgi:error] [pid 24624:tid 24628] [client 128.199.182.55:47400] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:17.694496 2026] [:error] [pid 24516:tid 24561] [client 128.199.182.55:47408] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "adc7wdhW7vSS-UkeWCXtswAAAE4"]
[Thu Apr 09 13:40:19.001936 2026] [proxy_fcgi:error] [pid 24516:tid 24553] [client 128.199.182.55:47414] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:19.987588 2026] [proxy_fcgi:error] [pid 24927:tid 24935] [client 128.199.182.55:47420] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:21.011928 2026] [proxy_fcgi:error] [pid 24516:tid 24563] [client 128.199.182.55:36920] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:22.014895 2026] [proxy_fcgi:error] [pid 24515:tid 24537] [client 128.199.182.55:36930] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 13:40:23.029037 2026] [proxy_fcgi:error] [pid 24516:tid 24567] [client 128.199.182.55:36938] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:04.954250 2026] [proxy_fcgi:error] [pid 24517:tid 24593] [client 206.189.225.181:48648] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:05.953220 2026] [proxy_fcgi:error] [pid 24517:tid 24579] [client 206.189.225.181:48650] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:06.892032 2026] [proxy_fcgi:error] [pid 24517:tid 24592] [client 206.189.225.181:48662] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:07.878093 2026] [authz_core:error] [pid 24927:tid 24933] [client 206.189.225.181:48678] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Thu Apr 09 14:16:09.884565 2026] [proxy_fcgi:error] [pid 24624:tid 24637] [client 206.189.225.181:37992] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:10.907345 2026] [proxy_fcgi:error] [pid 24624:tid 24633] [client 206.189.225.181:37994] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:11.927549 2026] [proxy_fcgi:error] [pid 24624:tid 24626] [client 206.189.225.181:37998] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:12.829259 2026] [proxy_fcgi:error] [pid 24624:tid 24648] [client 206.189.225.181:38014] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:13.621057 2026] [:error] [pid 24927:tid 24946] [client 206.189.225.181:38022] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "addELTXObuzEuw8mNJts4wAAARA"]
[Thu Apr 09 14:16:16.015513 2026] [proxy_fcgi:error] [pid 24517:tid 24584] [client 206.189.225.181:38036] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:17.581321 2026] [:error] [pid 24927:tid 24947] [client 206.189.225.181:38042] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "addEMTXObuzEuw8mNJts7wAAARE"]
[Thu Apr 09 14:16:18.865656 2026] [proxy_fcgi:error] [pid 24624:tid 24626] [client 206.189.225.181:37948] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:19.636553 2026] [proxy_fcgi:error] [pid 24927:tid 24941] [client 206.189.225.181:37950] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:20.331514 2026] [proxy_fcgi:error] [pid 24927:tid 24938] [client 206.189.225.181:37956] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:21.025427 2026] [proxy_fcgi:error] [pid 24927:tid 24937] [client 206.189.225.181:37972] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:21.724294 2026] [proxy_fcgi:error] [pid 24927:tid 24953] [client 206.189.225.181:37980] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:22.436462 2026] [proxy_fcgi:error] [pid 24517:tid 24596] [client 206.189.225.181:37982] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:23.431391 2026] [proxy_fcgi:error] [pid 24624:tid 24628] [client 206.189.225.181:37992] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:25.431790 2026] [proxy_fcgi:error] [pid 24515:tid 24533] [client 206.189.225.181:38006] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:25.848598 2026] [:error] [pid 24515:tid 24535] [client 206.189.225.181:38020] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "addEOa1OMnvM2fMnB1M2kwAAABA"]
[Thu Apr 09 14:16:27.128791 2026] [proxy_fcgi:error] [pid 24515:tid 24521] [client 206.189.225.181:38036] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:28.137744 2026] [proxy_fcgi:error] [pid 24624:tid 24629] [client 206.189.225.181:38050] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:29.194965 2026] [proxy_fcgi:error] [pid 24517:tid 24585] [client 206.189.225.181:51882] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:31.232696 2026] [proxy_fcgi:error] [pid 24624:tid 24639] [client 206.189.225.181:51884] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:32.166810 2026] [proxy_fcgi:error] [pid 24516:tid 24560] [client 206.189.225.181:51892] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:33.179877 2026] [proxy_fcgi:error] [pid 24927:tid 24949] [client 206.189.225.181:51898] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:34.173400 2026] [proxy_fcgi:error] [pid 24927:tid 24931] [client 206.189.225.181:51902] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:35.216254 2026] [proxy_fcgi:error] [pid 24927:tid 24952] [client 206.189.225.181:51916] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:36.162842 2026] [proxy_fcgi:error] [pid 24624:tid 24630] [client 206.189.225.181:51924] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:37.163346 2026] [proxy_fcgi:error] [pid 24927:tid 24933] [client 206.189.225.181:51928] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:38.162341 2026] [proxy_fcgi:error] [pid 24624:tid 24646] [client 206.189.225.181:51936] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:39.178037 2026] [proxy_fcgi:error] [pid 24624:tid 24638] [client 206.189.225.181:52526] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:40.178846 2026] [proxy_fcgi:error] [pid 24517:tid 24583] [client 206.189.225.181:52542] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:40.872685 2026] [:error] [pid 24927:tid 24948] [client 206.189.225.181:52544] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "addESDXObuzEuw8mNJttKAAAARI"]
[Thu Apr 09 14:16:42.191024 2026] [proxy_fcgi:error] [pid 24624:tid 24630] [client 206.189.225.181:52554] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:43.178379 2026] [proxy_fcgi:error] [pid 24517:tid 24587] [client 206.189.225.181:52560] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:44.214120 2026] [proxy_fcgi:error] [pid 24624:tid 24646] [client 206.189.225.181:52562] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:45.232687 2026] [proxy_fcgi:error] [pid 24624:tid 24636] [client 206.189.225.181:52564] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:16:46.226816 2026] [proxy_fcgi:error] [pid 24624:tid 24631] [client 206.189.225.181:52578] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:18:27.770334 2026] [proxy_fcgi:error] [pid 24624:tid 24638] [client 20.220.57.112:4887] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 14:18:28.584043 2026] [proxy_fcgi:error] [pid 24515:tid 24525] [client 20.220.57.112:4330] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 15:49:02.712120 2026] [proxy_fcgi:error] [pid 24927:tid 24951] [client 93.158.91.237:38835] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 15:49:04.404352 2026] [proxy_fcgi:error] [pid 20837:tid 20843] [client 192.36.53.210:44567] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 18:48:30.540105 2026] [proxy_fcgi:error] [pid 24515:tid 24521] [client 74.7.227.177:51258] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 18:48:31.675694 2026] [proxy_fcgi:error] [pid 24515:tid 24537] [client 74.7.175.163:59810] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 19:14:35.485666 2026] [proxy_fcgi:error] [pid 18477:tid 18488] [client 74.7.227.159:44792] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 09 19:14:35.579954 2026] [proxy_fcgi:error] [pid 24927:tid 24953] [client 74.7.228.27:39966] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 07:21:22.889458 2026] [:error] [pid 12685:tid 12706] [client 192.227.231.190:35778] [client 192.227.231.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.southerncrosscentre.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.southerncrosscentre.au"] [uri "/"] [unique_id "adg0cs8f5ssYShsynaqKrwAAANM"], referer: https://www.google.com/search?q=aspx
[Fri Apr 10 09:40:35.330610 2026] [proxy_fcgi:error] [pid 13102:tid 13175] [client 64.15.129.117:62531] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 11:00:41.840825 2026] [proxy_fcgi:error] [pid 13101:tid 13134] [client 74.208.238.0:39568] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 13:10:30.427132 2026] [proxy_fcgi:error] [pid 3934:tid 3946] [client 198.211.107.37:39638] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 13:10:31.194733 2026] [proxy_fcgi:error] [pid 3934:tid 3950] [client 198.211.107.37:39654] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: http://southerncrosscentre.au/
[Fri Apr 10 13:10:32.797582 2026] [proxy_fcgi:error] [pid 13189:tid 13193] [client 198.211.107.37:35652] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 13:10:38.556087 2026] [proxy_fcgi:error] [pid 3934:tid 3953] [client 198.211.107.37:39038] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/
[Fri Apr 10 14:11:04.029868 2026] [proxy_fcgi:error] [pid 13101:tid 13148] [client 3.254.1.198:43288] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 14:17:53.161656 2026] [proxy_fcgi:error] [pid 13189:tid 13194] [client 192.175.111.243:32206] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 14:17:54.677430 2026] [proxy_fcgi:error] [pid 13102:tid 13166] [client 64.15.129.109:38731] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 14:17:57.574969 2026] [proxy_fcgi:error] [pid 13102:tid 13181] [client 64.15.129.118:15962] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 14:17:58.562814 2026] [proxy_fcgi:error] [pid 3934:tid 3943] [client 64.15.129.110:50846] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 14:18:03.023123 2026] [proxy_fcgi:error] [pid 13101:tid 13150] [client 64.15.129.117:21822] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 14:18:04.490266 2026] [proxy_fcgi:error] [pid 3934:tid 3954] [client 64.15.129.112:44933] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 14:18:08.528997 2026] [proxy_fcgi:error] [pid 13189:tid 13210] [client 64.15.129.106:29778] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 14:18:09.606866 2026] [proxy_fcgi:error] [pid 13189:tid 13216] [client 192.175.111.242:18474] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 17:52:44.418257 2026] [proxy_fcgi:error] [pid 13102:tid 13168] [client 34.253.44.136:51592] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:09:54.785515 2026] [proxy_fcgi:error] [pid 62769:tid 62774] [client 74.248.114.205:54089] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:09:55.610682 2026] [proxy_fcgi:error] [pid 63134:tid 63141] [client 74.248.114.205:11660] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:09:56.434258 2026] [proxy_fcgi:error] [pid 62884:tid 62895] [client 74.248.114.205:54119] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:09:57.254068 2026] [proxy_fcgi:error] [pid 62710:tid 62721] [client 74.248.114.205:11663] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:09:58.063104 2026] [proxy_fcgi:error] [pid 63062:tid 63064] [client 74.248.114.205:54088] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:09:58.872699 2026] [proxy_fcgi:error] [pid 62769:tid 62773] [client 74.248.114.205:54124] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:09:59.714173 2026] [proxy_fcgi:error] [pid 13189:tid 13214] [client 74.248.114.205:54109] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:00.588018 2026] [proxy_fcgi:error] [pid 13189:tid 13210] [client 74.248.114.205:54095] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:01.405902 2026] [proxy_fcgi:error] [pid 62710:tid 62730] [client 74.248.114.205:54091] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:02.210035 2026] [proxy_fcgi:error] [pid 63134:tid 63157] [client 74.248.114.205:54141] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:03.010971 2026] [proxy_fcgi:error] [pid 62651:tid 62659] [client 74.248.114.205:11661] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:03.819447 2026] [proxy_fcgi:error] [pid 62819:tid 62825] [client 74.248.114.205:54113] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:04.633336 2026] [proxy_fcgi:error] [pid 62884:tid 62914] [client 74.248.114.205:54135] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:05.437998 2026] [proxy_fcgi:error] [pid 62884:tid 62904] [client 74.248.114.205:11664] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:06.255560 2026] [proxy_fcgi:error] [pid 62819:tid 62837] [client 74.248.114.205:54096] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:07.060614 2026] [proxy_fcgi:error] [pid 13189:tid 13194] [client 74.248.114.205:11785] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:07.869607 2026] [proxy_fcgi:error] [pid 13101:tid 13148] [client 74.248.114.205:54117] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:08.669159 2026] [proxy_fcgi:error] [pid 62769:tid 62771] [client 74.248.114.205:11692] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:09.478813 2026] [proxy_fcgi:error] [pid 13189:tid 13195] [client 74.248.114.205:54110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:10.280164 2026] [proxy_fcgi:error] [pid 13100:tid 13117] [client 74.248.114.205:54127] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:11.077259 2026] [proxy_fcgi:error] [pid 13189:tid 13199] [client 74.248.114.205:11695] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:11.872769 2026] [proxy_fcgi:error] [pid 62710:tid 62717] [client 74.248.114.205:54114] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:12.714051 2026] [proxy_fcgi:error] [pid 13189:tid 13198] [client 74.248.114.205:11665] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:13.518052 2026] [proxy_fcgi:error] [pid 62884:tid 62905] [client 74.248.114.205:54080] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:14.312222 2026] [proxy_fcgi:error] [pid 62884:tid 62896] [client 74.248.114.205:11671] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:15.133328 2026] [proxy_fcgi:error] [pid 62710:tid 62716] [client 74.248.114.205:54106] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:15.934159 2026] [proxy_fcgi:error] [pid 63062:tid 63083] [client 74.248.114.205:11667] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:16.744016 2026] [proxy_fcgi:error] [pid 62651:tid 62675] [client 74.248.114.205:54143] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:17.560313 2026] [proxy_fcgi:error] [pid 13189:tid 13216] [client 74.248.114.205:11674] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:18.366124 2026] [proxy_fcgi:error] [pid 62884:tid 62899] [client 74.248.114.205:54136] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:19.177063 2026] [proxy_fcgi:error] [pid 13189:tid 13196] [client 74.248.114.205:11648] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:19.972810 2026] [proxy_fcgi:error] [pid 62769:tid 62772] [client 74.248.114.205:11652] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:20.781779 2026] [proxy_fcgi:error] [pid 62769:tid 62781] [client 74.248.114.205:11685] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:21.585443 2026] [proxy_fcgi:error] [pid 62710:tid 62719] [client 74.248.114.205:11837] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:22.388050 2026] [proxy_fcgi:error] [pid 62710:tid 62736] [client 74.248.114.205:54139] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:23.210360 2026] [proxy_fcgi:error] [pid 13101:tid 13149] [client 74.248.114.205:54103] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:24.052863 2026] [proxy_fcgi:error] [pid 13101:tid 13143] [client 74.248.114.205:11658] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:24.868624 2026] [proxy_fcgi:error] [pid 13100:tid 13119] [client 74.248.114.205:54111] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:25.701603 2026] [proxy_fcgi:error] [pid 63062:tid 63086] [client 74.248.114.205:11678] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:26.500053 2026] [proxy_fcgi:error] [pid 13101:tid 13141] [client 74.248.114.205:54092] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:27.305707 2026] [proxy_fcgi:error] [pid 62769:tid 62775] [client 74.248.114.205:54121] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:28.122368 2026] [proxy_fcgi:error] [pid 62769:tid 62790] [client 74.248.114.205:54112] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:28.919657 2026] [proxy_fcgi:error] [pid 62769:tid 62787] [client 74.248.114.205:11679] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:29.716510 2026] [proxy_fcgi:error] [pid 62819:tid 62826] [client 74.248.114.205:54131] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:30.517980 2026] [proxy_fcgi:error] [pid 13189:tid 13200] [client 74.248.114.205:54085] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:31.314507 2026] [proxy_fcgi:error] [pid 13189:tid 13198] [client 74.248.114.205:54083] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:32.150720 2026] [proxy_fcgi:error] [pid 62710:tid 62717] [client 74.248.114.205:11777] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:32.993983 2026] [proxy_fcgi:error] [pid 13189:tid 13192] [client 74.248.114.205:11669] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:33.782276 2026] [proxy_fcgi:error] [pid 13101:tid 13147] [client 74.248.114.205:11672] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:34.577208 2026] [proxy_fcgi:error] [pid 13101:tid 13149] [client 74.248.114.205:54132] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:10:35.383314 2026] [proxy_fcgi:error] [pid 62651:tid 62672] [client 74.248.114.205:54090] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 10 23:45:30.450203 2026] [proxy_fcgi:error] [pid 13189:tid 13201] [client 138.246.253.24:34608] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:33.438840 2026] [proxy_fcgi:error] [pid 2812:tid 2824] [client 51.107.88.105:12048] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:34.242600 2026] [proxy_fcgi:error] [pid 2812:tid 2817] [client 51.107.88.105:11713] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:35.044081 2026] [proxy_fcgi:error] [pid 2812:tid 2827] [client 51.107.88.105:11335] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:35.868316 2026] [proxy_fcgi:error] [pid 2812:tid 2823] [client 51.107.88.105:12122] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:36.722472 2026] [proxy_fcgi:error] [pid 2812:tid 2833] [client 51.107.88.105:11587] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:37.511558 2026] [proxy_fcgi:error] [pid 2723:tid 2796] [client 51.107.88.105:11611] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:38.298454 2026] [proxy_fcgi:error] [pid 2812:tid 2825] [client 51.107.88.105:12133] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:39.058744 2026] [proxy_fcgi:error] [pid 2723:tid 2783] [client 51.107.88.105:12139] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:39.898914 2026] [proxy_fcgi:error] [pid 2723:tid 2782] [client 51.107.88.105:11363] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:40.695942 2026] [proxy_fcgi:error] [pid 2812:tid 2827] [client 51.107.88.105:11751] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:41.518346 2026] [proxy_fcgi:error] [pid 2723:tid 2797] [client 51.107.88.105:12054] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:42.357784 2026] [proxy_fcgi:error] [pid 2812:tid 2837] [client 51.107.88.105:11621] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:43.146769 2026] [proxy_fcgi:error] [pid 2812:tid 2838] [client 51.107.88.105:12145] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:43.940133 2026] [proxy_fcgi:error] [pid 2722:tid 2758] [client 51.107.88.105:11593] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:44.716318 2026] [proxy_fcgi:error] [pid 2812:tid 2820] [client 51.107.88.105:12068] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:45.507610 2026] [proxy_fcgi:error] [pid 2812:tid 2836] [client 51.107.88.105:12092] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:46.319289 2026] [proxy_fcgi:error] [pid 2723:tid 2785] [client 51.107.88.105:12065] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:47.108472 2026] [proxy_fcgi:error] [pid 2812:tid 2823] [client 51.107.88.105:11590] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:47.921883 2026] [proxy_fcgi:error] [pid 2812:tid 2830] [client 51.107.88.105:12144] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:48.735406 2026] [proxy_fcgi:error] [pid 2723:tid 2795] [client 51.107.88.105:12127] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:49.577879 2026] [proxy_fcgi:error] [pid 2722:tid 2768] [client 51.107.88.105:12072] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:50.383767 2026] [proxy_fcgi:error] [pid 2812:tid 2833] [client 51.107.88.105:11740] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:51.179965 2026] [proxy_fcgi:error] [pid 2723:tid 2787] [client 51.107.88.105:11329] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:51.987567 2026] [proxy_fcgi:error] [pid 2722:tid 2760] [client 51.107.88.105:11725] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:52.775221 2026] [proxy_fcgi:error] [pid 2722:tid 2757] [client 51.107.88.105:11637] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:53.693414 2026] [proxy_fcgi:error] [pid 2723:tid 2799] [client 51.107.88.105:11631] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:54.489298 2026] [proxy_fcgi:error] [pid 2723:tid 2782] [client 51.107.88.105:11754] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:55.487324 2026] [proxy_fcgi:error] [pid 2722:tid 2764] [client 51.107.88.105:11635] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:56.269930 2026] [proxy_fcgi:error] [pid 2722:tid 2777] [client 51.107.88.105:12044] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:57.112260 2026] [proxy_fcgi:error] [pid 2722:tid 2774] [client 51.107.88.105:11743] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:57.881842 2026] [proxy_fcgi:error] [pid 2722:tid 2753] [client 51.107.88.105:11734] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:58.666745 2026] [proxy_fcgi:error] [pid 2722:tid 2760] [client 51.107.88.105:11585] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:58:59.516888 2026] [proxy_fcgi:error] [pid 2723:tid 2783] [client 51.107.88.105:12046] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:00.310777 2026] [proxy_fcgi:error] [pid 2722:tid 2758] [client 51.107.88.105:11641] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:01.138458 2026] [proxy_fcgi:error] [pid 2721:tid 2750] [client 51.107.88.105:11717] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:01.914198 2026] [proxy_fcgi:error] [pid 2722:tid 2754] [client 51.107.88.105:11376] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:02.710499 2026] [proxy_fcgi:error] [pid 2723:tid 2793] [client 51.107.88.105:11630] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:03.480471 2026] [proxy_fcgi:error] [pid 2723:tid 2801] [client 51.107.88.105:11730] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:04.289926 2026] [proxy_fcgi:error] [pid 2722:tid 2773] [client 51.107.88.105:12073] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:05.045678 2026] [proxy_fcgi:error] [pid 2723:tid 2797] [client 51.107.88.105:11724] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:05.844829 2026] [proxy_fcgi:error] [pid 2812:tid 2817] [client 51.107.88.105:12142] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:06.613182 2026] [proxy_fcgi:error] [pid 2812:tid 2824] [client 51.107.88.105:12108] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:07.424685 2026] [proxy_fcgi:error] [pid 2722:tid 2767] [client 51.107.88.105:12118] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:08.220207 2026] [proxy_fcgi:error] [pid 2722:tid 2756] [client 51.107.88.105:11614] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:09.031327 2026] [proxy_fcgi:error] [pid 2723:tid 2780] [client 51.107.88.105:11341] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:09.796451 2026] [proxy_fcgi:error] [pid 2723:tid 2791] [client 51.107.88.105:11771] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:10.747080 2026] [proxy_fcgi:error] [pid 2812:tid 2829] [client 51.107.88.105:12134] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:11.627402 2026] [proxy_fcgi:error] [pid 2812:tid 2836] [client 51.107.88.105:11588] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:12.525500 2026] [proxy_fcgi:error] [pid 2722:tid 2757] [client 51.107.88.105:11696] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:13.363863 2026] [proxy_fcgi:error] [pid 2812:tid 2819] [client 51.107.88.105:11355] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:14.142631 2026] [proxy_fcgi:error] [pid 2812:tid 2826] [client 51.107.88.105:12080] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:14.970153 2026] [proxy_fcgi:error] [pid 2721:tid 2726] [client 51.107.88.105:12136] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:15.763669 2026] [proxy_fcgi:error] [pid 2723:tid 2788] [client 51.107.88.105:11597] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:16.766725 2026] [proxy_fcgi:error] [pid 2721:tid 2744] [client 51.107.88.105:12102] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:17.823038 2026] [proxy_fcgi:error] [pid 2723:tid 2784] [client 51.107.88.105:11747] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:18.601103 2026] [proxy_fcgi:error] [pid 2721:tid 2730] [client 51.107.88.105:11591] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:19.467491 2026] [proxy_fcgi:error] [pid 2721:tid 2743] [client 51.107.88.105:11774] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:20.268967 2026] [proxy_fcgi:error] [pid 2723:tid 2786] [client 51.107.88.105:11328] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:21.052247 2026] [proxy_fcgi:error] [pid 2723:tid 2801] [client 51.107.88.105:11370] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:21.841520 2026] [proxy_fcgi:error] [pid 2723:tid 2793] [client 51.107.88.105:12085] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:22.658392 2026] [proxy_fcgi:error] [pid 2722:tid 2764] [client 51.107.88.105:11364] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:23.524919 2026] [proxy_fcgi:error] [pid 2723:tid 2797] [client 51.107.88.105:11608] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:24.327480 2026] [proxy_fcgi:error] [pid 2722:tid 2756] [client 51.107.88.105:12163] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:25.123541 2026] [proxy_fcgi:error] [pid 2721:tid 2734] [client 51.107.88.105:11633] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:25.879771 2026] [proxy_fcgi:error] [pid 2723:tid 2801] [client 51.107.88.105:12116] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:26.668504 2026] [proxy_fcgi:error] [pid 2722:tid 2771] [client 51.107.88.105:12069] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:27.441014 2026] [proxy_fcgi:error] [pid 2722:tid 2775] [client 51.107.88.105:11361] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:28.216337 2026] [proxy_fcgi:error] [pid 2812:tid 2820] [client 51.107.88.105:12112] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:28.987023 2026] [proxy_fcgi:error] [pid 2722:tid 2772] [client 51.107.88.105:12093] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:29.759023 2026] [proxy_fcgi:error] [pid 2812:tid 2823] [client 51.107.88.105:11721] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:30.571416 2026] [proxy_fcgi:error] [pid 2722:tid 2767] [client 51.107.88.105:11745] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:31.352496 2026] [proxy_fcgi:error] [pid 2722:tid 2771] [client 51.107.88.105:11388] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:32.205327 2026] [proxy_fcgi:error] [pid 2721:tid 2732] [client 51.107.88.105:12050] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:33.048221 2026] [proxy_fcgi:error] [pid 2721:tid 2740] [client 51.107.88.105:11712] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:33.863895 2026] [proxy_fcgi:error] [pid 2721:tid 2726] [client 51.107.88.105:11757] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:34.948991 2026] [proxy_fcgi:error] [pid 2722:tid 2772] [client 51.107.88.105:11944] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:35.736423 2026] [proxy_fcgi:error] [pid 2721:tid 2727] [client 51.107.88.105:11741] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:36.540940 2026] [proxy_fcgi:error] [pid 2722:tid 2756] [client 51.107.88.105:11514] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:37.321572 2026] [proxy_fcgi:error] [pid 2721:tid 2747] [client 51.107.88.105:12110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:38.145058 2026] [proxy_fcgi:error] [pid 2722:tid 2758] [client 51.107.88.105:11616] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:38.951180 2026] [proxy_fcgi:error] [pid 2812:tid 2835] [client 51.107.88.105:12178] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:39.739218 2026] [proxy_fcgi:error] [pid 2723:tid 2803] [client 51.107.88.105:12114] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:40.554769 2026] [proxy_fcgi:error] [pid 2721:tid 2741] [client 51.107.88.105:11357] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:41.333153 2026] [proxy_fcgi:error] [pid 2812:tid 2824] [client 51.107.88.105:12079] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:42.104378 2026] [proxy_fcgi:error] [pid 2723:tid 2797] [client 51.107.88.105:12149] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:42.900869 2026] [proxy_fcgi:error] [pid 2723:tid 2788] [client 51.107.88.105:11719] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:43.675049 2026] [proxy_fcgi:error] [pid 2723:tid 2801] [client 51.107.88.105:11655] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:44.560273 2026] [proxy_fcgi:error] [pid 2721:tid 2746] [client 51.107.88.105:12098] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:45.378305 2026] [proxy_fcgi:error] [pid 2812:tid 2824] [client 51.107.88.105:12062] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:46.151091 2026] [proxy_fcgi:error] [pid 2812:tid 2815] [client 51.107.88.105:11338] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:46.914285 2026] [proxy_fcgi:error] [pid 2812:tid 2834] [client 51.107.88.105:11379] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:47.700308 2026] [proxy_fcgi:error] [pid 2812:tid 2838] [client 51.107.88.105:11606] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:48.512625 2026] [proxy_fcgi:error] [pid 2721:tid 2746] [client 51.107.88.105:12101] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:49.300649 2026] [proxy_fcgi:error] [pid 2812:tid 2832] [client 51.107.88.105:11642] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:50.063399 2026] [proxy_fcgi:error] [pid 2722:tid 2775] [client 51.107.88.105:12058] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:50.828605 2026] [proxy_fcgi:error] [pid 2812:tid 2838] [client 51.107.88.105:12075] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:51.601656 2026] [proxy_fcgi:error] [pid 2721:tid 2736] [client 51.107.88.105:11342] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:52.393290 2026] [proxy_fcgi:error] [pid 2812:tid 2831] [client 51.107.88.105:12151] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:52.916135 2026] [proxy_fcgi:error] [pid 2812:tid 2818] [client 51.107.88.105:12151] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:53.769199 2026] [proxy_fcgi:error] [pid 2812:tid 2833] [client 51.107.88.105:12217] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:54.544726 2026] [proxy_fcgi:error] [pid 2723:tid 2801] [client 51.107.88.105:11365] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:55.308917 2026] [proxy_fcgi:error] [pid 2723:tid 2797] [client 51.107.88.105:12097] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:56.097766 2026] [proxy_fcgi:error] [pid 2721:tid 2728] [client 51.107.88.105:12185] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:56.856177 2026] [proxy_fcgi:error] [pid 2812:tid 2827] [client 51.107.88.105:11601] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:57.668012 2026] [proxy_fcgi:error] [pid 2723:tid 2802] [client 51.107.88.105:12078] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:58.450090 2026] [proxy_fcgi:error] [pid 2812:tid 2823] [client 51.107.88.105:11347] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 03:59:59.251684 2026] [proxy_fcgi:error] [pid 2812:tid 2834] [client 51.107.88.105:12206] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 04:00:00.024896 2026] [proxy_fcgi:error] [pid 2812:tid 2839] [client 51.107.88.105:11663] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 04:00:00.798526 2026] [proxy_fcgi:error] [pid 2721:tid 2737] [client 51.107.88.105:11610] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 04:00:01.606063 2026] [proxy_fcgi:error] [pid 2722:tid 2768] [client 51.107.88.105:11604] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 04:00:02.414060 2026] [proxy_fcgi:error] [pid 2812:tid 2818] [client 51.107.88.105:11602] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 04:00:03.190404 2026] [proxy_fcgi:error] [pid 2812:tid 2830] [client 51.107.88.105:12088] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 04:00:03.971509 2026] [proxy_fcgi:error] [pid 2721:tid 2742] [client 51.107.88.105:12204] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 04:00:04.777975 2026] [proxy_fcgi:error] [pid 2722:tid 2760] [client 51.107.88.105:11726] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 04:00:05.570438 2026] [proxy_fcgi:error] [pid 2721:tid 2738] [client 51.107.88.105:12126] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 04:00:06.143518 2026] [proxy_fcgi:error] [pid 2721:tid 2748] [client 51.107.88.105:12126] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 04:00:06.961491 2026] [proxy_fcgi:error] [pid 2721:tid 2741] [client 51.107.88.105:11744] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 04:00:07.726930 2026] [proxy_fcgi:error] [pid 2722:tid 2763] [client 51.107.88.105:11330] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 04:00:08.495437 2026] [proxy_fcgi:error] [pid 2722:tid 2757] [client 51.107.88.105:11735] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 04:00:09.001057 2026] [:error] [pid 2721:tid 2748] [client 51.107.88.105:11353] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/jlex.php"] [unique_id "adlWyDZWWL4OaRcuwkjH9QAAABY"]
[Sat Apr 11 04:00:09.473140 2026] [:error] [pid 2722:tid 2777] [client 51.107.88.105:11589] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/jlex.php"] [unique_id "adlWyY_R23QDTmaQHyGBiAAAAFg"]
[Sat Apr 11 04:00:09.939769 2026] [:error] [pid 2812:tid 2828] [client 51.107.88.105:12152] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/jlex.php"] [unique_id "adlWydmkbBYp4LlMowsDkAAAAM0"]
[Sat Apr 11 04:00:10.414269 2026] [:error] [pid 2812:tid 2825] [client 51.107.88.105:12121] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/jlex.php"] [unique_id "adlWytmkbBYp4LlMowsDlwAAAMo"]
[Sat Apr 11 04:00:10.880827 2026] [:error] [pid 2723:tid 2781] [client 51.107.88.105:12113] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xsas.php"] [unique_id "adlWyoNy3DfGNAwLjcOydQAAAIE"]
[Sat Apr 11 04:00:11.350137 2026] [:error] [pid 2721:tid 2727] [client 51.107.88.105:11334] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xsas.php"] [unique_id "adlWyzZWWL4OaRcuwkjIAAAAAAE"]
[Sat Apr 11 04:00:11.839021 2026] [:error] [pid 2722:tid 2776] [client 51.107.88.105:11372] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xsas.php"] [unique_id "adlWy4_R23QDTmaQHyGBkAAAAFc"]
[Sat Apr 11 04:00:12.309198 2026] [:error] [pid 2721:tid 2748] [client 51.107.88.105:11773] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xsas.php"] [unique_id "adlWzDZWWL4OaRcuwkjIAgAAABY"]
[Sat Apr 11 04:00:12.795277 2026] [:error] [pid 2723:tid 2791] [client 51.107.88.105:11626] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp/jp.php"] [unique_id "adlWzINy3DfGNAwLjcOyegAAAIs"]
[Sat Apr 11 04:00:13.286619 2026] [:error] [pid 2722:tid 2755] [client 51.107.88.105:12049] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp/jp.php"] [unique_id "adlWzY_R23QDTmaQHyGBlwAAAEI"]
[Sat Apr 11 04:00:13.757695 2026] [:error] [pid 2721:tid 2730] [client 51.107.88.105:12160] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp/jp.php"] [unique_id "adlWzTZWWL4OaRcuwkjIDAAAAAQ"]
[Sat Apr 11 04:00:14.224662 2026] [:error] [pid 2812:tid 2824] [client 51.107.88.105:11722] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp/jp.php"] [unique_id "adlWztmkbBYp4LlMowsDqQAAAMk"]
[Sat Apr 11 04:00:14.704420 2026] [:error] [pid 2721:tid 2726] [client 51.107.88.105:11343] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/8573.php"] [unique_id "adlWzjZWWL4OaRcuwkjIEgAAAAA"]
[Sat Apr 11 04:00:15.207871 2026] [:error] [pid 2721:tid 2741] [client 51.107.88.105:12135] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/8573.php"] [unique_id "adlWzzZWWL4OaRcuwkjIFgAAAA8"]
[Sat Apr 11 04:00:15.676085 2026] [:error] [pid 2723:tid 2793] [client 51.107.88.105:11612] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/8573.php"] [unique_id "adlWz4Ny3DfGNAwLjcOyfwAAAI0"]
[Sat Apr 11 04:00:16.146496 2026] [:error] [pid 2722:tid 2775] [client 51.107.88.105:11708] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/8573.php"] [unique_id "adlW0I_R23QDTmaQHyGBogAAAFY"]
[Sat Apr 11 04:00:16.619853 2026] [:error] [pid 2812:tid 2839] [client 51.107.88.105:11607] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp5.php"] [unique_id "adlW0NmkbBYp4LlMowsDsQAAANg"]
[Sat Apr 11 04:00:17.109295 2026] [:error] [pid 2812:tid 2817] [client 51.107.88.105:11337] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp5.php"] [unique_id "adlW0dmkbBYp4LlMowsDtQAAAMI"]
[Sat Apr 11 04:00:17.578702 2026] [:error] [pid 2812:tid 2838] [client 51.107.88.105:11622] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp5.php"] [unique_id "adlW0dmkbBYp4LlMowsDtwAAANc"]
[Sat Apr 11 04:00:18.050993 2026] [:error] [pid 2723:tid 2789] [client 51.107.88.105:11511] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp5.php"] [unique_id "adlW0oNy3DfGNAwLjcOyhwAAAIk"]
[Sat Apr 11 04:00:18.516464 2026] [:error] [pid 2812:tid 2822] [client 51.107.88.105:12174] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp9.php"] [unique_id "adlW0tmkbBYp4LlMowsDvwAAAMc"]
[Sat Apr 11 04:00:18.979892 2026] [:error] [pid 2812:tid 2825] [client 51.107.88.105:12084] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp9.php"] [unique_id "adlW0tmkbBYp4LlMowsDwgAAAMo"]
[Sat Apr 11 04:00:19.446434 2026] [:error] [pid 2812:tid 2817] [client 51.107.88.105:11733] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp9.php"] [unique_id "adlW09mkbBYp4LlMowsDxgAAAMI"]
[Sat Apr 11 04:00:19.923609 2026] [:error] [pid 2723:tid 2793] [client 51.107.88.105:11938] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp9.php"] [unique_id "adlW04Ny3DfGNAwLjcOyjgAAAI0"]
[Sat Apr 11 04:00:20.389109 2026] [:error] [pid 2723:tid 2794] [client 51.107.88.105:12167] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ws88.php"] [unique_id "adlW1INy3DfGNAwLjcOykQAAAI4"]
[Sat Apr 11 04:00:20.861869 2026] [:error] [pid 2812:tid 2832] [client 51.107.88.105:11742] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ws88.php"] [unique_id "adlW1NmkbBYp4LlMowsD0AAAANE"]
[Sat Apr 11 04:00:21.387524 2026] [:error] [pid 2722:tid 2769] [client 51.107.88.105:11958] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ws88.php"] [unique_id "adlW1Y_R23QDTmaQHyGBsQAAAFA"]
[Sat Apr 11 04:00:21.862650 2026] [:error] [pid 2722:tid 2776] [client 51.107.88.105:12103] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ws88.php"] [unique_id "adlW1Y_R23QDTmaQHyGBswAAAFc"]
[Sat Apr 11 04:00:22.350423 2026] [:error] [pid 2812:tid 2827] [client 51.107.88.105:11351] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/motu.php"] [unique_id "adlW1tmkbBYp4LlMowsD1wAAAMw"]
[Sat Apr 11 04:00:22.932262 2026] [:error] [pid 2812:tid 2816] [client 51.107.88.105:12100] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/motu.php"] [unique_id "adlW1tmkbBYp4LlMowsD3AAAAME"]
[Sat Apr 11 04:00:23.445971 2026] [:error] [pid 2812:tid 2827] [client 51.107.88.105:12159] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/motu.php"] [unique_id "adlW19mkbBYp4LlMowsD5gAAAMw"]
[Sat Apr 11 04:00:23.968089 2026] [:error] [pid 2723:tid 2790] [client 51.107.88.105:11485] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/motu.php"] [unique_id "adlW14Ny3DfGNAwLjcOypwAAAIo"]
[Sat Apr 11 04:00:24.497338 2026] [:error] [pid 2722:tid 2774] [client 51.107.88.105:12158] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlW2I_R23QDTmaQHyGBwAAAAFU"]
[Sat Apr 11 04:00:25.015761 2026] [:error] [pid 2723:tid 2792] [client 51.107.88.105:12106] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlW2YNy3DfGNAwLjcOyrAAAAIw"]
[Sat Apr 11 04:00:25.525948 2026] [:error] [pid 2812:tid 2836] [client 51.107.88.105:11748] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlW2dmkbBYp4LlMowsD8gAAANU"]
[Sat Apr 11 04:00:26.025488 2026] [:error] [pid 2723:tid 2798] [client 51.107.88.105:11358] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlW2oNy3DfGNAwLjcOysQAAAJI"]
[Sat Apr 11 06:26:36.877990 2026] [:error] [pid 33172:tid 33241] [client 20.251.36.179:18286] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adl5HDn2G0IJw5EZY9lK4QAAAFc"]
[Sat Apr 11 06:26:37.393706 2026] [:error] [pid 33288:tid 33297] [client 20.251.36.179:18275] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adl5HWJmwJFFPEgRHfFX0gAAAMc"]
[Sat Apr 11 06:26:37.913120 2026] [:error] [pid 15244:tid 15263] [client 20.251.36.179:18288] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adl5HYkdEsz5NeAq8w04oQAAARE"]
[Sat Apr 11 06:26:38.455375 2026] [:error] [pid 33173:tid 33258] [client 20.251.36.179:18259] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adl5Hq8109xRDP2izWjq9gAAAI0"]
[Sat Apr 11 09:42:50.086933 2026] [:error] [pid 34824:tid 34903] [client 157.15.40.61:60575] [client 157.15.40.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/media/system/js/core.js"] [unique_id "admnGl_rq5TGFWAbVHXeRgAAAZY"]
[Sat Apr 11 13:37:00.812598 2026] [proxy_fcgi:error] [pid 2297:tid 2320] [client 80.94.92.241:38902] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 14:11:37.447730 2026] [:error] [pid 2297:tid 2323] [client 157.15.40.61:56210] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/style.php"] [unique_id "adnmGbXJS-Jji11jZk3Y8gAAARY"]
[Sat Apr 11 14:11:37.712522 2026] [:error] [pid 11067:tid 11073] [client 157.15.40.61:56317] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/style.php"] [unique_id "adnmGcW3w7N67R04YCKQmQAAAEQ"]
[Sat Apr 11 14:11:37.997452 2026] [:error] [pid 2186:tid 2192] [client 157.15.40.61:56420] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/style.php"] [unique_id "adnmGcibnOEEvcO8wPL9WAAAAII"]
[Sat Apr 11 14:11:39.255192 2026] [:error] [pid 2186:tid 2200] [client 157.15.40.61:56536] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/style.php"] [unique_id "adnmG8ibnOEEvcO8wPL9gQAAAIo"]
[Sat Apr 11 14:11:39.523661 2026] [:error] [pid 2297:tid 2310] [client 157.15.40.61:56723] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style.php"] [unique_id "adnmG7XJS-Jji11jZk3ZegAAAQk"]
[Sat Apr 11 14:11:40.652627 2026] [:error] [pid 2187:tid 2233] [client 157.15.40.61:56953] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "adnmHA4J29_qQi0FkjiIXQAAAAU"]
[Sat Apr 11 14:11:41.437299 2026] [:error] [pid 11067:tid 11080] [client 157.15.40.61:57088] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/file.php"] [unique_id "adnmHcW3w7N67R04YCKREAAAAEs"]
[Sat Apr 11 14:11:42.956829 2026] [:error] [pid 2297:tid 2322] [client 157.15.40.61:57386] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/flower.php"] [unique_id "adnmHrXJS-Jji11jZk3Z8gAAARU"]
[Sat Apr 11 14:11:45.297322 2026] [:error] [pid 2188:tid 2261] [client 157.15.40.61:57621] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/gifclass.php"] [unique_id "adnmIYDhDA-Xtn2nRScKRAAAAMU"]
[Sat Apr 11 14:11:45.554901 2026] [:error] [pid 2188:tid 2272] [client 157.15.40.61:57800] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/bless.php"] [unique_id "adnmIYDhDA-Xtn2nRScKUQAAANA"]
[Sat Apr 11 14:11:46.830557 2026] [:error] [pid 2187:tid 2251] [client 157.15.40.61:58039] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/class-t.api.php"] [unique_id "adnmIg4J29_qQi0FkjiIsQAAABc"]
[Sat Apr 11 14:11:47.101437 2026] [:error] [pid 2187:tid 2237] [client 157.15.40.61:58088] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/blurbs.php"] [unique_id "adnmIw4J29_qQi0FkjiItQAAAAk"]
[Sat Apr 11 14:11:47.363831 2026] [:error] [pid 2297:tid 2323] [client 157.15.40.61:58122] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/akcc.php"] [unique_id "adnmI7XJS-Jji11jZk3argAAARY"]
[Sat Apr 11 14:11:49.351563 2026] [:error] [pid 11067:tid 11084] [client 157.15.40.61:58456] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "adnmJcW3w7N67R04YCKSqQAAAE8"]
[Sat Apr 11 14:11:50.353335 2026] [:error] [pid 2297:tid 2323] [client 157.15.40.61:58696] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/shelp.php"] [unique_id "adnmJrXJS-Jji11jZk3bLAAAARY"]
[Sat Apr 11 14:11:50.614675 2026] [:error] [pid 2186:tid 2208] [client 157.15.40.61:58775] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/cord.php"] [unique_id "adnmJsibnOEEvcO8wPL-NwAAAJI"]
[Sat Apr 11 14:11:50.869477 2026] [:error] [pid 2297:tid 2309] [client 157.15.40.61:58822] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/dex.php"] [unique_id "adnmJrXJS-Jji11jZk3bUQAAAQg"]
[Sat Apr 11 14:11:52.130422 2026] [:error] [pid 11067:tid 11078] [client 157.15.40.61:58878] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adnmKMW3w7N67R04YCKTZAAAAEk"]
[Sat Apr 11 14:11:52.944691 2026] [:error] [pid 2188:tid 2270] [client 157.15.40.61:59243] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/file2.php"] [unique_id "adnmKIDhDA-Xtn2nRScLOgAAAM4"]
[Sat Apr 11 14:11:53.199820 2026] [:error] [pid 11067:tid 11090] [client 157.15.40.61:59298] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/zwso.php"] [unique_id "adnmKcW3w7N67R04YCKThwAAAFU"]
[Sat Apr 11 14:11:57.761460 2026] [:error] [pid 2188:tid 2259] [client 157.15.40.61:60041] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/zwso.php"] [unique_id "adnmLYDhDA-Xtn2nRScLrgAAAMM"]
[Sat Apr 11 14:11:58.019092 2026] [:error] [pid 2186:tid 2203] [client 157.15.40.61:60341] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "adnmLsibnOEEvcO8wPL_AQAAAI0"]
[Sat Apr 11 14:11:58.304014 2026] [:error] [pid 11067:tid 11090] [client 157.15.40.61:60422] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/bolt.php"] [unique_id "adnmLsW3w7N67R04YCKVjwAAAFU"]
[Sat Apr 11 14:11:58.566560 2026] [:error] [pid 2187:tid 2233] [client 157.15.40.61:60509] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/shlo.php"] [unique_id "adnmLg4J29_qQi0FkjiJqwAAAAU"]
[Sat Apr 11 14:11:58.823573 2026] [:error] [pid 11067:tid 11091] [client 157.15.40.61:60587] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/133.php"] [unique_id "adnmLsW3w7N67R04YCKV7wAAAFY"]
[Sat Apr 11 14:11:59.857403 2026] [:error] [pid 2186:tid 2204] [client 157.15.40.61:60791] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ahax.php"] [unique_id "adnmL8ibnOEEvcO8wPL_FQAAAI4"]
[Sat Apr 11 14:12:00.110817 2026] [:error] [pid 11067:tid 11088] [client 157.15.40.61:60827] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/php8.php"] [unique_id "adnmMMW3w7N67R04YCKWLAAAAFM"]
[Sat Apr 11 14:12:01.400617 2026] [:error] [pid 11067:tid 11093] [client 157.15.40.61:60894] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/lufix1.php"] [unique_id "adnmMcW3w7N67R04YCKWgQAAAFg"]
[Sat Apr 11 14:12:04.679285 2026] [:error] [pid 2188:tid 2272] [client 157.15.40.61:62776] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/witmm.php"] [unique_id "adnmNIDhDA-Xtn2nRScMOQAAANA"]
[Sat Apr 11 14:12:07.361137 2026] [:error] [pid 2187:tid 2227] [client 157.15.40.61:49515] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/index.php"] [unique_id "adnmNw4J29_qQi0FkjiKIgAAAAE"]
[Sat Apr 11 14:12:12.974529 2026] [:error] [pid 11067:tid 11088] [client 157.15.40.61:50344] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adnmPMW3w7N67R04YCKXhQAAAFM"]
[Sat Apr 11 14:12:13.620095 2026] [:error] [pid 2188:tid 2256] [client 157.15.40.61:50902] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/index.php"] [unique_id "adnmPYDhDA-Xtn2nRScMjwAAAMA"]
[Sat Apr 11 14:12:14.665042 2026] [:error] [pid 11067:tid 11072] [client 157.15.40.61:51035] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ioxi-o.php"] [unique_id "adnmPsW3w7N67R04YCKXkAAAAEM"]
[Sat Apr 11 14:12:15.955005 2026] [:error] [pid 2186:tid 2212] [client 157.15.40.61:51207] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "adnmP8ibnOEEvcO8wPL_owAAAJU"]
[Sat Apr 11 14:12:17.232756 2026] [:error] [pid 2186:tid 2204] [client 157.15.40.61:51227] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/files.php"] [unique_id "adnmQcibnOEEvcO8wPL_rgAAAI4"]
[Sat Apr 11 14:12:20.365609 2026] [:error] [pid 2297:tid 2302] [client 157.15.40.61:51411] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-editor.php"] [unique_id "adnmRLXJS-Jji11jZk3dbQAAAQE"]
[Sat Apr 11 15:11:23.062355 2026] [proxy_fcgi:error] [pid 2297:tid 2312] [client 74.7.244.13:50498] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 15:12:15.097272 2026] [proxy_fcgi:error] [pid 2187:tid 2241] [client 80.94.92.241:37700] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 15:12:19.386263 2026] [proxy_fcgi:error] [pid 2188:tid 2267] [client 80.94.92.241:38350] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 16:41:51.911757 2026] [proxy_fcgi:error] [pid 2188:tid 2270] [client 74.7.241.184:55282] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 16:56:16.391030 2026] [proxy_fcgi:error] [pid 2297:tid 2304] [client 103.215.74.185:59628] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 16:56:17.443850 2026] [proxy_fcgi:error] [pid 11067:tid 11073] [client 103.215.74.185:59634] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 17:56:19.596268 2026] [proxy_fcgi:error] [pid 54518:tid 54536] [client 186.193.242.208:6520] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:29.663110 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 20.199.110.126:64217] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:29.673977 2026] [proxy_fcgi:error] [pid 42219:tid 42224] [client 20.199.110.126:63638] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:30.248379 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 20.199.110.126:64272] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:31.499126 2026] [proxy_fcgi:error] [pid 42221:tid 42282] [client 20.199.110.126:64313] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:31.633424 2026] [proxy_fcgi:error] [pid 42219:tid 42229] [client 20.199.110.126:65044] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:32.225036 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.199.110.126:65059] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:33.143785 2026] [proxy_fcgi:error] [pid 42219:tid 42226] [client 20.199.110.126:64995] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:33.154331 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.199.110.126:64225] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:34.233543 2026] [proxy_fcgi:error] [pid 42219:tid 42232] [client 20.199.110.126:64240] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:34.873976 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 20.199.110.126:65058] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:34.874744 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.199.110.126:64304] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:35.640695 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.199.110.126:64285] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:36.573880 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 20.199.110.126:64275] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:37.140196 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 20.199.110.126:65046] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:37.687599 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.199.110.126:65082] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:38.895111 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 20.199.110.126:63659] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:39.107274 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 20.199.110.126:64203] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:39.330838 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.199.110.126:64315] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:40.203101 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 20.199.110.126:65027] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:40.306858 2026] [proxy_fcgi:error] [pid 42220:tid 42258] [client 20.199.110.126:64269] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:40.848983 2026] [proxy_fcgi:error] [pid 42220:tid 42255] [client 20.199.110.126:64210] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:41.479012 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 20.199.110.126:65003] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:41.643279 2026] [proxy_fcgi:error] [pid 42313:tid 42323] [client 20.199.110.126:64990] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:42.705334 2026] [proxy_fcgi:error] [pid 42313:tid 42321] [client 20.199.110.126:64979] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:42.867941 2026] [proxy_fcgi:error] [pid 42221:tid 42282] [client 20.199.110.126:64981] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:43.237679 2026] [proxy_fcgi:error] [pid 42221:tid 42279] [client 20.199.110.126:64214] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:44.695308 2026] [proxy_fcgi:error] [pid 42219:tid 42233] [client 20.199.110.126:63649] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:45.029924 2026] [proxy_fcgi:error] [pid 42313:tid 42328] [client 20.199.110.126:64302] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:45.163910 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 20.199.110.126:64195] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:46.609778 2026] [proxy_fcgi:error] [pid 42221:tid 42298] [client 20.199.110.126:62336] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:46.734847 2026] [proxy_fcgi:error] [pid 42221:tid 42302] [client 20.199.110.126:63633] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:46.794157 2026] [proxy_fcgi:error] [pid 42220:tid 42273] [client 20.199.110.126:64249] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:47.724559 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.199.110.126:63671] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:48.133691 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 20.199.110.126:65000] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:48.899623 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 20.199.110.126:64962] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:49.031071 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 20.199.110.126:64231] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:49.359949 2026] [proxy_fcgi:error] [pid 42219:tid 42234] [client 20.199.110.126:64307] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:50.285827 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 20.199.110.126:65047] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:50.304623 2026] [proxy_fcgi:error] [pid 42219:tid 42239] [client 20.199.110.126:65028] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:50.813073 2026] [proxy_fcgi:error] [pid 42221:tid 42284] [client 20.199.110.126:64229] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:51.630843 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 20.199.110.126:63622] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:51.662918 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 20.199.110.126:65006] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:52.613283 2026] [proxy_fcgi:error] [pid 42313:tid 42336] [client 20.199.110.126:64968] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:52.867971 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 20.199.110.126:64268] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:52.927033 2026] [proxy_fcgi:error] [pid 42313:tid 42325] [client 20.199.110.126:64274] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:53.928064 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 20.199.110.126:63661] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:54.026718 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 20.199.110.126:63636] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:54.209993 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 20.199.110.126:64227] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:55.199801 2026] [proxy_fcgi:error] [pid 42221:tid 42287] [client 20.199.110.126:65021] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:55.215038 2026] [proxy_fcgi:error] [pid 42219:tid 42245] [client 20.199.110.126:65081] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:55.290101 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.199.110.126:64233] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:56.143290 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 20.199.110.126:64298] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:56.534478 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 20.199.110.126:62336] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:56.552786 2026] [proxy_fcgi:error] [pid 42220:tid 42262] [client 20.199.110.126:64297] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:57.626288 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 20.199.110.126:64964] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:57.626898 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 20.199.110.126:64965] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:57.686119 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 20.199.110.126:64193] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:58.596367 2026] [proxy_fcgi:error] [pid 42219:tid 42223] [client 20.199.110.126:64312] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:58.654661 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 20.199.110.126:64219] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:59.220564 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 20.199.110.126:64270] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:59.578785 2026] [proxy_fcgi:error] [pid 42313:tid 42340] [client 20.199.110.126:63641] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:12:59.975109 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.110.126:65053] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:00.654670 2026] [proxy_fcgi:error] [pid 42219:tid 42224] [client 20.199.110.126:64279] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:00.930033 2026] [proxy_fcgi:error] [pid 42221:tid 42288] [client 20.199.110.126:63568] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:01.037387 2026] [proxy_fcgi:error] [pid 42221:tid 42285] [client 20.199.110.126:63646] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:02.001895 2026] [proxy_fcgi:error] [pid 42221:tid 42282] [client 20.199.110.126:63677] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:02.064909 2026] [proxy_fcgi:error] [pid 42219:tid 42233] [client 20.199.110.126:63656] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:02.065010 2026] [proxy_fcgi:error] [pid 42219:tid 42236] [client 20.199.110.126:64220] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:03.592994 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 20.199.110.126:63650] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:03.703391 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 20.199.110.126:63670] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:04.031046 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 20.199.110.126:64293] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:05.308490 2026] [proxy_fcgi:error] [pid 42219:tid 42228] [client 20.199.110.126:64985] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:05.523670 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.110.126:64250] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:06.116574 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 20.199.110.126:65016] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:07.117785 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 20.199.110.126:65057] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:07.123729 2026] [proxy_fcgi:error] [pid 42219:tid 42245] [client 20.199.110.126:64296] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:09.666164 2026] [proxy_fcgi:error] [pid 42221:tid 42291] [client 20.199.110.126:63654] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:11.729793 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 20.199.110.126:64271] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:14.035832 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 20.199.110.126:64253] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:14.647136 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 20.199.110.126:63645] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:17.668310 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 20.199.110.126:64975] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:17.872748 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 20.199.110.126:63625] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:18.412576 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.199.110.126:62389] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:20.832411 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.110.126:63660] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:21.180387 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 20.199.110.126:65011] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:22.128588 2026] [proxy_fcgi:error] [pid 42221:tid 42295] [client 20.199.110.126:64228] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:23.118465 2026] [proxy_fcgi:error] [pid 42221:tid 42283] [client 20.199.110.126:65080] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:23.384043 2026] [proxy_fcgi:error] [pid 42220:tid 42252] [client 20.199.110.126:65055] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:24.362866 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 20.199.110.126:63663] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:24.898407 2026] [proxy_fcgi:error] [pid 42220:tid 42271] [client 20.199.110.126:63657] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:26.232384 2026] [proxy_fcgi:error] [pid 42220:tid 42261] [client 20.199.110.126:64301] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:26.586685 2026] [proxy_fcgi:error] [pid 42220:tid 42262] [client 20.199.110.126:63629] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:27.224277 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 20.199.110.126:65029] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:28.636843 2026] [proxy_fcgi:error] [pid 42220:tid 42252] [client 20.199.110.126:64260] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:28.937536 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.199.110.126:64243] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:29.829796 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 20.199.110.126:62381] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:30.444217 2026] [proxy_fcgi:error] [pid 42313:tid 42338] [client 20.199.110.126:64248] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:30.777762 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 20.199.110.126:63626] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:32.008688 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 20.199.110.126:65004] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:33.610659 2026] [proxy_fcgi:error] [pid 42313:tid 42323] [client 20.199.110.126:64232] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:34.651952 2026] [proxy_fcgi:error] [pid 42221:tid 42289] [client 20.199.110.126:65076] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:35.773777 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.199.110.126:64255] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:36.002906 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 20.199.110.126:63573] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:36.939861 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.199.110.126:64287] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:37.414095 2026] [proxy_fcgi:error] [pid 42219:tid 42245] [client 20.199.110.126:65023] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:38.479252 2026] [proxy_fcgi:error] [pid 42220:tid 42272] [client 20.199.110.126:64998] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:38.847419 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 20.199.110.126:64234] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:39.387152 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 20.199.110.126:65065] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:39.919119 2026] [proxy_fcgi:error] [pid 42220:tid 42252] [client 20.199.110.126:64237] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:40.442930 2026] [proxy_fcgi:error] [pid 42221:tid 42286] [client 20.199.110.126:64308] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:40.941634 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.110.126:65015] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:41.289091 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 20.199.110.126:65012] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:42.047440 2026] [proxy_fcgi:error] [pid 42221:tid 42300] [client 20.199.110.126:65050] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:42.243753 2026] [proxy_fcgi:error] [pid 42221:tid 42295] [client 20.199.110.126:65022] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:43.245501 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 20.199.110.126:64295] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:43.591820 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.110.126:63026] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:44.628050 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.110.126:65033] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:45.136776 2026] [proxy_fcgi:error] [pid 42219:tid 42234] [client 20.199.110.126:63658] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:46.168096 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 20.199.110.126:63619] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:46.448152 2026] [proxy_fcgi:error] [pid 42219:tid 42232] [client 20.199.110.126:63585] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:48.616932 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 20.199.110.126:62999] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:49.412874 2026] [proxy_fcgi:error] [pid 42220:tid 42251] [client 20.199.110.126:64984] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:50.520902 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.199.110.126:64222] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:51.097656 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 20.199.110.126:65051] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:52.393995 2026] [proxy_fcgi:error] [pid 42313:tid 42321] [client 20.199.110.126:63594] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:54.693764 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.199.110.126:63648] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:55.834311 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 20.199.110.126:64305] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:13:59.649022 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 20.199.110.126:65073] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:01.998911 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.199.110.126:63662] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:05.184212 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 20.199.110.126:62946] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:05.272458 2026] [proxy_fcgi:error] [pid 42219:tid 42225] [client 20.199.110.126:64277] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:07.203642 2026] [proxy_fcgi:error] [pid 42219:tid 42242] [client 20.199.110.126:65017] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:07.623484 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 20.199.110.126:64207] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:08.159429 2026] [proxy_fcgi:error] [pid 42313:tid 42325] [client 20.199.110.126:64966] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:08.356176 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.199.110.126:63667] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:09.247698 2026] [proxy_fcgi:error] [pid 42221:tid 42278] [client 20.199.110.126:64966] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:09.356401 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 20.199.110.126:62949] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:10.206913 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 20.199.110.126:63630] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:10.665696 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 20.199.110.126:63572] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:11.223505 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.199.110.126:65078] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:11.587857 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.199.110.126:63609] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:12.109706 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.110.126:64202] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:12.402024 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 20.199.110.126:64209] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:12.858055 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 20.199.110.126:64284] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:13.714562 2026] [proxy_fcgi:error] [pid 42313:tid 42328] [client 20.199.110.126:63611] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:13.826647 2026] [proxy_fcgi:error] [pid 42220:tid 42260] [client 20.199.110.126:64254] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:14.817483 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 20.199.110.126:63679] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:15.389421 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 20.199.110.126:64288] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:15.943584 2026] [proxy_fcgi:error] [pid 42220:tid 42255] [client 20.199.110.126:63618] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:17.452518 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.199.110.126:63559] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:18.074895 2026] [proxy_fcgi:error] [pid 42313:tid 42335] [client 20.199.110.126:63553] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:18.640962 2026] [proxy_fcgi:error] [pid 42219:tid 42247] [client 20.199.110.126:64197] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:19.084409 2026] [proxy_fcgi:error] [pid 42220:tid 42258] [client 20.199.110.126:62399] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:19.629605 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 20.199.110.126:62352] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:20.209737 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.199.110.126:61792] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:20.496818 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.199.110.126:64988] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:21.413892 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 20.199.110.126:65060] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:21.669363 2026] [proxy_fcgi:error] [pid 42220:tid 42265] [client 20.199.110.126:64309] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:22.238021 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 20.199.110.126:63023] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:22.968035 2026] [proxy_fcgi:error] [pid 42220:tid 42274] [client 20.199.110.126:64993] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:23.283015 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.199.110.126:64256] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:23.782257 2026] [proxy_fcgi:error] [pid 42219:tid 42238] [client 20.199.110.126:63634] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:24.262335 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 20.199.110.126:65031] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:24.932987 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 20.199.110.126:64273] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:25.087776 2026] [proxy_fcgi:error] [pid 42219:tid 42234] [client 20.199.110.126:65084] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:25.646295 2026] [proxy_fcgi:error] [pid 42219:tid 42227] [client 20.199.110.126:63665] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:25.821059 2026] [proxy_fcgi:error] [pid 42219:tid 42244] [client 20.199.110.126:65072] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:26.112336 2026] [proxy_fcgi:error] [pid 42220:tid 42259] [client 20.199.110.126:65043] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:26.838768 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 20.199.110.126:64989] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:27.192805 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 20.199.110.126:64971] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:27.542277 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.110.126:63018] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:27.956412 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 20.199.110.126:65036] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:28.483834 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 20.199.110.126:62391] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:28.898509 2026] [proxy_fcgi:error] [pid 42221:tid 42287] [client 20.199.110.126:63563] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:28.926455 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 20.199.110.126:64238] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:29.616424 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 20.199.110.126:64235] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:29.689952 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 20.199.110.126:63624] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:29.725285 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.199.110.126:65066] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:30.568271 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 20.199.110.126:63552] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:30.601890 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 20.199.110.126:64246] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:31.283291 2026] [proxy_fcgi:error] [pid 42219:tid 42224] [client 20.199.110.126:61830] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:31.367484 2026] [proxy_fcgi:error] [pid 42219:tid 42242] [client 20.199.110.126:64973] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:31.637433 2026] [proxy_fcgi:error] [pid 42219:tid 42247] [client 20.199.110.126:64192] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:32.266738 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 20.199.110.126:64211] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:32.493463 2026] [proxy_fcgi:error] [pid 42219:tid 42229] [client 20.199.110.126:62947] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:32.550217 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 20.199.110.126:65063] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:33.329785 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 20.199.110.126:62940] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:33.422895 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 20.199.110.126:62918] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:33.453068 2026] [proxy_fcgi:error] [pid 42221:tid 42293] [client 20.199.110.126:62916] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:34.224619 2026] [proxy_fcgi:error] [pid 42221:tid 42299] [client 20.199.110.126:62964] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:34.724249 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 20.199.110.126:63631] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:35.006326 2026] [proxy_fcgi:error] [pid 42219:tid 42224] [client 20.199.110.126:63644] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:35.028643 2026] [proxy_fcgi:error] [pid 42220:tid 42262] [client 20.199.110.126:64286] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:35.867759 2026] [proxy_fcgi:error] [pid 42220:tid 42264] [client 20.199.110.126:63601] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:36.017493 2026] [proxy_fcgi:error] [pid 42221:tid 42286] [client 20.199.110.126:63595] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:36.633396 2026] [proxy_fcgi:error] [pid 42221:tid 42301] [client 20.199.110.126:63652] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:36.865747 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.199.110.126:65019] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:37.608461 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 20.199.110.126:62339] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:37.629011 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 20.199.110.126:63589] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:38.052978 2026] [proxy_fcgi:error] [pid 42221:tid 42287] [client 20.199.110.126:64311] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:38.506617 2026] [proxy_fcgi:error] [pid 42221:tid 42295] [client 20.199.110.126:65002] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:38.812364 2026] [proxy_fcgi:error] [pid 42220:tid 42255] [client 20.199.110.126:65014] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:39.141396 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 20.199.110.126:64216] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:39.415247 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 20.199.110.126:65062] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:39.892396 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 20.199.110.126:63615] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:40.289908 2026] [proxy_fcgi:error] [pid 42221:tid 42289] [client 20.199.110.126:65030] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:40.397501 2026] [proxy_fcgi:error] [pid 42221:tid 42281] [client 20.199.110.126:64263] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:41.154009 2026] [proxy_fcgi:error] [pid 42221:tid 42301] [client 20.199.110.126:63574] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:41.252972 2026] [proxy_fcgi:error] [pid 42221:tid 42280] [client 20.199.110.126:63035] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:41.284693 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 20.199.110.126:65018] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:42.081384 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.199.110.126:62952] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:42.133472 2026] [proxy_fcgi:error] [pid 42313:tid 42328] [client 20.199.110.126:64245] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:42.322136 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 20.199.110.126:62364] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:43.166731 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 20.199.110.126:63575] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:43.169556 2026] [proxy_fcgi:error] [pid 42220:tid 42266] [client 20.199.110.126:62349] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:43.301195 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.199.110.126:65032] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:44.063136 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 20.199.110.126:64290] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:44.397865 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 20.199.110.126:64251] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:44.663109 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 20.199.110.126:64224] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:45.277265 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.199.110.126:62914] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:45.441576 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.199.110.126:62384] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:45.763731 2026] [proxy_fcgi:error] [pid 42220:tid 42272] [client 20.199.110.126:63620] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:46.593559 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 20.199.110.126:63666] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:46.681941 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.199.110.126:63554] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:46.692697 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 20.199.110.126:64966] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:47.483601 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 20.199.110.126:63021] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:48.185795 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.199.110.126:64317] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:48.298266 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 20.199.110.126:61868] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:49.210149 2026] [proxy_fcgi:error] [pid 42221:tid 42296] [client 20.199.110.126:64319] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:49.246318 2026] [proxy_fcgi:error] [pid 42221:tid 42295] [client 20.199.110.126:65005] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:50.201642 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 20.199.110.126:62973] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:50.637341 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 20.199.110.126:63004] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:51.155481 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.199.110.126:62938] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:51.636895 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 20.199.110.126:62367] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:51.666780 2026] [proxy_fcgi:error] [pid 42221:tid 42281] [client 20.199.110.126:65039] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:51.929703 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.199.110.126:62996] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:52.702817 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 20.199.110.126:63651] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:52.761473 2026] [proxy_fcgi:error] [pid 42313:tid 42338] [client 20.199.110.126:64978] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:53.634102 2026] [proxy_fcgi:error] [pid 42221:tid 42292] [client 20.199.110.126:64999] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:54.325404 2026] [proxy_fcgi:error] [pid 42219:tid 42225] [client 20.199.110.126:64215] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:54.583041 2026] [proxy_fcgi:error] [pid 42219:tid 42229] [client 20.199.110.126:64236] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:55.494216 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 20.199.110.126:61858] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:56.405494 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 20.199.110.126:65037] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:57.046685 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 20.199.110.126:64259] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:57.595976 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 20.199.110.126:62382] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:58.618587 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.199.110.126:64961] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:59.563789 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 20.199.110.126:62992] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:14:59.774718 2026] [proxy_fcgi:error] [pid 42220:tid 42251] [client 20.199.110.126:63001] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:00.450053 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 20.199.110.126:65020] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:00.610283 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 20.199.110.126:63556] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:01.359182 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 20.199.110.126:65010] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:02.303761 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 20.199.110.126:63031] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:03.171303 2026] [proxy_fcgi:error] [pid 42221:tid 42296] [client 20.199.110.126:64960] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:04.139615 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 20.199.110.126:64983] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:04.150619 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.199.110.126:64261] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:04.616900 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 20.199.110.126:64996] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:04.993125 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.110.126:65077] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:05.849245 2026] [proxy_fcgi:error] [pid 42221:tid 42297] [client 20.199.110.126:62931] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:06.682924 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 20.199.110.126:63033] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:07.123626 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 20.199.110.126:64991] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:07.597637 2026] [proxy_fcgi:error] [pid 42219:tid 42230] [client 20.199.110.126:63640] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:08.494334 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 20.199.110.126:62912] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:08.552654 2026] [proxy_fcgi:error] [pid 42221:tid 42289] [client 20.199.110.126:63561] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:09.531320 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 20.199.110.126:62398] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:09.741848 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.110.126:62972] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:11.038594 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 20.199.110.126:65001] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:12.094080 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 20.199.110.126:62960] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:12.222089 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.110.126:62943] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:13.488132 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 20.199.110.126:62353] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:13.507531 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 20.199.110.126:63674] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:13.683322 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 20.199.110.126:62346] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:14.679182 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 20.199.110.126:63653] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:15.260945 2026] [proxy_fcgi:error] [pid 42221:tid 42293] [client 20.199.110.126:63590] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:15.451488 2026] [proxy_fcgi:error] [pid 42219:tid 42231] [client 20.199.110.126:64201] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:15.645720 2026] [proxy_fcgi:error] [pid 42221:tid 42291] [client 20.199.110.126:64242] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:16.334650 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.199.110.126:63027] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:16.509743 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 20.199.110.126:65054] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:16.756059 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.199.110.126:63607] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:17.292568 2026] [proxy_fcgi:error] [pid 42219:tid 42228] [client 20.199.110.126:62965] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:17.683545 2026] [proxy_fcgi:error] [pid 42219:tid 42244] [client 20.199.110.126:64278] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:17.834683 2026] [proxy_fcgi:error] [pid 42219:tid 42241] [client 20.199.110.126:62933] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:18.110852 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 20.199.110.126:64280] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:18.684687 2026] [proxy_fcgi:error] [pid 42221:tid 42289] [client 20.199.110.126:63657] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:18.733784 2026] [proxy_fcgi:error] [pid 42221:tid 42292] [client 20.199.110.126:64206] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:19.290443 2026] [proxy_fcgi:error] [pid 42221:tid 42286] [client 20.199.110.126:62932] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:19.504888 2026] [proxy_fcgi:error] [pid 42221:tid 42300] [client 20.199.110.126:63657] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:19.682441 2026] [proxy_fcgi:error] [pid 42220:tid 42252] [client 20.199.110.126:65071] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:20.405147 2026] [proxy_fcgi:error] [pid 42220:tid 42263] [client 20.199.110.126:64294] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:20.546462 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 20.199.110.126:63571] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:20.884680 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 20.199.110.126:63017] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:21.278516 2026] [proxy_fcgi:error] [pid 42220:tid 42262] [client 20.199.110.126:63578] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:21.451405 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 20.199.110.126:64976] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:21.983603 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 20.199.110.126:65061] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:21.997564 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 20.199.110.126:64976] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:22.169461 2026] [proxy_fcgi:error] [pid 42219:tid 42236] [client 20.199.110.126:62980] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:22.777174 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 20.199.110.126:63616] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:22.845428 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 20.199.110.126:63642] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:23.117623 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.199.110.126:65007] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:23.370762 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 20.199.110.126:63642] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:23.809016 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 20.199.110.126:63628] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:24.242783 2026] [proxy_fcgi:error] [pid 42221:tid 42294] [client 20.199.110.126:61857] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:24.654044 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 20.199.110.126:63555] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:25.499038 2026] [proxy_fcgi:error] [pid 42219:tid 42241] [client 20.199.110.126:62948] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:25.544168 2026] [proxy_fcgi:error] [pid 42219:tid 42223] [client 20.199.110.126:62966] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:26.570302 2026] [proxy_fcgi:error] [pid 42221:tid 42291] [client 20.199.110.126:65042] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:27.007041 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 20.199.110.126:62371] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:27.400938 2026] [proxy_fcgi:error] [pid 42219:tid 42226] [client 20.199.110.126:64972] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:27.969453 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.199.110.126:63584] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:28.443913 2026] [proxy_fcgi:error] [pid 42219:tid 42225] [client 20.199.110.126:63577] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:28.698389 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 20.199.110.126:64267] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:29.369508 2026] [proxy_fcgi:error] [pid 42221:tid 42292] [client 20.199.110.126:65034] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:29.885265 2026] [proxy_fcgi:error] [pid 42220:tid 42261] [client 20.199.110.126:64223] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:30.310498 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 20.199.110.126:64967] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:30.636973 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 20.199.110.126:64281] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:31.411627 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 20.199.110.126:63643] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:32.348920 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 20.199.110.126:65086] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:32.448097 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.199.110.126:64218] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:32.868350 2026] [proxy_fcgi:error] [pid 42313:tid 42325] [client 20.199.110.126:65067] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:33.272797 2026] [proxy_fcgi:error] [pid 42219:tid 42227] [client 20.199.110.126:65049] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:34.295074 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 20.199.110.126:63020] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:34.344594 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 20.199.110.126:64221] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:34.725891 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.199.110.126:65074] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:35.114463 2026] [proxy_fcgi:error] [pid 42220:tid 42257] [client 20.199.110.126:62970] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:36.094179 2026] [proxy_fcgi:error] [pid 42221:tid 42280] [client 20.199.110.126:64194] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:36.246308 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 20.199.110.126:63007] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:36.572728 2026] [proxy_fcgi:error] [pid 42313:tid 42335] [client 20.199.110.126:64276] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:37.126178 2026] [proxy_fcgi:error] [pid 42219:tid 42241] [client 20.199.110.126:61853] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:37.494844 2026] [proxy_fcgi:error] [pid 42219:tid 42236] [client 20.199.110.126:63614] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:37.663127 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 20.199.110.126:61853] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:38.513403 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.199.110.126:62333] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:39.385764 2026] [proxy_fcgi:error] [pid 42219:tid 42233] [client 20.199.110.126:62298] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:40.162119 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 20.199.110.126:62920] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:40.258249 2026] [proxy_fcgi:error] [pid 42219:tid 42241] [client 20.199.110.126:62293] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:41.104091 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 20.199.110.126:64318] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:42.105862 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 20.199.110.126:64239] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:42.957608 2026] [proxy_fcgi:error] [pid 42313:tid 42323] [client 20.199.110.126:63038] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:43.616515 2026] [proxy_fcgi:error] [pid 42313:tid 42340] [client 20.199.110.126:61833] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:43.872291 2026] [proxy_fcgi:error] [pid 42221:tid 42297] [client 20.199.110.126:63621] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:45.204464 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.110.126:63675] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:46.265171 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.110.126:62274] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:47.022087 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 20.199.110.126:62298] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:47.092955 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.110.126:62313] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:48.152914 2026] [proxy_fcgi:error] [pid 42313:tid 42338] [client 20.199.110.126:63586] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:48.740871 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 20.199.110.126:63586] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:49.298221 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.199.110.126:64310] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:49.598823 2026] [proxy_fcgi:error] [pid 42220:tid 42260] [client 20.199.110.126:64196] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:49.892490 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 20.199.110.126:64310] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:51.263873 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 20.199.110.126:62981] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:52.393120 2026] [proxy_fcgi:error] [pid 42219:tid 42242] [client 20.199.110.126:64269] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:54.280062 2026] [proxy_fcgi:error] [pid 42220:tid 42256] [client 20.199.110.126:61379] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:54.676940 2026] [proxy_fcgi:error] [pid 42221:tid 42294] [client 20.199.110.126:62951] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:55.610579 2026] [proxy_fcgi:error] [pid 42221:tid 42280] [client 20.199.110.126:63592] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:55.936494 2026] [proxy_fcgi:error] [pid 42219:tid 42227] [client 20.199.110.126:62958] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:56.595171 2026] [proxy_fcgi:error] [pid 42219:tid 42229] [client 20.199.110.126:63673] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:57.670341 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 20.199.110.126:64982] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:58.357056 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.199.110.126:64266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:58.951095 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 20.199.110.126:62396] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:15:59.946681 2026] [proxy_fcgi:error] [pid 42220:tid 42260] [client 20.199.110.126:64208] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:00.515153 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 20.199.110.126:65025] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:00.819489 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 20.199.110.126:62308] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:01.763316 2026] [proxy_fcgi:error] [pid 42221:tid 42302] [client 20.199.110.126:63635] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:01.867336 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.199.110.126:64289] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:03.384566 2026] [proxy_fcgi:error] [pid 42219:tid 42242] [client 20.199.110.126:64992] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:03.922669 2026] [proxy_fcgi:error] [pid 42219:tid 42224] [client 20.199.110.126:64992] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:03.968961 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.199.110.126:63557] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:04.915952 2026] [proxy_fcgi:error] [pid 42221:tid 42283] [client 20.199.110.126:62974] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:05.629457 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 20.199.110.126:61850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:05.863147 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 20.199.110.126:62279] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:06.686496 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 20.199.110.126:63002] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:07.001834 2026] [proxy_fcgi:error] [pid 42219:tid 42234] [client 20.199.110.126:62355] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:07.641219 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 20.199.110.126:63664] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:08.448752 2026] [proxy_fcgi:error] [pid 42313:tid 42323] [client 20.199.110.126:64306] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:08.495810 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 20.199.110.126:64200] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:09.378189 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 20.199.110.126:62388] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:09.480991 2026] [proxy_fcgi:error] [pid 42313:tid 42340] [client 20.199.110.126:64306] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:10.388244 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.199.110.126:62944] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:10.625377 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 20.199.110.126:64262] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:11.498152 2026] [proxy_fcgi:error] [pid 42219:tid 42223] [client 20.199.110.126:62984] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:12.580374 2026] [proxy_fcgi:error] [pid 42313:tid 42325] [client 20.199.110.126:64252] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:13.409818 2026] [proxy_fcgi:error] [pid 42219:tid 42231] [client 20.199.110.126:62334] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:13.436160 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.199.110.126:65504] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:14.197041 2026] [proxy_fcgi:error] [pid 42220:tid 42258] [client 20.199.110.126:63602] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:14.621697 2026] [proxy_fcgi:error] [pid 42220:tid 42268] [client 20.199.110.126:64849] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:14.727557 2026] [proxy_fcgi:error] [pid 42220:tid 42266] [client 20.199.110.126:63602] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:15.668831 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 20.199.110.126:63596] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:15.883445 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 20.199.110.126:64832] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:16.302678 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.110.126:64152] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:18.200604 2026] [proxy_fcgi:error] [pid 42221:tid 42285] [client 20.199.110.126:65505] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:18.476383 2026] [proxy_fcgi:error] [pid 42219:tid 42236] [client 20.199.110.126:65482] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:19.922133 2026] [proxy_fcgi:error] [pid 42220:tid 42273] [client 20.199.110.126:64146] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:22.017771 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 20.199.110.126:65525] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:22.705138 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 20.199.110.126:64916] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:24.474538 2026] [proxy_fcgi:error] [pid 42220:tid 42252] [client 20.199.110.126:64930] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:26.484709 2026] [proxy_fcgi:error] [pid 42219:tid 42239] [client 20.199.110.126:64139] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:26.720578 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 20.199.110.126:65518] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:28.834082 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.199.110.126:64166] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:32.623083 2026] [proxy_fcgi:error] [pid 42219:tid 42238] [client 20.199.110.126:64120] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:32.694661 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 20.199.110.126:65524] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:35.487651 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 20.199.110.126:64114] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:37.142830 2026] [proxy_fcgi:error] [pid 42220:tid 42259] [client 20.199.110.126:64142] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:39.393113 2026] [proxy_fcgi:error] [pid 42219:tid 42229] [client 20.199.110.126:64953] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:42.225167 2026] [proxy_fcgi:error] [pid 42220:tid 42257] [client 20.199.110.126:65493] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:44.369004 2026] [proxy_fcgi:error] [pid 42221:tid 42283] [client 20.199.110.126:64127] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:46.063310 2026] [proxy_fcgi:error] [pid 42219:tid 42224] [client 20.199.110.126:64073] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:47.246712 2026] [proxy_fcgi:error] [pid 42219:tid 42245] [client 20.199.110.126:65501] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:47.328324 2026] [proxy_fcgi:error] [pid 42221:tid 42282] [client 20.199.110.126:64103] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:48.496112 2026] [proxy_fcgi:error] [pid 42220:tid 42264] [client 20.199.110.126:64102] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:51.857487 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 20.199.110.126:64115] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:16:54.996862 2026] [proxy_fcgi:error] [pid 42220:tid 42256] [client 20.199.110.126:64925] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:03.840180 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 20.199.110.126:64888] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:11.342074 2026] [proxy_fcgi:error] [pid 42219:tid 42233] [client 20.199.110.126:64134] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:29.944094 2026] [proxy_fcgi:error] [pid 42219:tid 42244] [client 20.199.110.126:64183] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:33.488089 2026] [proxy_fcgi:error] [pid 42221:tid 42298] [client 20.199.110.126:64155] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:35.085659 2026] [proxy_fcgi:error] [pid 42313:tid 42323] [client 20.199.110.126:64172] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:37.930079 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 20.199.110.126:65502] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:39.493930 2026] [proxy_fcgi:error] [pid 42313:tid 42328] [client 20.199.110.126:64891] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:41.144792 2026] [proxy_fcgi:error] [pid 42220:tid 42263] [client 20.199.110.126:65480] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:44.080831 2026] [proxy_fcgi:error] [pid 42219:tid 42233] [client 20.199.110.126:64180] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:45.101320 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 20.199.110.126:64151] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:47.239699 2026] [proxy_fcgi:error] [pid 42221:tid 42302] [client 20.199.110.126:65481] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:48.980854 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.110.126:63476] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:50.116275 2026] [proxy_fcgi:error] [pid 42219:tid 42225] [client 20.199.110.126:64847] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:51.481807 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.110.126:62908] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:52.741248 2026] [proxy_fcgi:error] [pid 42220:tid 42264] [client 20.199.110.126:64942] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:54.125424 2026] [proxy_fcgi:error] [pid 42221:tid 42291] [client 20.199.110.126:64955] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:55.919251 2026] [proxy_fcgi:error] [pid 42221:tid 42279] [client 20.199.110.126:64145] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:58.493886 2026] [proxy_fcgi:error] [pid 42220:tid 42266] [client 20.199.110.126:64169] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:59.722466 2026] [proxy_fcgi:error] [pid 42219:tid 42230] [client 20.199.110.126:64143] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:17:59.955952 2026] [proxy_fcgi:error] [pid 42220:tid 42253] [client 20.199.110.126:64132] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:00.617091 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 20.199.110.126:64870] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:01.476285 2026] [proxy_fcgi:error] [pid 42221:tid 42288] [client 20.199.110.126:64842] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:02.542143 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 20.199.110.126:65477] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:03.440888 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 20.199.110.126:64121] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:04.549454 2026] [proxy_fcgi:error] [pid 42220:tid 42273] [client 20.199.110.126:64926] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:05.822211 2026] [proxy_fcgi:error] [pid 42219:tid 42229] [client 20.199.110.126:64889] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:06.094359 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 20.199.110.126:64113] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:06.776784 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 20.199.110.126:64177] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:08.540774 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 20.199.110.126:64182] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:08.820083 2026] [proxy_fcgi:error] [pid 42221:tid 42279] [client 20.199.110.126:64076] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:09.947661 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.199.110.126:65516] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:10.302764 2026] [proxy_fcgi:error] [pid 42220:tid 42268] [client 20.199.110.126:65495] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:10.776261 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 20.199.110.126:64914] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:11.921201 2026] [proxy_fcgi:error] [pid 42221:tid 42294] [client 20.199.110.126:64128] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:12.650074 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.199.110.126:64071] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:13.934508 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 20.199.110.126:64081] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:14.937874 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.199.110.126:65474] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:15.059869 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 20.199.110.126:64122] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:15.868730 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 20.199.110.126:64917] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:17.306660 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 20.199.110.126:64189] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:17.439204 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 20.199.110.126:64856] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:18.551498 2026] [proxy_fcgi:error] [pid 42313:tid 42321] [client 20.199.110.126:64109] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:19.142962 2026] [proxy_fcgi:error] [pid 42220:tid 42255] [client 20.199.110.126:63505] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:19.576284 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 20.199.110.126:63531] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:20.650231 2026] [proxy_fcgi:error] [pid 42221:tid 42288] [client 20.199.110.126:64839] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:20.677154 2026] [proxy_fcgi:error] [pid 42221:tid 42285] [client 20.199.110.126:64129] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:21.906677 2026] [proxy_fcgi:error] [pid 42220:tid 42261] [client 20.199.110.126:64855] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:22.589057 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.199.110.126:65489] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:23.140634 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 20.199.110.126:65485] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:24.281747 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 20.199.110.126:64119] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:25.701204 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 20.199.110.126:63524] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:26.644715 2026] [proxy_fcgi:error] [pid 42220:tid 42272] [client 20.199.110.126:64148] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:27.115310 2026] [proxy_fcgi:error] [pid 42313:tid 42335] [client 20.199.110.126:64086] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:28.012604 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.199.110.126:62852] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:29.155008 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 20.199.110.126:64957] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:30.283560 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 20.199.110.126:64928] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:31.187423 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 20.199.110.126:62790] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:33.291587 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 20.199.110.126:64157] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:35.324402 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 20.199.110.126:64852] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:36.690482 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.199.110.126:64187] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:36.931472 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.110.126:64117] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:38.778985 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.199.110.126:64878] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:39.458590 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.199.110.126:64881] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:40.537899 2026] [proxy_fcgi:error] [pid 42220:tid 42261] [client 20.199.110.126:63522] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:41.392930 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 20.199.110.126:64934] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:42.270646 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.199.110.126:62890] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:43.114284 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 20.199.110.126:64835] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:43.747149 2026] [proxy_fcgi:error] [pid 42219:tid 42241] [client 20.199.110.126:65490] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:44.361912 2026] [proxy_fcgi:error] [pid 42219:tid 42236] [client 20.199.110.126:64873] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:44.801551 2026] [proxy_fcgi:error] [pid 42219:tid 42229] [client 20.199.110.126:63532] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:45.340901 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 20.199.110.126:63435] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:46.161287 2026] [proxy_fcgi:error] [pid 42220:tid 42275] [client 20.199.110.126:65486] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:46.427150 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 20.199.110.126:63488] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:47.169459 2026] [proxy_fcgi:error] [pid 42221:tid 42302] [client 20.199.110.126:64863] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:48.136739 2026] [proxy_fcgi:error] [pid 42219:tid 42223] [client 20.199.110.126:64080] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:49.208736 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 20.199.110.126:64846] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:49.415507 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 20.199.110.126:64126] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:50.525505 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.199.110.126:64170] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:50.976560 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 20.199.110.126:64138] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:51.928032 2026] [proxy_fcgi:error] [pid 42219:tid 42232] [client 20.199.110.126:64190] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:52.010551 2026] [proxy_fcgi:error] [pid 42219:tid 42241] [client 20.199.110.126:64941] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:52.816300 2026] [proxy_fcgi:error] [pid 42219:tid 42229] [client 20.199.110.126:64890] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:53.387388 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.110.126:62243] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:53.882587 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.199.110.126:64133] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:55.039626 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.199.110.126:64176] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:55.692047 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 20.199.110.126:64913] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:56.097032 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 20.199.110.126:65520] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:57.223475 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.199.110.126:62885] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:57.923000 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.199.110.126:64929] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:58.473695 2026] [proxy_fcgi:error] [pid 42220:tid 42255] [client 20.199.110.126:64951] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:59.490342 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 20.199.110.126:64116] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:18:59.785702 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 20.199.110.126:65478] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:00.494386 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 20.199.110.126:65494] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:01.402380 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 20.199.110.126:64111] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:02.535925 2026] [proxy_fcgi:error] [pid 42219:tid 42245] [client 20.199.110.126:64933] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:02.844132 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 20.199.110.126:63537] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:03.906356 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 20.199.110.126:62234] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:04.716048 2026] [proxy_fcgi:error] [pid 42219:tid 42223] [client 20.199.110.126:63495] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:05.673100 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.199.110.126:64857] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:06.019403 2026] [proxy_fcgi:error] [pid 42221:tid 42288] [client 20.199.110.126:64948] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:06.730878 2026] [proxy_fcgi:error] [pid 42221:tid 42299] [client 20.199.110.126:64895] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:07.771672 2026] [proxy_fcgi:error] [pid 42219:tid 42226] [client 20.199.110.126:62800] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:08.981315 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 20.199.110.126:62888] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:09.781166 2026] [proxy_fcgi:error] [pid 42220:tid 42261] [client 20.199.110.126:64153] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:10.830813 2026] [proxy_fcgi:error] [pid 42313:tid 42335] [client 20.199.110.126:63499] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:12.275600 2026] [proxy_fcgi:error] [pid 42313:tid 42321] [client 20.199.110.126:64066] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:13.130861 2026] [proxy_fcgi:error] [pid 42220:tid 42267] [client 20.199.110.126:63467] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:14.206643 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 20.199.110.126:65507] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:14.978075 2026] [proxy_fcgi:error] [pid 42221:tid 42302] [client 20.199.110.126:65513] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:15.958855 2026] [proxy_fcgi:error] [pid 42221:tid 42296] [client 20.199.110.126:64859] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:17.411615 2026] [proxy_fcgi:error] [pid 42219:tid 42226] [client 20.199.110.126:64131] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:18.534803 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.110.126:64885] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:19.363272 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.199.110.126:63520] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:20.229170 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 20.199.110.126:65523] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:21.464928 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.199.110.126:64836] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:21.808996 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 20.199.110.126:64924] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:22.504840 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 20.199.110.126:64840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:23.496638 2026] [proxy_fcgi:error] [pid 42220:tid 42257] [client 20.199.110.126:62899] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:23.914950 2026] [proxy_fcgi:error] [pid 42219:tid 42224] [client 20.199.110.126:64935] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:24.545884 2026] [proxy_fcgi:error] [pid 42220:tid 42272] [client 20.199.110.126:64898] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:25.586888 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.199.110.126:63509] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:26.518638 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 20.199.110.126:64100] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:27.378839 2026] [proxy_fcgi:error] [pid 42219:tid 42245] [client 20.199.110.126:64108] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:28.370295 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 20.199.110.126:62897] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:29.183384 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.110.126:63489] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:30.727749 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.110.126:64185] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:35.688697 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.199.110.126:62809] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:39.478924 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 20.199.110.126:64087] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:40.505115 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 20.199.110.126:64850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:41.423305 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.110.126:64879] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:42.294922 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 20.199.110.126:64084] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:43.147975 2026] [proxy_fcgi:error] [pid 42220:tid 42259] [client 20.199.110.126:63530] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:43.209432 2026] [proxy_fcgi:error] [pid 42220:tid 42256] [client 20.199.110.126:65497] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:43.952217 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.199.110.126:63534] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:44.803108 2026] [proxy_fcgi:error] [pid 42220:tid 42265] [client 20.199.110.126:62217] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:45.885759 2026] [proxy_fcgi:error] [pid 42220:tid 42252] [client 20.199.110.126:64937] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:46.673776 2026] [proxy_fcgi:error] [pid 42313:tid 42323] [client 20.199.110.126:62815] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:47.482371 2026] [proxy_fcgi:error] [pid 42313:tid 42338] [client 20.199.110.126:62906] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:48.246766 2026] [proxy_fcgi:error] [pid 42220:tid 42259] [client 20.199.110.126:59119] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:49.403888 2026] [proxy_fcgi:error] [pid 42219:tid 42232] [client 20.199.110.126:64135] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:49.932451 2026] [proxy_fcgi:error] [pid 42219:tid 42226] [client 20.199.110.126:64181] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:51.467727 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 20.199.110.126:63475] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:51.978948 2026] [proxy_fcgi:error] [pid 42221:tid 42292] [client 20.199.110.126:63475] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:53.209209 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 20.199.110.126:65503] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:54.590928 2026] [proxy_fcgi:error] [pid 42219:tid 42223] [client 20.199.110.126:64861] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:55.468619 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 20.199.110.126:63429] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:19:55.769224 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 20.199.110.126:64867] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:00.218203 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 20.199.110.126:64927] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:01.924494 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 20.199.110.126:64095] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:03.271830 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 20.199.110.126:64877] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:04.803751 2026] [proxy_fcgi:error] [pid 42221:tid 42282] [client 20.199.110.126:64171] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:06.421160 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.199.110.126:65487] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:08.635853 2026] [proxy_fcgi:error] [pid 42313:tid 42323] [client 20.199.110.126:64082] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:10.189894 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 20.199.110.126:64124] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:11.257215 2026] [proxy_fcgi:error] [pid 42219:tid 42239] [client 20.199.110.126:64843] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:12.277984 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 20.199.110.126:64854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:13.104145 2026] [proxy_fcgi:error] [pid 42219:tid 42245] [client 20.199.110.126:64883] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:13.883021 2026] [proxy_fcgi:error] [pid 42221:tid 42286] [client 20.199.110.126:63457] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:14.410061 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 20.199.110.126:63538] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:15.393308 2026] [proxy_fcgi:error] [pid 42313:tid 42323] [client 20.199.110.126:65491] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:15.610787 2026] [proxy_fcgi:error] [pid 42219:tid 42239] [client 20.199.110.126:64887] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:16.945554 2026] [proxy_fcgi:error] [pid 42221:tid 42295] [client 20.199.110.126:64068] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:17.785417 2026] [proxy_fcgi:error] [pid 42219:tid 42225] [client 20.199.110.126:62859] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:18.315652 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 20.199.110.126:62859] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:18.741355 2026] [proxy_fcgi:error] [pid 42219:tid 42236] [client 20.199.110.126:62802] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:20.158469 2026] [proxy_fcgi:error] [pid 42219:tid 42240] [client 20.199.110.126:63502] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:20.373090 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.199.110.126:64064] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:21.271102 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 20.199.110.126:64943] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:22.120198 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 20.199.110.126:62868] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:22.417103 2026] [proxy_fcgi:error] [pid 42313:tid 42336] [client 20.199.110.126:62896] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:23.707205 2026] [proxy_fcgi:error] [pid 42313:tid 42340] [client 20.199.110.126:62838] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:23.782515 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 20.199.110.126:64106] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:26.059699 2026] [proxy_fcgi:error] [pid 42219:tid 42228] [client 20.199.110.126:64097] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:26.319272 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 20.199.110.126:64919] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:27.266831 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 20.199.110.126:65506] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:28.066084 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 20.199.110.126:65496] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:28.716501 2026] [proxy_fcgi:error] [pid 42221:tid 42295] [client 20.199.110.126:64074] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:29.114300 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.199.110.126:64090] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:30.085104 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 20.199.110.126:64834] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:30.152249 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 20.199.110.126:64871] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:31.004740 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 20.199.110.126:63442] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:31.707746 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.199.110.126:64092] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:32.127848 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 20.199.110.126:64893] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:32.672948 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 20.199.110.126:64893] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:33.128564 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 20.199.110.126:62889] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:33.969719 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 20.199.110.126:64184] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:35.787713 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.199.110.126:64162] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:37.732428 2026] [proxy_fcgi:error] [pid 42220:tid 42255] [client 20.199.110.126:64954] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:39.306061 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.110.126:64078] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:40.607425 2026] [proxy_fcgi:error] [pid 42219:tid 42238] [client 20.199.110.126:64123] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:42.567155 2026] [proxy_fcgi:error] [pid 42219:tid 42225] [client 20.199.110.126:64862] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:45.793341 2026] [proxy_fcgi:error] [pid 42220:tid 42256] [client 20.199.110.126:63426] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:47.826411 2026] [proxy_fcgi:error] [pid 42220:tid 42261] [client 20.199.110.126:63450] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:49.518841 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 20.199.110.126:64093] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:51.146042 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.110.126:64894] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:53.227646 2026] [proxy_fcgi:error] [pid 42221:tid 42280] [client 20.199.110.126:63486] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:53.744011 2026] [proxy_fcgi:error] [pid 42221:tid 42289] [client 20.199.110.126:63486] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:55.716309 2026] [proxy_fcgi:error] [pid 42313:tid 42340] [client 20.199.110.126:64845] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:20:57.998229 2026] [proxy_fcgi:error] [pid 42221:tid 42286] [client 20.199.110.126:64880] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:00.531683 2026] [proxy_fcgi:error] [pid 42219:tid 42226] [client 20.199.110.126:63454] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:01.665894 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.199.110.126:62853] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:03.023629 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 20.199.110.126:64950] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:04.458495 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 74.248.34.0:46465] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:04.576306 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 74.248.34.0:57787] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:04.752172 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 20.199.110.126:63458] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:05.926296 2026] [proxy_fcgi:error] [pid 42313:tid 42325] [client 74.248.34.0:5531] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:06.023093 2026] [proxy_fcgi:error] [pid 42220:tid 42275] [client 74.248.34.0:48396] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:06.346197 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.199.110.126:62157] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:07.092726 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 74.248.34.0:49540] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:07.486155 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 74.248.34.0:44732] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:08.173489 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 20.199.110.126:64853] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:09.074750 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 74.248.34.0:57790] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:09.229251 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 74.248.34.0:65474] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:09.230769 2026] [proxy_fcgi:error] [pid 42313:tid 42340] [client 20.199.110.126:63444] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:10.590055 2026] [proxy_fcgi:error] [pid 42221:tid 42296] [client 20.199.110.126:62854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:11.017703 2026] [proxy_fcgi:error] [pid 42219:tid 42224] [client 74.248.34.0:47055] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:11.769122 2026] [proxy_fcgi:error] [pid 42221:tid 42300] [client 20.199.110.126:62209] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:12.234869 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 74.248.34.0:5514] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:12.917451 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 20.199.110.126:64166] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:13.215870 2026] [proxy_fcgi:error] [pid 42221:tid 42280] [client 74.248.34.0:65491] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:14.156738 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 74.248.34.0:65500] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:14.230149 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.199.110.126:64139] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:15.181838 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 74.248.34.0:5468] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:15.807303 2026] [proxy_fcgi:error] [pid 42219:tid 42238] [client 74.248.34.0:5961] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:16.429300 2026] [proxy_fcgi:error] [pid 42221:tid 42293] [client 74.248.34.0:5993] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:16.469465 2026] [proxy_fcgi:error] [pid 42220:tid 42273] [client 20.199.110.126:62807] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:17.486505 2026] [proxy_fcgi:error] [pid 42220:tid 42274] [client 74.248.34.0:63001] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:17.746378 2026] [proxy_fcgi:error] [pid 42221:tid 42278] [client 20.199.110.126:65527] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:17.919339 2026] [proxy_fcgi:error] [pid 42220:tid 42251] [client 74.248.34.0:5499] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:19.133901 2026] [proxy_fcgi:error] [pid 42221:tid 42294] [client 74.248.34.0:60042] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:19.380547 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 74.248.34.0:65514] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:20.567023 2026] [proxy_fcgi:error] [pid 42219:tid 42244] [client 74.248.34.0:60072] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:20.614424 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 74.248.34.0:62943] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:21.618278 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 74.248.34.0:60066] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:21.911668 2026] [proxy_fcgi:error] [pid 42219:tid 42223] [client 20.199.110.126:64958] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:22.038519 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 74.248.34.0:5968] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:22.457306 2026] [proxy_fcgi:error] [pid 42219:tid 42230] [client 20.199.110.126:64958] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:23.389993 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 74.248.34.0:6002] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:23.971569 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 20.199.110.126:65525] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:24.457749 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 74.248.34.0:62970] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:24.503691 2026] [proxy_fcgi:error] [pid 42220:tid 42264] [client 74.248.34.0:62995] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:25.065058 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 20.199.110.126:62174] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:25.688085 2026] [proxy_fcgi:error] [pid 42221:tid 42285] [client 74.248.34.0:63023] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:25.694536 2026] [proxy_fcgi:error] [pid 42219:tid 42225] [client 74.248.34.0:62980] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:26.014730 2026] [proxy_fcgi:error] [pid 42221:tid 42289] [client 20.199.110.126:64158] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:26.741818 2026] [proxy_fcgi:error] [pid 42219:tid 42244] [client 74.248.34.0:57765] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:27.173594 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 74.248.34.0:49548] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:27.756740 2026] [proxy_fcgi:error] [pid 42219:tid 42242] [client 20.199.110.126:64832] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:28.029167 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 74.248.34.0:62941] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:28.697783 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 74.248.34.0:65477] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:29.058162 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 74.248.34.0:5990] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:29.620174 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 20.199.110.126:63498] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:30.229775 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 74.248.34.0:49559] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:30.638809 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 74.248.34.0:62967] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:30.647938 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.199.110.126:64860] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:31.925183 2026] [proxy_fcgi:error] [pid 42220:tid 42263] [client 20.199.110.126:62832] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:31.967385 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 74.248.34.0:49593] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:32.543393 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 74.248.34.0:65519] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:32.997772 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 74.248.34.0:62929] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:33.504313 2026] [proxy_fcgi:error] [pid 42219:tid 42247] [client 20.199.110.126:64858] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:33.890627 2026] [proxy_fcgi:error] [pid 42219:tid 42242] [client 74.248.34.0:5981] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:34.201768 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 74.248.34.0:57737] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:35.103854 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 74.248.34.0:5450] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:35.198543 2026] [proxy_fcgi:error] [pid 42219:tid 42228] [client 20.199.110.126:65510] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:36.684995 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.199.110.126:63469] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:36.693422 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 74.248.34.0:57777] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:36.880123 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 74.248.34.0:60083] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:38.085561 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 20.199.110.126:64902] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:38.617080 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 20.199.110.126:64902] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:38.712778 2026] [proxy_fcgi:error] [pid 42219:tid 42240] [client 74.248.34.0:62930] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:39.093632 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 74.248.34.0:5953] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:40.181027 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 74.248.34.0:60064] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:40.796473 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 20.199.110.126:64903] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:42.631251 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 74.248.34.0:65493] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:47.496060 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 74.248.34.0:5382] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:49.757268 2026] [proxy_fcgi:error] [pid 42219:tid 42242] [client 74.248.34.0:65492] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:52.229264 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 74.248.34.0:60043] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:52.269543 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 74.248.34.0:49557] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:55.859198 2026] [proxy_fcgi:error] [pid 42221:tid 42295] [client 74.248.34.0:5459] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:56.284554 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 74.248.34.0:65488] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:57.241609 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 74.248.34.0:60044] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:58.525717 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 74.248.34.0:65520] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:58.831392 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 74.248.34.0:65511] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:21:59.630245 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 74.248.34.0:63022] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:00.608312 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 74.248.34.0:60037] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:01.064618 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 74.248.34.0:5412] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:01.558016 2026] [proxy_fcgi:error] [pid 42219:tid 42238] [client 74.248.34.0:5474] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:02.787721 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 74.248.34.0:60032] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:03.433659 2026] [proxy_fcgi:error] [pid 42219:tid 42236] [client 74.248.34.0:5510] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:04.637734 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 74.248.34.0:65485] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:05.184875 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 74.248.34.0:62994] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:05.735296 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 74.248.34.0:65505] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:06.211970 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 74.248.34.0:60054] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:06.927285 2026] [proxy_fcgi:error] [pid 42219:tid 42238] [client 74.248.34.0:60067] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:08.009763 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 74.248.34.0:48399] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:08.699957 2026] [proxy_fcgi:error] [pid 42219:tid 42223] [client 74.248.34.0:65521] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:09.219961 2026] [proxy_fcgi:error] [pid 42220:tid 42251] [client 74.248.34.0:5378] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:10.468275 2026] [proxy_fcgi:error] [pid 42220:tid 42256] [client 74.248.34.0:65481] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:10.706921 2026] [proxy_fcgi:error] [pid 42219:tid 42238] [client 74.248.34.0:5408] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:11.629042 2026] [proxy_fcgi:error] [pid 42220:tid 42266] [client 74.248.34.0:51009] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:12.158127 2026] [proxy_fcgi:error] [pid 42219:tid 42229] [client 74.248.34.0:5984] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:12.692659 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 74.248.34.0:5459] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:13.270864 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 74.248.34.0:5446] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:14.028641 2026] [proxy_fcgi:error] [pid 42313:tid 42328] [client 74.248.34.0:5423] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:14.340566 2026] [proxy_fcgi:error] [pid 42220:tid 42252] [client 74.248.34.0:5987] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:15.359352 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 74.248.34.0:5485] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:15.636928 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 74.248.34.0:62988] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:16.699175 2026] [proxy_fcgi:error] [pid 42219:tid 42224] [client 74.248.34.0:63025] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:17.434315 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 74.248.34.0:5443] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:18.428792 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 74.248.34.0:60060] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:19.782017 2026] [proxy_fcgi:error] [pid 42220:tid 42262] [client 74.248.34.0:63010] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:20.212274 2026] [proxy_fcgi:error] [pid 42221:tid 42298] [client 74.248.34.0:6010] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:20.859472 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 74.248.34.0:5975] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:21.682444 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 74.248.34.0:5451] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:22.360812 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 74.248.34.0:5486] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:24.150274 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 74.248.34.0:5998] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:26.471088 2026] [proxy_fcgi:error] [pid 42219:tid 42229] [client 74.248.34.0:5432] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:28.450809 2026] [proxy_fcgi:error] [pid 42221:tid 42283] [client 74.248.34.0:60078] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:29.764921 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 74.248.34.0:49542] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:30.753905 2026] [proxy_fcgi:error] [pid 42221:tid 42295] [client 74.248.34.0:5409] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:32.975839 2026] [proxy_fcgi:error] [pid 42220:tid 42251] [client 74.248.34.0:5392] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:33.780842 2026] [proxy_fcgi:error] [pid 42220:tid 42266] [client 74.248.34.0:63032] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:35.252349 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 74.248.34.0:5958] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:35.646127 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 74.248.34.0:44696] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:36.985491 2026] [proxy_fcgi:error] [pid 42221:tid 42279] [client 74.248.34.0:5431] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:37.577482 2026] [proxy_fcgi:error] [pid 42220:tid 42256] [client 74.248.34.0:63000] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:38.809628 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 74.248.34.0:62977] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:40.311914 2026] [proxy_fcgi:error] [pid 42219:tid 42227] [client 74.248.34.0:63026] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:40.861689 2026] [proxy_fcgi:error] [pid 42220:tid 42257] [client 74.248.34.0:5456] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:41.777541 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 74.248.34.0:65516] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:43.498003 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 74.248.34.0:60049] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:43.881147 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 74.248.34.0:5407] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:44.820151 2026] [proxy_fcgi:error] [pid 42220:tid 42274] [client 74.248.34.0:60058] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:45.581297 2026] [proxy_fcgi:error] [pid 42221:tid 42297] [client 74.248.34.0:5389] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:45.742512 2026] [proxy_fcgi:error] [pid 42221:tid 42288] [client 74.248.34.0:60057] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:46.842458 2026] [proxy_fcgi:error] [pid 42313:tid 42328] [client 74.248.34.0:60070] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:46.983489 2026] [proxy_fcgi:error] [pid 42220:tid 42255] [client 74.248.34.0:60057] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:48.209680 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 74.248.34.0:62912] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:48.532659 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 74.248.34.0:5995] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:49.775209 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 74.248.34.0:62969] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:50.193079 2026] [proxy_fcgi:error] [pid 42220:tid 42265] [client 74.248.34.0:5489] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:51.215713 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 74.248.34.0:63029] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:52.160321 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 74.248.34.0:6013] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:52.195758 2026] [proxy_fcgi:error] [pid 42313:tid 42335] [client 74.248.34.0:62963] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:53.334032 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 74.248.34.0:60076] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:53.649482 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 74.248.34.0:49549] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:54.277576 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 74.248.34.0:62990] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:54.539690 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 74.248.34.0:5979] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:55.327331 2026] [proxy_fcgi:error] [pid 42219:tid 42247] [client 74.248.34.0:65506] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:55.906468 2026] [proxy_fcgi:error] [pid 42219:tid 42228] [client 74.248.34.0:60080] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:56.771417 2026] [proxy_fcgi:error] [pid 42221:tid 42298] [client 74.248.34.0:62998] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:57.093070 2026] [proxy_fcgi:error] [pid 42221:tid 42300] [client 74.248.34.0:62975] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:58.162742 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 74.248.34.0:5414] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:58.703015 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 74.248.34.0:57750] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:22:59.411876 2026] [proxy_fcgi:error] [pid 42219:tid 42244] [client 74.248.34.0:57776] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:00.033742 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 74.248.34.0:62951] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:00.675846 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 74.248.34.0:5418] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:01.402640 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 74.248.34.0:49561] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:01.908800 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 74.248.34.0:5405] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:02.822131 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 74.248.34.0:51043] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:02.909401 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 74.248.34.0:60074] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:03.852913 2026] [proxy_fcgi:error] [pid 42221:tid 42293] [client 74.248.34.0:60068] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:04.017755 2026] [proxy_fcgi:error] [pid 42220:tid 42256] [client 74.248.34.0:5469] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:05.130980 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 74.248.34.0:5442] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:05.618960 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 74.248.34.0:51032] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:06.647681 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 74.248.34.0:44728] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:07.528187 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 74.248.34.0:5402] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:07.717451 2026] [proxy_fcgi:error] [pid 42221:tid 42292] [client 74.248.34.0:65475] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:08.699645 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 74.248.34.0:62987] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:08.832809 2026] [proxy_fcgi:error] [pid 42221:tid 42283] [client 74.248.34.0:5427] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:09.710968 2026] [proxy_fcgi:error] [pid 42313:tid 42325] [client 74.248.34.0:62974] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:09.865180 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 74.248.34.0:65494] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:10.837385 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 74.248.34.0:62991] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:10.856682 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 74.248.34.0:5513] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:11.820462 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 74.248.34.0:49545] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:11.961621 2026] [proxy_fcgi:error] [pid 42220:tid 42267] [client 74.248.34.0:5440] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:13.106307 2026] [proxy_fcgi:error] [pid 42220:tid 42254] [client 74.248.34.0:62961] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:13.154541 2026] [proxy_fcgi:error] [pid 42220:tid 42252] [client 74.248.34.0:49555] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:14.553737 2026] [proxy_fcgi:error] [pid 42219:tid 42238] [client 74.248.34.0:46517] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:14.723903 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 74.248.34.0:62918] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:15.646105 2026] [proxy_fcgi:error] [pid 42220:tid 42263] [client 74.248.34.0:65497] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:15.831441 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 74.248.34.0:62996] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:17.189975 2026] [proxy_fcgi:error] [pid 42220:tid 42274] [client 74.248.34.0:65524] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:17.421311 2026] [proxy_fcgi:error] [pid 42219:tid 42247] [client 74.248.34.0:5424] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:19.201111 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 74.248.34.0:5393] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:19.250455 2026] [proxy_fcgi:error] [pid 42219:tid 42232] [client 74.248.34.0:63021] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:21.031253 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 74.248.34.0:48410] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:21.055153 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 74.248.34.0:63008] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:23.503777 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 74.248.34.0:5445] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:24.959372 2026] [proxy_fcgi:error] [pid 42219:tid 42228] [client 74.248.34.0:5476] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:28.063751 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 74.248.34.0:5490] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:30.324510 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 74.248.34.0:65476] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:30.392425 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 74.248.34.0:62936] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:33.927301 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 74.248.34.0:5452] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:35.138550 2026] [proxy_fcgi:error] [pid 42221:tid 42284] [client 74.248.34.0:5376] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:36.316960 2026] [proxy_fcgi:error] [pid 42221:tid 42285] [client 74.248.34.0:65495] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:38.217096 2026] [proxy_fcgi:error] [pid 42313:tid 42338] [client 74.248.34.0:62927] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:38.528668 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 74.248.34.0:62917] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:39.100957 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 74.248.34.0:49554] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:39.610529 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 74.248.34.0:60095] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:39.976136 2026] [proxy_fcgi:error] [pid 42220:tid 42252] [client 74.248.34.0:57784] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:40.694834 2026] [proxy_fcgi:error] [pid 42220:tid 42267] [client 74.248.34.0:65478] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:40.854697 2026] [proxy_fcgi:error] [pid 42220:tid 42258] [client 74.248.34.0:48412] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:41.701876 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 74.248.34.0:62983] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:41.767289 2026] [proxy_fcgi:error] [pid 42221:tid 42299] [client 74.248.34.0:5396] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:42.616297 2026] [proxy_fcgi:error] [pid 42219:tid 42236] [client 74.248.34.0:48398] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:42.780139 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 74.248.34.0:5965] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:43.796862 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 74.248.34.0:47089] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:43.921573 2026] [proxy_fcgi:error] [pid 42220:tid 42257] [client 74.248.34.0:57738] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:44.843985 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 74.248.34.0:60093] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:45.337315 2026] [proxy_fcgi:error] [pid 42221:tid 42282] [client 74.248.34.0:60069] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:45.734224 2026] [proxy_fcgi:error] [pid 42221:tid 42283] [client 74.248.34.0:49596] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:46.562615 2026] [proxy_fcgi:error] [pid 42219:tid 42239] [client 74.248.34.0:62949] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:46.933580 2026] [proxy_fcgi:error] [pid 42313:tid 42336] [client 74.248.34.0:5959] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:47.556329 2026] [proxy_fcgi:error] [pid 42313:tid 42340] [client 74.248.34.0:62914] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:48.459025 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 74.248.34.0:60090] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:48.731848 2026] [proxy_fcgi:error] [pid 42221:tid 42300] [client 74.248.34.0:57767] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:49.612741 2026] [proxy_fcgi:error] [pid 42219:tid 42228] [client 74.248.34.0:5428] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:50.326361 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 74.248.34.0:60040] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:51.037034 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 74.248.34.0:60040] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:51.234148 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 74.248.34.0:5384] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:52.249265 2026] [proxy_fcgi:error] [pid 42220:tid 42263] [client 74.248.34.0:48441] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:52.278182 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 74.248.34.0:5457] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:53.637705 2026] [proxy_fcgi:error] [pid 42219:tid 42239] [client 74.248.34.0:5413] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:54.485428 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 74.248.34.0:5533] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:54.945264 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 74.248.34.0:62928] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:55.913145 2026] [proxy_fcgi:error] [pid 42313:tid 42340] [client 74.248.34.0:5417] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:56.468500 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 74.248.34.0:5417] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:56.471380 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 74.248.34.0:5479] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:57.355569 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 74.248.34.0:60088] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:57.603481 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 74.248.34.0:62982] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:59.121991 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 74.248.34.0:51027] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:23:59.398897 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 74.248.34.0:5471] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:00.454541 2026] [proxy_fcgi:error] [pid 42219:tid 42229] [client 74.248.34.0:46471] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:00.589161 2026] [proxy_fcgi:error] [pid 42221:tid 42280] [client 74.248.34.0:48426] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:02.158758 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 74.248.34.0:5439] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:02.321150 2026] [proxy_fcgi:error] [pid 42313:tid 42323] [client 74.248.34.0:5500] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:03.506202 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 74.248.34.0:5536] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:04.782016 2026] [proxy_fcgi:error] [pid 42220:tid 42272] [client 74.248.34.0:63019] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:05.200425 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 74.248.34.0:5508] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:06.205052 2026] [proxy_fcgi:error] [pid 42221:tid 42279] [client 74.248.34.0:5398] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:07.074305 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 74.248.34.0:48436] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:07.734054 2026] [proxy_fcgi:error] [pid 42221:tid 42294] [client 74.248.34.0:60036] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:09.343610 2026] [proxy_fcgi:error] [pid 42219:tid 42244] [client 74.248.34.0:5994] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:10.393444 2026] [proxy_fcgi:error] [pid 42221:tid 42284] [client 74.248.34.0:60048] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:11.069599 2026] [proxy_fcgi:error] [pid 42221:tid 42302] [client 74.248.34.0:49544] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:12.069685 2026] [proxy_fcgi:error] [pid 42221:tid 42279] [client 74.248.34.0:47263] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:12.613296 2026] [proxy_fcgi:error] [pid 42313:tid 42336] [client 74.248.34.0:60081] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:13.114607 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 74.248.34.0:48407] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:14.024891 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 74.248.34.0:5473] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:14.093389 2026] [proxy_fcgi:error] [pid 42220:tid 42269] [client 74.248.34.0:62986] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:15.594630 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 74.248.34.0:48406] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:16.017275 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 74.248.34.0:62999] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:17.452976 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 74.248.34.0:5988] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:17.643103 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 74.248.34.0:5426] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:18.044188 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 74.248.34.0:5988] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:19.153526 2026] [proxy_fcgi:error] [pid 42313:tid 42338] [client 74.248.34.0:63039] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:19.219554 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 74.248.34.0:62937] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:20.351123 2026] [proxy_fcgi:error] [pid 42220:tid 42254] [client 74.248.34.0:51059] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:20.429089 2026] [proxy_fcgi:error] [pid 42221:tid 42295] [client 74.248.34.0:5567] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:21.438397 2026] [proxy_fcgi:error] [pid 42221:tid 42296] [client 74.248.34.0:5567] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:21.587992 2026] [proxy_fcgi:error] [pid 42219:tid 42234] [client 74.248.34.0:51057] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:22.538744 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 74.248.34.0:5419] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:22.841176 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 74.248.34.0:65504] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:23.941103 2026] [proxy_fcgi:error] [pid 42219:tid 42226] [client 74.248.34.0:62925] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:24.320745 2026] [proxy_fcgi:error] [pid 42220:tid 42257] [client 74.248.34.0:63009] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:25.126044 2026] [proxy_fcgi:error] [pid 42220:tid 42274] [client 74.248.34.0:48440] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:25.382334 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 74.248.34.0:5973] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:25.994301 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 74.248.34.0:5470] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:26.535965 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 74.248.34.0:5992] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:26.986588 2026] [proxy_fcgi:error] [pid 42221:tid 42288] [client 74.248.34.0:57758] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:27.795397 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 74.248.34.0:62926] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:28.064193 2026] [proxy_fcgi:error] [pid 42220:tid 42266] [client 74.248.34.0:49589] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:29.243182 2026] [proxy_fcgi:error] [pid 42220:tid 42267] [client 74.248.34.0:49541] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:29.589641 2026] [proxy_fcgi:error] [pid 42219:tid 42230] [client 74.248.34.0:5400] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:30.480294 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 74.248.34.0:63017] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:30.813786 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 74.248.34.0:65486] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:31.359498 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 74.248.34.0:65486] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:32.696729 2026] [proxy_fcgi:error] [pid 42313:tid 42328] [client 74.248.34.0:5972] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:32.726251 2026] [proxy_fcgi:error] [pid 42221:tid 42294] [client 74.248.34.0:6004] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:34.535884 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 74.248.34.0:48391] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:36.656821 2026] [proxy_fcgi:error] [pid 42221:tid 42280] [client 74.248.34.0:6000] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:37.818783 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 74.248.34.0:60035] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:38.373126 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 74.248.34.0:60035] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:24:39.856141 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 74.248.34.0:49543] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:07.719315 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 158.158.50.95:6544] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:08.034111 2026] [proxy_fcgi:error] [pid 42221:tid 42300] [client 158.158.50.95:6495] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:09.086931 2026] [proxy_fcgi:error] [pid 42219:tid 42234] [client 158.158.50.95:6256] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:09.368904 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 158.158.50.95:6692] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:10.062534 2026] [proxy_fcgi:error] [pid 42313:tid 42335] [client 158.158.50.95:6499] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:11.138261 2026] [proxy_fcgi:error] [pid 42220:tid 42273] [client 158.158.50.95:6686] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:11.641099 2026] [proxy_fcgi:error] [pid 42221:tid 42294] [client 158.158.50.95:51883] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:11.965727 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 158.158.50.95:6688] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:12.790624 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 158.158.50.95:50592] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:13.683853 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 158.158.50.95:6704] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:13.843874 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 158.158.50.95:6565] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:14.730432 2026] [proxy_fcgi:error] [pid 42220:tid 42266] [client 158.158.50.95:6707] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:16.001437 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 158.158.50.95:51863] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:16.718731 2026] [proxy_fcgi:error] [pid 42221:tid 42291] [client 158.158.50.95:50594] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:17.068583 2026] [proxy_fcgi:error] [pid 42219:tid 42240] [client 158.158.50.95:51874] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:18.153002 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 158.158.50.95:50585] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:18.262919 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 158.158.50.95:6505] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:19.269476 2026] [proxy_fcgi:error] [pid 42219:tid 42247] [client 158.158.50.95:51866] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:19.280147 2026] [proxy_fcgi:error] [pid 42219:tid 42228] [client 158.158.50.95:6703] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:20.208390 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 158.158.50.95:6702] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:20.506992 2026] [proxy_fcgi:error] [pid 42220:tid 42267] [client 158.158.50.95:6712] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:21.037675 2026] [proxy_fcgi:error] [pid 42220:tid 42256] [client 158.158.50.95:6263] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:21.647625 2026] [proxy_fcgi:error] [pid 42220:tid 42262] [client 158.158.50.95:6240] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:21.860429 2026] [proxy_fcgi:error] [pid 42220:tid 42268] [client 158.158.50.95:6216] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:22.718679 2026] [proxy_fcgi:error] [pid 42313:tid 42338] [client 158.158.50.95:6673] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:24.442569 2026] [proxy_fcgi:error] [pid 42219:tid 42239] [client 158.158.50.95:6269] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:24.641355 2026] [proxy_fcgi:error] [pid 42219:tid 42227] [client 158.158.50.95:50620] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:26.222110 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 158.158.50.95:6658] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:26.692737 2026] [proxy_fcgi:error] [pid 42219:tid 42242] [client 158.158.50.95:6663] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:27.227562 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 158.158.50.95:6524] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:27.699352 2026] [proxy_fcgi:error] [pid 42219:tid 42223] [client 158.158.50.95:6658] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:28.435060 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 158.158.50.95:50603] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:28.585673 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 158.158.50.95:51852] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:29.405737 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 158.158.50.95:6514] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:29.565585 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 158.158.50.95:6471] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:30.577128 2026] [proxy_fcgi:error] [pid 42219:tid 42236] [client 158.158.50.95:51855] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:30.667068 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 158.158.50.95:51899] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:31.866623 2026] [proxy_fcgi:error] [pid 42221:tid 42292] [client 158.158.50.95:51886] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:32.018921 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 158.158.50.95:6658] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:32.795274 2026] [proxy_fcgi:error] [pid 42220:tid 42274] [client 158.158.50.95:6486] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:33.056675 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 158.158.50.95:6228] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:34.005424 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 158.158.50.95:50589] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:34.150479 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 158.158.50.95:6664] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:35.156537 2026] [proxy_fcgi:error] [pid 42221:tid 42287] [client 158.158.50.95:6683] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:36.115035 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 158.158.50.95:6747] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:36.907568 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 158.158.50.95:6523] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:37.361290 2026] [proxy_fcgi:error] [pid 42220:tid 42271] [client 158.158.50.95:6234] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:38.853177 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 158.158.50.95:50618] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:41.743754 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 158.158.50.95:6555] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:25:47.088308 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 158.158.50.95:6554] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:00.959160 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 158.158.50.95:6244] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:04.033139 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 158.158.50.95:6549] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:05.882457 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 158.158.50.95:6252] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:08.101079 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 158.158.50.95:6268] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:09.408415 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 158.158.50.95:50597] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:10.902891 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 158.158.50.95:6221] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:11.876354 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 158.158.50.95:6556] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:13.595766 2026] [proxy_fcgi:error] [pid 42220:tid 42262] [client 158.158.50.95:6579] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:14.756357 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 158.158.50.95:6587] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:16.343962 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 158.158.50.95:6706] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:17.413221 2026] [proxy_fcgi:error] [pid 42221:tid 42298] [client 158.158.50.95:6657] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:18.904555 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 158.158.50.95:50566] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:20.458036 2026] [proxy_fcgi:error] [pid 42220:tid 42274] [client 158.158.50.95:6682] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:22.181253 2026] [proxy_fcgi:error] [pid 42220:tid 42251] [client 158.158.50.95:6484] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:24.115613 2026] [proxy_fcgi:error] [pid 42221:tid 42293] [client 158.158.50.95:6482] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:26.357499 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 158.158.50.95:6543] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:32.920519 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 158.158.50.95:6211] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:34.203645 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 158.158.50.95:6253] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:35.723714 2026] [proxy_fcgi:error] [pid 42220:tid 42257] [client 158.158.50.95:6220] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:37.230434 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 158.158.50.95:6241] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:38.206637 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 158.158.50.95:6270] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:39.093256 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 158.158.50.95:6716] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:40.250502 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 158.158.50.95:6645] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:40.842100 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 158.158.50.95:50612] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:41.556504 2026] [proxy_fcgi:error] [pid 42220:tid 42271] [client 158.158.50.95:6526] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:43.877150 2026] [proxy_fcgi:error] [pid 42219:tid 42238] [client 158.158.50.95:51861] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:45.244120 2026] [proxy_fcgi:error] [pid 42221:tid 42299] [client 158.158.50.95:6230] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:46.126658 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 158.158.50.95:6491] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:46.713896 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 158.158.50.95:50598] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:48.506405 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 158.158.50.95:51900] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:48.880088 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 158.158.50.95:51845] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:50.867750 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 158.158.50.95:6255] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:51.369753 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 158.158.50.95:51846] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:52.843521 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 158.158.50.95:6265] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:54.541435 2026] [proxy_fcgi:error] [pid 42220:tid 42259] [client 158.158.50.95:51887] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:55.778650 2026] [proxy_fcgi:error] [pid 42219:tid 42244] [client 158.158.50.95:6570] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:56.421831 2026] [proxy_fcgi:error] [pid 42221:tid 42285] [client 158.158.50.95:7110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:57.134841 2026] [proxy_fcgi:error] [pid 42219:tid 42242] [client 158.158.50.95:64907] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:58.124491 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 158.158.50.95:6676] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:58.335689 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 158.158.50.95:6572] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:26:59.140553 2026] [proxy_fcgi:error] [pid 42313:tid 42323] [client 158.158.50.95:6695] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:00.125073 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 158.158.50.95:6552] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:01.201736 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 158.158.50.95:6577] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:02.090310 2026] [proxy_fcgi:error] [pid 42220:tid 42261] [client 158.158.50.95:51858] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:02.362344 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 158.158.50.95:6249] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:03.758487 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 158.158.50.95:51901] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:03.892694 2026] [proxy_fcgi:error] [pid 42313:tid 42321] [client 158.158.50.95:6537] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:05.366206 2026] [proxy_fcgi:error] [pid 42220:tid 42262] [client 158.158.50.95:6735] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:05.590018 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 158.158.50.95:6208] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:06.828545 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 158.158.50.95:6229] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:06.829422 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 158.158.50.95:6558] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:07.697037 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 158.158.50.95:51864] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:07.941690 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 158.158.50.95:6646] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:08.633687 2026] [proxy_fcgi:error] [pid 42313:tid 42340] [client 158.158.50.95:6485] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:08.841377 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 158.158.50.95:51903] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:09.890619 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 158.158.50.95:6548] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:09.996718 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 158.158.50.95:6508] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:10.864008 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 158.158.50.95:6536] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:11.747254 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 158.158.50.95:50564] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:12.630431 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 158.158.50.95:6480] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:12.861692 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 158.158.50.95:6690] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:14.134178 2026] [proxy_fcgi:error] [pid 42313:tid 42336] [client 158.158.50.95:6534] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:14.228662 2026] [proxy_fcgi:error] [pid 42219:tid 42242] [client 158.158.50.95:50584] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:15.091881 2026] [proxy_fcgi:error] [pid 42221:tid 42299] [client 158.158.50.95:6601] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:15.580020 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 158.158.50.95:50623] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:16.079067 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 158.158.50.95:63975] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:16.948442 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 158.158.50.95:6728] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:16.949165 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 158.158.50.95:50563] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:17.892684 2026] [proxy_fcgi:error] [pid 42220:tid 42272] [client 158.158.50.95:50590] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:17.972965 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 158.158.50.95:51893] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:18.924428 2026] [proxy_fcgi:error] [pid 42313:tid 42338] [client 158.158.50.95:6687] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:19.648518 2026] [proxy_fcgi:error] [pid 42221:tid 42297] [client 158.158.50.95:6266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:20.047038 2026] [proxy_fcgi:error] [pid 42219:tid 42233] [client 158.158.50.95:51848] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:20.926396 2026] [proxy_fcgi:error] [pid 42219:tid 42230] [client 158.158.50.95:6504] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:21.145210 2026] [proxy_fcgi:error] [pid 42220:tid 42268] [client 158.158.50.95:6582] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:22.348798 2026] [proxy_fcgi:error] [pid 42313:tid 42325] [client 158.158.50.95:64910] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:23.449026 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 158.158.50.95:6518] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:23.760096 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 158.158.50.95:50609] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:26.470135 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 158.158.50.95:7106] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:28.330931 2026] [proxy_fcgi:error] [pid 42221:tid 42302] [client 158.158.50.95:50588] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:29.587474 2026] [proxy_fcgi:error] [pid 42221:tid 42294] [client 158.158.50.95:6515] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:30.619335 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 158.158.50.95:63939] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:31.677493 2026] [proxy_fcgi:error] [pid 42219:tid 42234] [client 158.158.50.95:51856] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:32.656312 2026] [proxy_fcgi:error] [pid 42219:tid 42247] [client 158.158.50.95:6215] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:32.971667 2026] [proxy_fcgi:error] [pid 42221:tid 42280] [client 158.158.50.95:6563] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:33.689708 2026] [proxy_fcgi:error] [pid 42221:tid 42302] [client 158.158.50.95:6258] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:35.380834 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 158.158.50.95:6679] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:35.507728 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 158.158.50.95:6722] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:36.725119 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 158.158.50.95:50561] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:38.283772 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 158.158.50.95:6239] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:39.231487 2026] [proxy_fcgi:error] [pid 42221:tid 42280] [client 158.158.50.95:6720] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:40.216528 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 158.158.50.95:6585] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:41.429102 2026] [proxy_fcgi:error] [pid 42221:tid 42291] [client 158.158.50.95:6768] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:41.769021 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 158.158.50.95:6584] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:42.855256 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 158.158.50.95:6237] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:43.890698 2026] [proxy_fcgi:error] [pid 42313:tid 42340] [client 158.158.50.95:6535] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:44.890361 2026] [proxy_fcgi:error] [pid 42313:tid 42336] [client 158.158.50.95:50582] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:45.836070 2026] [proxy_fcgi:error] [pid 42220:tid 42275] [client 158.158.50.95:6708] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:46.809855 2026] [proxy_fcgi:error] [pid 42221:tid 42279] [client 158.158.50.95:6218] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:47.432165 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 158.158.50.95:7144] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:48.654339 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 158.158.50.95:6578] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:49.677936 2026] [proxy_fcgi:error] [pid 42221:tid 42301] [client 158.158.50.95:6606] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:50.040398 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 158.158.50.95:51881] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:50.980478 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 158.158.50.95:6730] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:51.459965 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 158.158.50.95:50601] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:52.376103 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 158.158.50.95:6687] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:53.624493 2026] [proxy_fcgi:error] [pid 42220:tid 42256] [client 158.158.50.95:6260] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:54.691269 2026] [proxy_fcgi:error] [pid 42221:tid 42293] [client 158.158.50.95:6474] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:55.982341 2026] [proxy_fcgi:error] [pid 42220:tid 42259] [client 158.158.50.95:6559] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:57.268397 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 158.158.50.95:6528] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:27:58.984605 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 158.158.50.95:6897] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:00.259401 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 158.158.50.95:50576] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:01.926957 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 158.158.50.95:6243] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:04.307105 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 158.158.50.95:6527] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:04.631136 2026] [proxy_fcgi:error] [pid 42313:tid 42328] [client 158.158.50.95:51894] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:05.436894 2026] [proxy_fcgi:error] [pid 42221:tid 42278] [client 158.158.50.95:6580] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:06.257371 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 158.158.50.95:6513] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:07.134589 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 158.158.50.95:51902] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:07.219699 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 158.158.50.95:50604] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:07.968371 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 158.158.50.95:50586] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:08.773183 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 158.158.50.95:7139] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:09.193310 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 158.158.50.95:6500] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:09.755164 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 158.158.50.95:6674] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:10.507008 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 158.158.50.95:6719] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:10.541593 2026] [proxy_fcgi:error] [pid 42221:tid 42292] [client 158.158.50.95:51869] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:11.440171 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 158.158.50.95:6777] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:11.703323 2026] [proxy_fcgi:error] [pid 42220:tid 42253] [client 158.158.50.95:6467] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:12.250017 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 158.158.50.95:6733] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:12.786113 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 158.158.50.95:6224] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:13.059135 2026] [proxy_fcgi:error] [pid 42221:tid 42279] [client 158.158.50.95:6261] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:13.577629 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 158.158.50.95:51872] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:14.142591 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 158.158.50.95:6724] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:14.511814 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 158.158.50.95:6642] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:15.126710 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 158.158.50.95:6882] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:15.578222 2026] [proxy_fcgi:error] [pid 42219:tid 42232] [client 158.158.50.95:6776] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:16.059381 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 158.158.50.95:6562] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:16.979641 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 158.158.50.95:50574] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:17.239072 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 158.158.50.95:6271] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:17.788307 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 158.158.50.95:6651] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:18.738748 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 158.158.50.95:50610] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:18.940551 2026] [proxy_fcgi:error] [pid 42221:tid 42296] [client 158.158.50.95:50611] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:19.513128 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 158.158.50.95:51840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:20.496075 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 158.158.50.95:51889] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:21.057955 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 158.158.50.95:7126] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:21.594537 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 158.158.50.95:7126] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:21.640995 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 158.158.50.95:6775] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:22.184202 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 158.158.50.95:6775] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:22.985829 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 158.158.50.95:64919] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:23.760456 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 158.158.50.95:6727] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:24.158696 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 158.158.50.95:6469] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:24.628098 2026] [proxy_fcgi:error] [pid 42221:tid 42284] [client 158.158.50.95:6759] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:25.403307 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 158.158.50.95:6727] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:25.767411 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 158.158.50.95:6541] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:26.304790 2026] [proxy_fcgi:error] [pid 42219:tid 42245] [client 158.158.50.95:51860] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:26.848180 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 158.158.50.95:51878] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:27.076622 2026] [proxy_fcgi:error] [pid 42221:tid 42291] [client 158.158.50.95:51877] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:28.193555 2026] [proxy_fcgi:error] [pid 42220:tid 42258] [client 158.158.50.95:6209] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:28.672044 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 158.158.50.95:6245] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:29.729886 2026] [proxy_fcgi:error] [pid 42219:tid 42226] [client 158.158.50.95:6714] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:30.937543 2026] [proxy_fcgi:error] [pid 42313:tid 42340] [client 158.158.50.95:64949] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:31.061420 2026] [proxy_fcgi:error] [pid 42221:tid 42282] [client 158.158.50.95:51850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:31.838912 2026] [proxy_fcgi:error] [pid 42220:tid 42271] [client 158.158.50.95:7160] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:32.832352 2026] [proxy_fcgi:error] [pid 42219:tid 42236] [client 158.158.50.95:6225] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:33.744106 2026] [proxy_fcgi:error] [pid 42221:tid 42281] [client 158.158.50.95:50615] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:34.011521 2026] [proxy_fcgi:error] [pid 42220:tid 42272] [client 158.158.50.95:50560] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:35.323191 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 158.158.50.95:6593] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:36.406635 2026] [proxy_fcgi:error] [pid 42219:tid 42228] [client 158.158.50.95:6213] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:36.819002 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 158.158.50.95:6698] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:38.378656 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 158.158.50.95:6262] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:38.862655 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 158.158.50.95:6614] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:39.640163 2026] [proxy_fcgi:error] [pid 42220:tid 42273] [client 158.158.50.95:7147] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:40.487626 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 158.158.50.95:6721] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:40.597053 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 158.158.50.95:6507] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:41.118718 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 158.158.50.95:6507] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:41.866688 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 158.158.50.95:51843] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:42.028622 2026] [proxy_fcgi:error] [pid 42313:tid 42328] [client 158.158.50.95:64913] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:43.325624 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 158.158.50.95:51895] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:43.618693 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 158.158.50.95:51880] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:44.142261 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 158.158.50.95:50595] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:45.081546 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 158.158.50.95:6886] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:45.536115 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 158.158.50.95:6583] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:46.056806 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 158.158.50.95:6496] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:46.905088 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 158.158.50.95:6729] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:47.755419 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 158.158.50.95:6589] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:48.055299 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 158.158.50.95:6780] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:48.948442 2026] [proxy_fcgi:error] [pid 42313:tid 42328] [client 158.158.50.95:6742] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:49.769345 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 158.158.50.95:63961] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:49.893519 2026] [proxy_fcgi:error] [pid 42221:tid 42287] [client 158.158.50.95:6232] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:50.769262 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 158.158.50.95:6617] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:51.592083 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 158.158.50.95:6696] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:51.853083 2026] [proxy_fcgi:error] [pid 42313:tid 42335] [client 158.158.50.95:6600] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:52.132535 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 158.158.50.95:6696] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:52.441002 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 158.158.50.95:6600] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:53.339449 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 158.158.50.95:50599] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:54.158110 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 158.158.50.95:6766] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:56.091078 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 158.158.50.95:6498] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:28:58.678656 2026] [proxy_fcgi:error] [pid 42219:tid 42229] [client 158.158.50.95:64837] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:29:00.854399 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 158.158.50.95:7135] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:29:03.031585 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 158.158.50.95:50571] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:29:04.219166 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 158.158.50.95:6597] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:29:05.321881 2026] [proxy_fcgi:error] [pid 42219:tid 42234] [client 158.158.50.95:6489] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:29:06.759786 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 158.158.50.95:51888] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:29:07.758053 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 158.158.50.95:51853] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:29:08.879572 2026] [proxy_fcgi:error] [pid 42219:tid 42245] [client 158.158.50.95:51876] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:29:10.463794 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 158.158.50.95:63941] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:29:10.979384 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 158.158.50.95:63941] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:29:13.328060 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 158.158.50.95:50619] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:34:41.524556 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 20.199.110.126:65463] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:34:43.662782 2026] [proxy_fcgi:error] [pid 42221:tid 42289] [client 20.199.110.126:65424] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:34:45.189963 2026] [proxy_fcgi:error] [pid 42221:tid 42281] [client 20.199.110.126:65350] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:34:46.852715 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 20.199.110.126:65413] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:34:48.575640 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 20.199.110.126:65361] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:34:50.681230 2026] [proxy_fcgi:error] [pid 42221:tid 42282] [client 20.199.110.126:65440] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:34:51.810626 2026] [proxy_fcgi:error] [pid 42220:tid 42261] [client 20.199.110.126:65461] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:34:53.263134 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 20.199.110.126:65429] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:34:54.697188 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 20.199.110.126:65402] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:34:56.255024 2026] [proxy_fcgi:error] [pid 42313:tid 42338] [client 20.199.110.126:64774] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:34:57.387534 2026] [proxy_fcgi:error] [pid 42219:tid 42244] [client 20.199.110.126:65358] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:00.736267 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 20.199.110.126:65408] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:03.747616 2026] [proxy_fcgi:error] [pid 42221:tid 42296] [client 20.199.110.126:65362] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:05.956875 2026] [proxy_fcgi:error] [pid 42221:tid 42279] [client 20.199.110.126:65403] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:07.532275 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 20.199.110.126:65360] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:09.427139 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 20.199.110.126:65391] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:10.783894 2026] [proxy_fcgi:error] [pid 42221:tid 42295] [client 20.199.110.126:64807] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:12.808469 2026] [proxy_fcgi:error] [pid 42221:tid 42302] [client 20.199.110.126:64794] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:13.911127 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 20.199.110.126:65421] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:15.749210 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.199.110.126:65467] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:17.267351 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 20.199.110.126:64786] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:18.563997 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 20.199.110.126:65454] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:20.636807 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.199.110.126:65355] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:22.419992 2026] [proxy_fcgi:error] [pid 42220:tid 42252] [client 20.199.110.126:65435] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:29.431556 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 4.223.70.8:65030] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:30.759653 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 20.199.110.126:65364] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:31.311489 2026] [proxy_fcgi:error] [pid 42220:tid 42269] [client 4.223.70.8:64984] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:33.578036 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 4.223.70.8:65444] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:34.976945 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 4.223.70.8:65418] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:36.804335 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 4.223.70.8:65011] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:39.300518 2026] [proxy_fcgi:error] [pid 42220:tid 42256] [client 4.223.70.8:65430] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:41.200034 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 4.223.70.8:65082] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:42.139535 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 4.223.70.8:65050] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:43.242172 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 4.223.70.8:64661] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:43.580864 2026] [proxy_fcgi:error] [pid 42221:tid 42296] [client 20.199.110.126:64809] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:44.550147 2026] [proxy_fcgi:error] [pid 42220:tid 42256] [client 4.223.70.8:65071] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:46.130144 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 20.199.110.126:64772] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:46.491551 2026] [proxy_fcgi:error] [pid 42219:tid 42238] [client 4.223.70.8:65079] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:47.562656 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 4.223.70.8:65058] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:48.174292 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.199.110.126:65459] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:48.882508 2026] [proxy_fcgi:error] [pid 42313:tid 42325] [client 4.223.70.8:65448] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:49.359934 2026] [proxy_fcgi:error] [pid 42219:tid 42247] [client 20.199.110.126:64783] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:50.021152 2026] [proxy_fcgi:error] [pid 42221:tid 42298] [client 4.223.70.8:65422] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:51.238835 2026] [proxy_fcgi:error] [pid 42219:tid 42228] [client 20.199.110.126:65409] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:51.393040 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 4.223.70.8:65477] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:52.646842 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 4.223.70.8:65078] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:54.013319 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.110.126:65466] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:54.180844 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 4.223.70.8:65064] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:55.201146 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.199.110.126:65377] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:56.016404 2026] [proxy_fcgi:error] [pid 42313:tid 42338] [client 4.223.70.8:64644] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:57.256797 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.199.110.126:65450] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:58.040048 2026] [proxy_fcgi:error] [pid 42220:tid 42264] [client 4.223.70.8:65076] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:58.705217 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.110.126:65398] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:35:59.636480 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 4.223.70.8:65508] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:00.318325 2026] [proxy_fcgi:error] [pid 42221:tid 42278] [client 20.199.110.126:64777] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:01.484125 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 20.199.110.126:64799] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:02.617805 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 4.223.70.8:64975] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:03.024294 2026] [proxy_fcgi:error] [pid 42221:tid 42299] [client 20.199.110.126:65386] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:04.374146 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 4.223.70.8:64977] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:04.652745 2026] [proxy_fcgi:error] [pid 42313:tid 42321] [client 20.199.110.126:65399] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:05.803013 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 20.199.110.126:65375] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:06.494277 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 4.223.70.8:65449] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:08.760592 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 4.223.70.8:64700] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:10.000074 2026] [proxy_fcgi:error] [pid 42220:tid 42251] [client 20.199.110.126:64727] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:10.729328 2026] [proxy_fcgi:error] [pid 42219:tid 42234] [client 4.223.70.8:64360] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:10.832976 2026] [proxy_fcgi:error] [pid 42221:tid 42294] [client 20.199.110.126:65357] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:12.038434 2026] [:error] [pid 42220:tid 42258] [client 158.158.50.95:4564] [client 158.158.50.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adpqbEz5c3Cs6a8B5QuhswAAAMc"]
[Sat Apr 11 23:36:12.153273 2026] [proxy_fcgi:error] [pid 42220:tid 42275] [client 20.199.110.126:64800] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:14.235912 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 20.199.110.126:65380] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:16.427114 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 20.199.110.126:65372] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:18.664119 2026] [:error] [pid 52608:tid 52621] [client 158.158.50.95:4137] [client 158.158.50.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adpqciY5wH-BLt5QEKiB2QAAAQo"]
[Sat Apr 11 23:36:24.268292 2026] [proxy_fcgi:error] [pid 42221:tid 42300] [client 4.223.70.8:65490] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:27.483887 2026] [proxy_fcgi:error] [pid 42220:tid 42252] [client 4.223.70.8:64664] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:27.891838 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 20.199.110.126:64708] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:28.821785 2026] [proxy_fcgi:error] [pid 42221:tid 42293] [client 4.223.70.8:65025] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:31.393953 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 4.223.70.8:65471] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:32.031780 2026] [proxy_fcgi:error] [pid 42221:tid 42280] [client 20.199.110.126:65439] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:33.448568 2026] [proxy_fcgi:error] [pid 42220:tid 42258] [client 20.199.110.126:64780] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:33.729203 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 4.223.70.8:65070] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:35.205135 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 20.199.110.126:62755] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:35.205370 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 4.223.70.8:64646] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:37.506753 2026] [proxy_fcgi:error] [pid 42220:tid 42268] [client 20.199.110.126:64798] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:37.508688 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 4.223.70.8:65423] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:39.760571 2026] [proxy_fcgi:error] [pid 42219:tid 42236] [client 4.223.70.8:65497] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:40.099032 2026] [proxy_fcgi:error] [pid 42220:tid 42256] [client 20.199.110.126:65464] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:42.038650 2026] [proxy_fcgi:error] [pid 42219:tid 42225] [client 20.199.110.126:65417] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:42.472160 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 4.223.70.8:64660] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:43.940441 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 20.199.110.126:65451] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:45.394659 2026] [proxy_fcgi:error] [pid 42221:tid 42285] [client 20.199.110.126:65405] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:46.189097 2026] [proxy_fcgi:error] [pid 42313:tid 42335] [client 4.223.70.8:65433] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:47.553049 2026] [proxy_fcgi:error] [pid 42220:tid 42257] [client 20.199.110.126:65390] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:47.779804 2026] [proxy_fcgi:error] [pid 42220:tid 42268] [client 4.223.70.8:65074] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:49.310044 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 20.199.110.126:65389] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:49.359987 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 4.223.70.8:65516] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:50.333322 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 4.223.70.8:65469] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:50.844490 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.199.110.126:64823] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:51.533859 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 4.223.70.8:65009] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:52.263389 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 20.199.110.126:65366] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:52.537253 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 4.223.70.8:65038] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:53.553711 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 20.199.110.126:65367] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:53.697996 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 4.223.70.8:65018] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:55.294455 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 4.223.70.8:65012] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:55.585839 2026] [proxy_fcgi:error] [pid 42221:tid 42299] [client 20.199.110.126:64826] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:57.285905 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 4.223.70.8:65067] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:57.404124 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 20.199.110.126:62753] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:36:58.812888 2026] [proxy_fcgi:error] [pid 42313:tid 42338] [client 20.199.110.126:65382] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:00.327552 2026] [proxy_fcgi:error] [pid 42221:tid 42286] [client 20.199.110.126:65414] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:01.363487 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 4.223.70.8:65500] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:02.190525 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 20.199.110.126:64814] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:03.506785 2026] [proxy_fcgi:error] [pid 42221:tid 42283] [client 20.199.110.126:65381] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:04.635270 2026] [proxy_fcgi:error] [pid 42313:tid 42335] [client 20.199.110.126:65368] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:06.475440 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 20.199.110.126:65469] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:07.039392 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 4.223.70.8:65505] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:07.733895 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 20.199.110.126:64789] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:08.744175 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 20.199.110.126:64787] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:09.833716 2026] [proxy_fcgi:error] [pid 42219:tid 42240] [client 20.199.110.126:64796] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:11.879496 2026] [proxy_fcgi:error] [pid 42220:tid 42266] [client 20.199.110.126:65452] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:12.221205 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 4.223.70.8:64647] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:12.905282 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.199.110.126:65420] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:15.161754 2026] [proxy_fcgi:error] [pid 42221:tid 42287] [client 20.199.110.126:64790] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:15.678876 2026] [proxy_fcgi:error] [pid 42220:tid 42265] [client 4.223.70.8:65453] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:16.683903 2026] [proxy_fcgi:error] [pid 42220:tid 42252] [client 20.199.110.126:62771] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:18.100259 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 20.199.110.126:62723] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:19.491387 2026] [proxy_fcgi:error] [pid 42220:tid 42262] [client 4.223.70.8:65068] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:20.216597 2026] [proxy_fcgi:error] [pid 42220:tid 42272] [client 20.199.110.126:64828] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:21.471135 2026] [proxy_fcgi:error] [pid 42219:tid 42230] [client 4.223.70.8:64652] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:22.724090 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 4.223.70.8:65013] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:22.725385 2026] [proxy_fcgi:error] [pid 42221:tid 42280] [client 20.199.110.126:64776] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:24.483922 2026] [proxy_fcgi:error] [pid 42313:tid 42335] [client 4.223.70.8:64655] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:24.979603 2026] [proxy_fcgi:error] [pid 42221:tid 42278] [client 20.199.110.126:64808] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:25.957919 2026] [proxy_fcgi:error] [pid 42219:tid 42245] [client 4.223.70.8:65486] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:26.376035 2026] [proxy_fcgi:error] [pid 42220:tid 42259] [client 20.199.110.126:64785] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:27.755104 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 4.223.70.8:64969] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:29.301001 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 4.223.70.8:64334] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:29.572026 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.199.110.126:64732] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:30.973690 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 4.223.70.8:64960] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:32.268368 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 4.223.70.8:65054] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:34.283396 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 4.223.70.8:65519] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:35.967451 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 4.223.70.8:65077] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:37.131242 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 4.223.70.8:65462] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:39.232042 2026] [proxy_fcgi:error] [pid 42219:tid 42224] [client 4.223.70.8:65441] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:41.049142 2026] [proxy_fcgi:error] [pid 42219:tid 42240] [client 4.223.70.8:65513] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:42.496810 2026] [proxy_fcgi:error] [pid 42221:tid 42291] [client 4.223.70.8:65017] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:43.554197 2026] [proxy_fcgi:error] [pid 42313:tid 42338] [client 4.223.70.8:64986] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:45.049594 2026] [proxy_fcgi:error] [pid 42221:tid 42299] [client 4.223.70.8:65514] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:46.465124 2026] [proxy_fcgi:error] [pid 42219:tid 42228] [client 4.223.70.8:65020] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:47.328650 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 20.199.110.126:64819] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:47.903371 2026] [proxy_fcgi:error] [pid 42221:tid 42278] [client 4.223.70.8:65475] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:48.925682 2026] [proxy_fcgi:error] [pid 42313:tid 42340] [client 4.223.70.8:64298] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:49.850839 2026] [proxy_fcgi:error] [pid 42220:tid 42259] [client 4.223.70.8:65461] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:50.413141 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 20.199.110.126:64792] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:50.802041 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 4.223.70.8:65494] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:51.883078 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.199.110.126:65354] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:51.917305 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 4.223.70.8:65004] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:53.147937 2026] [proxy_fcgi:error] [pid 42219:tid 42240] [client 20.199.110.126:65370] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:53.152833 2026] [proxy_fcgi:error] [pid 42219:tid 42233] [client 4.223.70.8:64963] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:54.309088 2026] [proxy_fcgi:error] [pid 42220:tid 42266] [client 4.223.70.8:64996] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:54.680123 2026] [proxy_fcgi:error] [pid 42220:tid 42268] [client 20.199.110.126:65442] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:55.209209 2026] [proxy_fcgi:error] [pid 42220:tid 42265] [client 4.223.70.8:64671] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:55.856909 2026] [proxy_fcgi:error] [pid 42219:tid 42234] [client 20.199.110.126:64803] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:56.447490 2026] [proxy_fcgi:error] [pid 42221:tid 42300] [client 4.223.70.8:64671] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:57.789603 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.199.110.126:64738] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:57.844835 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 4.223.70.8:64282] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:37:58.947063 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 20.199.110.126:64797] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:38:00.278500 2026] [proxy_fcgi:error] [pid 42219:tid 42228] [client 4.223.70.8:65409] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:38:01.312828 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 20.199.110.126:65470] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:38:02.931090 2026] [proxy_fcgi:error] [pid 42221:tid 42292] [client 4.223.70.8:65060] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:38:03.379985 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 20.199.110.126:65349] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:38:05.894283 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 4.223.70.8:65425] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:38:06.484558 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 20.199.110.126:65433] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:38:09.464915 2026] [proxy_fcgi:error] [pid 42220:tid 42263] [client 4.223.70.8:65445] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:38:10.762077 2026] [proxy_fcgi:error] [pid 42220:tid 42272] [client 20.199.110.126:62732] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:38:16.140650 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 4.223.70.8:65467] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:38:25.174718 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 20.199.110.126:65378] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:38:28.264024 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 4.223.70.8:65035] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:17.646271 2026] [proxy_fcgi:error] [pid 42220:tid 42266] [client 20.199.110.126:65445] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:20.050670 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 20.199.110.126:65462] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:21.826099 2026] [proxy_fcgi:error] [pid 42221:tid 42278] [client 20.199.110.126:65387] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:22.366521 2026] [proxy_fcgi:error] [pid 42221:tid 42299] [client 20.199.110.126:65387] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:22.768753 2026] [proxy_fcgi:error] [pid 42221:tid 42288] [client 4.223.70.8:65450] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:23.468800 2026] [proxy_fcgi:error] [pid 42219:tid 42229] [client 20.199.110.126:65345] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:25.024387 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.199.110.126:65471] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:26.106650 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 20.199.110.126:65447] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:27.298340 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.199.110.126:65415] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:28.514018 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 4.223.70.8:65047] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:28.831164 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.199.110.126:64773] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:29.693528 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.110.126:64815] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:30.753576 2026] [proxy_fcgi:error] [pid 42221:tid 42294] [client 20.199.110.126:65422] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:31.701808 2026] [proxy_fcgi:error] [pid 42219:tid 42234] [client 4.223.70.8:64970] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:31.947355 2026] [proxy_fcgi:error] [pid 42219:tid 42238] [client 20.199.110.126:64801] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:33.047971 2026] [proxy_fcgi:error] [pid 42219:tid 42224] [client 20.199.110.126:64782] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:34.575948 2026] [proxy_fcgi:error] [pid 42220:tid 42264] [client 4.223.70.8:65527] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:36.491779 2026] [proxy_fcgi:error] [pid 42220:tid 42260] [client 20.199.110.126:65358] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:37.012332 2026] [proxy_fcgi:error] [pid 42220:tid 42274] [client 4.223.70.8:64642] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:38.243209 2026] [proxy_fcgi:error] [pid 42221:tid 42288] [client 4.223.70.8:64595] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:39.333930 2026] [proxy_fcgi:error] [pid 42219:tid 42225] [client 20.199.110.126:65369] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:41.265835 2026] [proxy_fcgi:error] [pid 42220:tid 42263] [client 20.199.110.126:65430] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:42.641249 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.199.110.126:64735] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:43.398398 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 4.223.70.8:65026] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:44.725588 2026] [proxy_fcgi:error] [pid 42313:tid 42321] [client 20.199.110.126:65373] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:45.325295 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 4.223.70.8:65056] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:46.612017 2026] [proxy_fcgi:error] [pid 42313:tid 42336] [client 20.199.110.126:64795] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:47.602894 2026] [proxy_fcgi:error] [pid 42219:tid 42232] [client 4.223.70.8:65412] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:49.147669 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.199.110.126:64779] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:49.713316 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.199.110.126:64779] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:50.627596 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 4.223.70.8:65457] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:51.502834 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 20.199.110.126:62730] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:53.859210 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 4.223.70.8:65482] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:53.860246 2026] [proxy_fcgi:error] [pid 42219:tid 42223] [client 20.199.110.126:62749] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:55.961255 2026] [proxy_fcgi:error] [pid 42221:tid 42298] [client 4.223.70.8:64657] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:57.249424 2026] [proxy_fcgi:error] [pid 42221:tid 42292] [client 20.199.110.126:65363] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:57.549821 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 4.223.70.8:65015] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:58.682915 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 4.223.70.8:65029] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:59.724234 2026] [proxy_fcgi:error] [pid 42220:tid 42274] [client 20.199.110.126:65394] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:39:59.930778 2026] [proxy_fcgi:error] [pid 42220:tid 42272] [client 4.223.70.8:64324] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:00.958428 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 4.223.70.8:65435] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:01.507055 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 4.223.70.8:65435] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:02.863342 2026] [proxy_fcgi:error] [pid 42221:tid 42283] [client 4.223.70.8:65447] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:03.425040 2026] [proxy_fcgi:error] [pid 42313:tid 42321] [client 20.199.110.126:64829] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:03.879076 2026] [proxy_fcgi:error] [pid 42219:tid 42244] [client 4.223.70.8:64699] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:04.754938 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 4.223.70.8:65436] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:06.058123 2026] [proxy_fcgi:error] [pid 42219:tid 42230] [client 4.223.70.8:65458] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:06.279535 2026] [proxy_fcgi:error] [pid 42219:tid 42231] [client 20.199.110.126:64777] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:07.109851 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 4.223.70.8:65053] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:07.971124 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 20.199.110.126:65404] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:08.184765 2026] [proxy_fcgi:error] [pid 42220:tid 42258] [client 4.223.70.8:65079] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:09.099249 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 20.199.110.126:65423] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:09.342342 2026] [proxy_fcgi:error] [pid 42221:tid 42297] [client 4.223.70.8:65021] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:09.921694 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.199.110.126:65425] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:10.230304 2026] [proxy_fcgi:error] [pid 42313:tid 42323] [client 4.223.70.8:65431] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:11.569158 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 4.223.70.8:65422] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:11.639596 2026] [proxy_fcgi:error] [pid 42221:tid 42289] [client 20.199.110.126:65346] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:12.916548 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 20.199.110.126:62729] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:13.444198 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 20.199.110.126:62729] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:13.490001 2026] [proxy_fcgi:error] [pid 42220:tid 42251] [client 4.223.70.8:65454] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:15.414252 2026] [proxy_fcgi:error] [pid 42219:tid 42226] [client 20.199.110.126:64784] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:15.854659 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 4.223.70.8:65429] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:17.516611 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 4.223.70.8:65416] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:21.023695 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 4.223.70.8:65029] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:22.954321 2026] [proxy_fcgi:error] [pid 42221:tid 42286] [client 4.223.70.8:65483] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:25.195787 2026] [proxy_fcgi:error] [pid 42219:tid 42236] [client 4.223.70.8:65434] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:27.526505 2026] [proxy_fcgi:error] [pid 42220:tid 42264] [client 4.223.70.8:64993] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:28.071400 2026] [proxy_fcgi:error] [pid 42220:tid 42252] [client 4.223.70.8:64993] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:30.387116 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 4.223.70.8:64669] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:31.346968 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 4.223.70.8:64975] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:31.521535 2026] [:error] [pid 42220:tid 42266] [client 51.120.83.108:6335] [client 51.120.83.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adprb0z5c3Cs6a8B5QujaAAAAM8"]
[Sat Apr 11 23:40:32.891554 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 4.223.70.8:65417] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:35.053685 2026] [:error] [pid 52608:tid 52630] [client 51.120.83.108:46852] [client 51.120.83.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adprcyY5wH-BLt5QEKiGSQAAARM"]
[Sat Apr 11 23:40:36.617028 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 4.223.70.8:64966] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:37.205956 2026] [:error] [pid 42313:tid 42318] [client 51.120.83.108:51184] [client 51.120.83.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adprdV2P8TxdbaN018JshAAAAAI"]
[Sat Apr 11 23:40:37.575709 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 4.223.70.8:65437] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:39.076903 2026] [:error] [pid 52608:tid 52619] [client 51.120.83.108:47710] [client 51.120.83.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adprdyY5wH-BLt5QEKiGXwAAAQg"]
[Sat Apr 11 23:40:40.433666 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 4.223.70.8:64979] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:43.390245 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 4.223.70.8:64633] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:46.575461 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 4.223.70.8:64984] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:48.463565 2026] [proxy_fcgi:error] [pid 42219:tid 42245] [client 4.223.70.8:65082] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:51.426165 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 4.223.70.8:64264] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:53.186825 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 4.223.70.8:64648] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:53.744622 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 4.223.70.8:64648] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:40:55.132195 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 4.223.70.8:65464] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:05.526833 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 74.248.34.0:61729] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:07.818917 2026] [proxy_fcgi:error] [pid 42220:tid 42259] [client 74.248.34.0:61757] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:11.180357 2026] [proxy_fcgi:error] [pid 42221:tid 42298] [client 74.248.34.0:54966] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:13.451578 2026] [proxy_fcgi:error] [pid 42220:tid 42259] [client 74.248.34.0:61367] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:16.472884 2026] [proxy_fcgi:error] [pid 42221:tid 42300] [client 74.248.34.0:59344] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:19.380912 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 74.248.34.0:9690] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:21.505742 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 74.248.34.0:50706] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:24.581096 2026] [proxy_fcgi:error] [pid 42219:tid 42240] [client 74.248.34.0:64087] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:25.544805 2026] [proxy_fcgi:error] [pid 42219:tid 42239] [client 74.248.34.0:9714] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:27.576008 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 74.248.34.0:59362] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:29.170849 2026] [proxy_fcgi:error] [pid 42313:tid 42336] [client 74.248.34.0:59387] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:30.505069 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 74.248.34.0:62858] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:31.981415 2026] [proxy_fcgi:error] [pid 42220:tid 42256] [client 74.248.34.0:64104] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:33.354801 2026] [proxy_fcgi:error] [pid 42219:tid 42234] [client 74.248.34.0:47623] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:34.627134 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 74.248.34.0:61739] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:37.507301 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 74.248.34.0:61720] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:38.841492 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 74.248.34.0:47668] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:40.256607 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 74.248.34.0:54928] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:42.774319 2026] [proxy_fcgi:error] [pid 42221:tid 42292] [client 74.248.34.0:9715] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:41:46.147063 2026] [proxy_fcgi:error] [pid 42221:tid 42283] [client 74.248.34.0:54932] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:03.174941 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 74.248.34.0:9739] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:06.128557 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 74.248.34.0:10153] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:09.661646 2026] [proxy_fcgi:error] [pid 42221:tid 42287] [client 74.248.34.0:51536] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:11.523750 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 74.248.34.0:46948] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:14.223708 2026] [proxy_fcgi:error] [pid 42221:tid 42293] [client 74.248.34.0:9611] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:16.374330 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 74.248.34.0:9780] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:19.433780 2026] [proxy_fcgi:error] [pid 42220:tid 42262] [client 74.248.34.0:51370] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:24.097221 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 74.248.34.0:48822] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:25.797913 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 74.248.34.0:51568] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:27.897541 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 74.248.34.0:47561] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:29.744748 2026] [proxy_fcgi:error] [pid 42313:tid 42338] [client 74.248.34.0:55898] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:30.995856 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 74.248.34.0:9586] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:32.512372 2026] [proxy_fcgi:error] [pid 42219:tid 42242] [client 74.248.34.0:9581] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:33.516883 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 74.248.34.0:56390] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:36.868551 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 74.248.34.0:61674] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:40.461963 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 74.248.34.0:56434] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:51.001124 2026] [proxy_fcgi:error] [pid 42220:tid 42261] [client 74.248.34.0:9304] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:55.614296 2026] [proxy_fcgi:error] [pid 42221:tid 42278] [client 74.248.34.0:61675] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:42:59.729019 2026] [proxy_fcgi:error] [pid 42221:tid 42295] [client 74.248.34.0:9320] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:04.301301 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 74.248.34.0:57636] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:11.800627 2026] [proxy_fcgi:error] [pid 42221:tid 42293] [client 74.248.34.0:9289] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:14.452040 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 74.248.34.0:45914] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:17.176719 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 74.248.34.0:55950] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:19.647199 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 74.248.34.0:45916] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:21.084327 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 74.248.34.0:56967] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:22.256694 2026] [proxy_fcgi:error] [pid 42219:tid 42230] [client 74.248.34.0:45280] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:24.834679 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 74.248.34.0:45261] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:26.725857 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 74.248.34.0:44657] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:28.706046 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 74.248.34.0:58809] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:30.671112 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 74.248.34.0:56978] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:31.966695 2026] [proxy_fcgi:error] [pid 42220:tid 42267] [client 74.248.34.0:45186] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:33.425143 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 74.248.34.0:45229] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:35.068286 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 74.248.34.0:54446] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:36.208425 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 74.248.34.0:54412] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:37.433580 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 74.248.34.0:58811] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:38.918954 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 74.248.34.0:56972] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:40.147576 2026] [proxy_fcgi:error] [pid 42219:tid 42245] [client 74.248.34.0:9855] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:41.341300 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 74.248.34.0:58759] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:43.234511 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 74.248.34.0:45208] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:45.534102 2026] [proxy_fcgi:error] [pid 42220:tid 42265] [client 74.248.34.0:54406] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:47.614360 2026] [proxy_fcgi:error] [pid 42219:tid 42225] [client 74.248.34.0:44644] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:43:53.095496 2026] [proxy_fcgi:error] [pid 42220:tid 42269] [client 74.248.34.0:45202] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:44:02.514268 2026] [proxy_fcgi:error] [pid 42220:tid 42274] [client 74.248.34.0:58807] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:44:13.948405 2026] [proxy_fcgi:error] [pid 42221:tid 42297] [client 74.248.34.0:50646] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:44:15.506033 2026] [proxy_fcgi:error] [pid 42221:tid 42287] [client 74.248.34.0:60127] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:44:16.804090 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 74.248.34.0:60102] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:44:19.563628 2026] [proxy_fcgi:error] [pid 42219:tid 42241] [client 74.248.34.0:60115] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:44:21.310964 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 74.248.34.0:58775] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:44:22.946392 2026] [proxy_fcgi:error] [pid 42219:tid 42247] [client 74.248.34.0:45487] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:44:25.492900 2026] [proxy_fcgi:error] [pid 42219:tid 42238] [client 74.248.34.0:56475] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:44:28.677510 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 74.248.34.0:48527] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:44:32.217990 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 74.248.34.0:44572] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:44:35.554320 2026] [proxy_fcgi:error] [pid 42219:tid 42234] [client 74.248.34.0:60105] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:44:39.251349 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 74.248.34.0:50671] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:44:43.970598 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 74.248.34.0:60124] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:44:47.876265 2026] [proxy_fcgi:error] [pid 42219:tid 42232] [client 74.248.34.0:48519] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:44:50.812558 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 74.248.34.0:64575] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:44:53.469754 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 74.248.34.0:64545] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:44:57.638905 2026] [proxy_fcgi:error] [pid 42221:tid 42292] [client 74.248.34.0:44555] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:44:59.391368 2026] [proxy_fcgi:error] [pid 42313:tid 42323] [client 74.248.34.0:50636] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:02.278123 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 74.248.34.0:58151] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:04.796749 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 20.199.184.99:43013] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:04.887890 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 74.248.34.0:59783] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:06.608291 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 74.248.34.0:58118] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:07.937278 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 74.248.34.0:64548] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:09.278399 2026] [proxy_fcgi:error] [pid 42220:tid 42261] [client 20.199.184.99:42376] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:09.338612 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 74.248.34.0:48566] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:12.326712 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 74.248.34.0:44561] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:14.695197 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 20.199.184.99:52093] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:18.942552 2026] [proxy_fcgi:error] [pid 42221:tid 42296] [client 20.199.184.99:43059] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:20.667040 2026] [proxy_fcgi:error] [pid 42219:tid 42240] [client 74.248.34.0:60110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:22.161086 2026] [proxy_fcgi:error] [pid 42219:tid 42224] [client 20.199.184.99:6913] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:25.839925 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 20.199.184.99:43033] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:27.682422 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.199.184.99:6921] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:30.756539 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.184.99:43058] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:33.204376 2026] [proxy_fcgi:error] [pid 42313:tid 42335] [client 20.199.184.99:6737] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:34.433299 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 20.199.184.99:52039] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:36.209792 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.184.99:42408] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:37.583074 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 74.248.34.0:60563] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:38.120122 2026] [proxy_fcgi:error] [pid 42219:tid 42230] [client 20.199.184.99:42403] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:39.849922 2026] [proxy_fcgi:error] [pid 42313:tid 42328] [client 74.248.34.0:9375] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:39.959431 2026] [proxy_fcgi:error] [pid 42313:tid 42338] [client 20.199.184.99:6971] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:41.370058 2026] [proxy_fcgi:error] [pid 42219:tid 42247] [client 74.248.34.0:46348] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:41.520173 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.184.99:43022] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:42.560329 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 74.248.34.0:9234] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:42.999215 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 20.199.184.99:6957] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:43.823269 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 74.248.34.0:45885] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:44.748574 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 20.199.184.99:42418] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:45.479431 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 74.248.34.0:44170] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:47.261028 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 74.248.34.0:51633] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:47.510971 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.184.99:6925] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:49.354289 2026] [proxy_fcgi:error] [pid 42313:tid 42340] [client 74.248.34.0:45883] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:50.413583 2026] [proxy_fcgi:error] [pid 42220:tid 42251] [client 20.199.184.99:7128] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:52.645982 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 74.248.34.0:10050] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:54.922712 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 74.248.34.0:48213] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:55.467854 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 74.248.34.0:48213] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:56.928412 2026] [proxy_fcgi:error] [pid 42219:tid 42238] [client 74.248.34.0:53918] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:58.381901 2026] [proxy_fcgi:error] [pid 42220:tid 42268] [client 20.199.184.99:6943] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:45:59.098926 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 74.248.34.0:48241] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:01.527590 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 74.248.34.0:49359] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:02.701782 2026] [proxy_fcgi:error] [pid 42313:tid 42338] [client 74.248.34.0:53912] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:04.085326 2026] [proxy_fcgi:error] [pid 42220:tid 42273] [client 74.248.34.0:54857] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:04.621737 2026] [proxy_fcgi:error] [pid 42220:tid 42260] [client 20.199.184.99:7139] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:05.090966 2026] [proxy_fcgi:error] [pid 42221:tid 42287] [client 74.248.34.0:51271] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:06.509951 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 74.248.34.0:53895] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:06.528519 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 20.199.184.99:7144] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:07.777890 2026] [proxy_fcgi:error] [pid 42221:tid 42285] [client 74.248.34.0:53910] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:08.760396 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 20.199.184.99:42375] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:08.776773 2026] [proxy_fcgi:error] [pid 42220:tid 42262] [client 74.248.34.0:54384] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:10.192528 2026] [proxy_fcgi:error] [pid 42221:tid 42296] [client 74.248.34.0:9519] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:10.702684 2026] [proxy_fcgi:error] [pid 42221:tid 42295] [client 20.199.184.99:43018] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:11.703682 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 74.248.34.0:53309] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:12.044352 2026] [proxy_fcgi:error] [pid 42219:tid 42234] [client 20.199.184.99:43047] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:13.629831 2026] [proxy_fcgi:error] [pid 42221:tid 42288] [client 20.199.184.99:43019] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:13.669300 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 74.248.34.0:54353] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:14.824090 2026] [proxy_fcgi:error] [pid 42313:tid 42340] [client 20.199.184.99:6947] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:15.680965 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 74.248.34.0:51320] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:16.710106 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 20.199.184.99:52047] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:17.694296 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 74.248.34.0:9477] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:19.372231 2026] [proxy_fcgi:error] [pid 42219:tid 42223] [client 20.199.184.99:6945] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:20.203718 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 74.248.34.0:59422] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:21.795765 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 74.248.34.0:59443] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:22.629028 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 74.248.34.0:59443] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:23.109097 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 20.199.184.99:42384] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:23.746005 2026] [proxy_fcgi:error] [pid 42313:tid 42323] [client 74.248.34.0:51912] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:24.792599 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 74.248.34.0:53909] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:24.937861 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.199.184.99:6986] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:25.884873 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 74.248.34.0:54366] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:27.701650 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 20.199.184.99:6942] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:27.879699 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 74.248.34.0:53251] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:29.359910 2026] [proxy_fcgi:error] [pid 42313:tid 42336] [client 20.199.184.99:6995] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:30.381964 2026] [proxy_fcgi:error] [pid 42313:tid 42340] [client 74.248.34.0:9526] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:31.006894 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 20.199.184.99:6993] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:34.299123 2026] [proxy_fcgi:error] [pid 42221:tid 42285] [client 20.199.184.99:53870] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:34.611453 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 74.248.34.0:53274] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:35.161760 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 20.199.184.99:6924] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:38.852305 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 74.248.34.0:59771] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:42.257563 2026] [proxy_fcgi:error] [pid 42221:tid 42296] [client 74.248.34.0:48224] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:42.486648 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 20.199.184.99:42372] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:45.137078 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 74.248.34.0:49390] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:45.292653 2026] [proxy_fcgi:error] [pid 42221:tid 42285] [client 20.199.184.99:42407] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:48.463079 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 74.248.34.0:48236] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:49.630641 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 20.199.184.99:43015] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:50.633258 2026] [proxy_fcgi:error] [pid 42219:tid 42241] [client 74.248.34.0:59721] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:51.212051 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 74.248.34.0:59721] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:53.939216 2026] [proxy_fcgi:error] [pid 42221:tid 42291] [client 74.248.34.0:51587] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:46:55.207709 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 20.199.184.99:7138] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:00.759656 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 20.199.184.99:6997] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:03.205308 2026] [proxy_fcgi:error] [pid 42221:tid 42292] [client 20.199.184.99:52061] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:05.123230 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 20.199.184.99:52095] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:07.386565 2026] [proxy_fcgi:error] [pid 42221:tid 42285] [client 20.199.184.99:43057] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:09.040982 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 20.199.184.99:7104] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:11.184317 2026] [proxy_fcgi:error] [pid 42220:tid 42272] [client 20.199.184.99:6915] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:12.385675 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 20.199.184.99:52069] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:13.871467 2026] [proxy_fcgi:error] [pid 42221:tid 42296] [client 20.199.184.99:43016] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:14.931071 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 20.199.184.99:52089] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:17.575425 2026] [proxy_fcgi:error] [pid 42220:tid 42262] [client 20.199.184.99:6912] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:18.716569 2026] [proxy_fcgi:error] [pid 42221:tid 42286] [client 20.199.184.99:42399] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:20.135883 2026] [proxy_fcgi:error] [pid 42220:tid 42251] [client 20.199.184.99:7003] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:22.714835 2026] [proxy_fcgi:error] [pid 42219:tid 42241] [client 20.199.184.99:43023] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:24.274915 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 20.199.184.99:7001] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:26.867388 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 20.199.184.99:7015] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:27.311552 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 20.199.184.99:44447] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:29.408774 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 20.199.184.99:7149] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:32.713809 2026] [proxy_fcgi:error] [pid 42313:tid 42340] [client 20.199.184.99:62286] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:33.173395 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 20.199.184.99:6714] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:35.042619 2026] [proxy_fcgi:error] [pid 42221:tid 42300] [client 20.199.184.99:52037] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:36.397505 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.199.184.99:52083] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:36.528410 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 20.199.184.99:49773] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:38.208774 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 20.199.184.99:6978] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:39.701093 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 20.199.184.99:42411] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:40.562938 2026] [proxy_fcgi:error] [pid 42219:tid 42226] [client 20.199.184.99:44462] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:41.825819 2026] [proxy_fcgi:error] [pid 42219:tid 42241] [client 20.199.184.99:42430] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:43.012578 2026] [proxy_fcgi:error] [pid 42220:tid 42274] [client 20.199.184.99:65018] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:43.168489 2026] [proxy_fcgi:error] [pid 42221:tid 42296] [client 20.199.184.99:6994] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:45.095512 2026] [proxy_fcgi:error] [pid 42219:tid 42231] [client 20.199.184.99:42413] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:46.253321 2026] [proxy_fcgi:error] [pid 42221:tid 42300] [client 20.199.184.99:64389] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:47.605217 2026] [proxy_fcgi:error] [pid 42220:tid 42264] [client 20.199.184.99:43036] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:48.173881 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 20.199.184.99:53059] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:49.794743 2026] [proxy_fcgi:error] [pid 42221:tid 42291] [client 20.199.184.99:7162] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:51.639085 2026] [proxy_fcgi:error] [pid 42219:tid 42244] [client 20.199.184.99:53079] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:51.811701 2026] [proxy_fcgi:error] [pid 42221:tid 42297] [client 20.199.184.99:7148] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:52.929119 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.199.184.99:49770] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:53.390498 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 20.199.184.99:6969] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:55.093132 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 20.199.184.99:42373] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:55.315088 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 20.199.184.99:46394] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:58.144375 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 20.199.184.99:58911] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:47:59.152618 2026] [proxy_fcgi:error] [pid 42220:tid 42266] [client 20.199.184.99:7148] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:00.802392 2026] [proxy_fcgi:error] [pid 42221:tid 42296] [client 20.199.184.99:58926] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:01.173852 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.199.184.99:52084] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:03.594859 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 20.199.184.99:58918] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:05.303011 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 20.199.184.99:8606] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:07.796291 2026] [proxy_fcgi:error] [pid 42220:tid 42266] [client 20.199.184.99:42395] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:09.611431 2026] [proxy_fcgi:error] [pid 52608:tid 52627] [client 20.199.184.99:59471] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:12.346583 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.184.99:58885] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:18.460277 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 20.199.184.99:52073] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:22.369019 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 20.199.184.99:57239] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:23.336220 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.199.184.99:6918] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:25.115324 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 20.199.184.99:6675] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:26.163503 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 51.120.83.108:42348] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:26.341037 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 20.199.184.99:43046] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:27.548155 2026] [proxy_fcgi:error] [pid 42221:tid 42299] [client 20.199.184.99:42374] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:28.722973 2026] [proxy_fcgi:error] [pid 42221:tid 42295] [client 20.199.184.99:52355] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:28.990276 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 20.199.184.99:42416] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:30.404077 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 51.120.83.108:42763] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:30.668820 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 20.199.184.99:52036] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:32.372328 2026] [proxy_fcgi:error] [pid 42313:tid 42336] [client 20.199.184.99:6991] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:32.660525 2026] [proxy_fcgi:error] [pid 42313:tid 42340] [client 51.120.83.108:43805] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:34.405592 2026] [proxy_fcgi:error] [pid 42221:tid 42294] [client 20.199.184.99:7000] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:35.013160 2026] [proxy_fcgi:error] [pid 42221:tid 42279] [client 20.199.184.99:57236] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:35.321337 2026] [proxy_fcgi:error] [pid 42221:tid 42284] [client 51.120.83.108:42364] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:35.516462 2026] [proxy_fcgi:error] [pid 42221:tid 42291] [client 20.199.184.99:42402] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:36.607829 2026] [proxy_fcgi:error] [pid 42220:tid 42265] [client 20.199.184.99:6657] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:36.633167 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 20.199.184.99:55370] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:37.147965 2026] [proxy_fcgi:error] [pid 42219:tid 42230] [client 51.120.83.108:46088] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:38.618780 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 20.199.184.99:42381] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:38.736608 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 20.199.184.99:51867] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:40.751631 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.199.184.99:7042] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:40.781770 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 51.120.83.108:7724] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:40.862335 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 20.199.184.99:8621] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:43.390018 2026] [proxy_fcgi:error] [pid 42219:tid 42238] [client 51.120.83.108:41179] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:43.469584 2026] [proxy_fcgi:error] [pid 42219:tid 42232] [client 20.199.184.99:57260] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:45.364805 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 51.120.83.108:42308] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:46.272041 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 20.199.184.99:52080] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:47.840696 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 51.120.83.108:41166] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:49.054685 2026] [proxy_fcgi:error] [pid 42219:tid 42228] [client 20.199.184.99:57263] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:50.507484 2026] [proxy_fcgi:error] [pid 42220:tid 42273] [client 51.120.83.108:42764] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:51.026034 2026] [proxy_fcgi:error] [pid 42219:tid 42247] [client 20.199.184.99:52378] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:52.512100 2026] [proxy_fcgi:error] [pid 42220:tid 42274] [client 20.199.184.99:51882] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:52.664902 2026] [proxy_fcgi:error] [pid 42220:tid 42268] [client 51.120.83.108:43832] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:53.717356 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 20.199.184.99:6926] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:53.839780 2026] [proxy_fcgi:error] [pid 42219:tid 42237] [client 51.120.83.108:43828] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:53.989580 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 20.199.184.99:51855] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:55.580854 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 20.199.184.99:51883] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:56.673389 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 51.120.83.108:43794] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:57.620587 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 20.199.184.99:55373] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:58.849285 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 51.120.83.108:50247] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:48:59.651779 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.199.184.99:62984] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:00.714338 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 51.120.83.108:54679] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:01.324919 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 20.199.184.99:51853] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:04.171413 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 51.120.83.108:43830] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:07.158021 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.199.184.99:63935] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:14.242736 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 51.120.83.108:42806] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:25.487935 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 51.120.83.108:43784] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:26.769754 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 20.199.184.99:63913] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:28.174911 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 51.120.83.108:41156] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:31.277543 2026] [proxy_fcgi:error] [pid 42313:tid 42328] [client 51.120.83.108:46039] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:33.030677 2026] [proxy_fcgi:error] [pid 42313:tid 42338] [client 51.120.83.108:43827] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:35.335559 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 51.120.83.108:41203] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:38.359183 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 51.120.83.108:41199] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:39.161383 2026] [proxy_fcgi:error] [pid 42219:tid 42240] [client 20.199.184.99:63877] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:41.111430 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 51.120.83.108:40631] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:41.703005 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 20.199.184.99:57253] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:43.072451 2026] [proxy_fcgi:error] [pid 42313:tid 42325] [client 20.199.184.99:62986] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:44.223549 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 51.120.83.108:40603] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:44.374573 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 20.199.184.99:43027] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:45.132162 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 20.199.184.99:8629] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:45.639670 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.184.99:7143] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:45.689057 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 51.120.83.108:53066] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:47.516806 2026] [proxy_fcgi:error] [pid 42219:tid 42239] [client 20.199.184.99:6990] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:47.673791 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 51.120.83.108:40588] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:47.782571 2026] [proxy_fcgi:error] [pid 42219:tid 42231] [client 20.199.184.99:55405] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:49.418907 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 51.120.83.108:46075] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:50.205394 2026] [proxy_fcgi:error] [pid 42219:tid 42228] [client 20.199.184.99:63934] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:50.958138 2026] [proxy_fcgi:error] [pid 42313:tid 42336] [client 20.199.184.99:42398] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:51.648359 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 51.120.83.108:53108] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:52.630969 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.199.184.99:63872] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:54.832280 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 51.120.83.108:54704] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:55.854266 2026] [proxy_fcgi:error] [pid 42220:tid 42265] [client 20.199.184.99:57261] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:56.592973 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 20.199.184.99:42424] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:57.358304 2026] [proxy_fcgi:error] [pid 42221:tid 42286] [client 51.120.83.108:54682] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:49:58.404150 2026] [proxy_fcgi:error] [pid 42313:tid 42335] [client 20.199.184.99:8615] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:00.414629 2026] [proxy_fcgi:error] [pid 42220:tid 42252] [client 20.199.184.99:7140] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:00.876257 2026] [proxy_fcgi:error] [pid 42313:tid 42338] [client 20.199.184.99:63885] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:01.311716 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 51.120.83.108:43825] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:01.875094 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 20.199.184.99:6988] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:02.670801 2026] [proxy_fcgi:error] [pid 42219:tid 42225] [client 20.199.184.99:52414] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:03.004530 2026] [proxy_fcgi:error] [pid 42219:tid 42223] [client 20.199.184.99:43037] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:04.481120 2026] [proxy_fcgi:error] [pid 42219:tid 42239] [client 20.199.184.99:59473] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:04.610833 2026] [proxy_fcgi:error] [pid 42219:tid 42236] [client 20.199.184.99:6207] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:05.045708 2026] [proxy_fcgi:error] [pid 42219:tid 42242] [client 51.120.83.108:46074] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:05.992114 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.199.184.99:6941] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:06.545182 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 20.199.184.99:6941] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:06.898716 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 20.199.184.99:63930] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:07.605453 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 20.199.184.99:6939] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:07.918082 2026] [proxy_fcgi:error] [pid 42221:tid 42299] [client 51.120.83.108:43798] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:09.120017 2026] [proxy_fcgi:error] [pid 42220:tid 42258] [client 20.199.184.99:6920] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:10.417954 2026] [proxy_fcgi:error] [pid 42313:tid 42328] [client 20.199.184.99:43038] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:11.743519 2026] [proxy_fcgi:error] [pid 42219:tid 42247] [client 20.199.184.99:48436] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:11.822656 2026] [proxy_fcgi:error] [pid 42220:tid 42254] [client 20.199.184.99:43010] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:11.966601 2026] [proxy_fcgi:error] [pid 42220:tid 42261] [client 51.120.83.108:49321] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:13.806010 2026] [proxy_fcgi:error] [pid 42219:tid 42242] [client 20.199.184.99:57245] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:13.911254 2026] [proxy_fcgi:error] [pid 42221:tid 42301] [client 20.199.184.99:7019] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:15.660000 2026] [proxy_fcgi:error] [pid 42220:tid 42254] [client 20.199.184.99:63895] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:16.734259 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.184.99:48415] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:17.281165 2026] [proxy_fcgi:error] [pid 52608:tid 52629] [client 20.199.184.99:6991] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:17.617987 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 51.120.83.108:7621] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:19.204013 2026] [proxy_fcgi:error] [pid 42313:tid 42321] [client 51.120.83.108:46041] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:20.475062 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 20.199.184.99:48422] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:20.494612 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.199.184.99:6719] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:23.668273 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 20.199.184.99:63000] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:25.676909 2026] [proxy_fcgi:error] [pid 42220:tid 42275] [client 20.199.184.99:48407] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:25.711078 2026] [proxy_fcgi:error] [pid 42219:tid 42240] [client 20.199.184.99:42401] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:28.186491 2026] [proxy_fcgi:error] [pid 42219:tid 42247] [client 20.199.184.99:8612] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:28.840606 2026] [proxy_fcgi:error] [pid 42220:tid 42261] [client 20.199.184.99:7038] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:30.652267 2026] [proxy_fcgi:error] [pid 42219:tid 42228] [client 51.120.83.108:53086] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:33.322163 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 20.199.184.99:6971] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:35.376018 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 51.120.83.108:40634] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:35.402679 2026] [proxy_fcgi:error] [pid 42313:tid 42323] [client 20.199.184.99:7120] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:35.535164 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 20.199.184.99:46336] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:36.418490 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 51.120.83.108:49287] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:36.760484 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 20.199.184.99:43035] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:37.928490 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 20.199.184.99:42423] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:38.007919 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 51.120.83.108:58735] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:38.880442 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.199.184.99:7110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:39.042885 2026] [proxy_fcgi:error] [pid 42220:tid 42262] [client 51.120.83.108:59195] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:39.168045 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.184.99:55385] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:40.146696 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 20.199.184.99:52048] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:40.810806 2026] [proxy_fcgi:error] [pid 42219:tid 42231] [client 51.120.83.108:64314] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:41.342300 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 20.199.184.99:6936] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:41.899367 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 20.199.184.99:6936] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:43.218565 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 20.199.184.99:42428] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:43.593731 2026] [proxy_fcgi:error] [pid 42220:tid 42251] [client 20.199.184.99:62977] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:43.777119 2026] [proxy_fcgi:error] [pid 42219:tid 42226] [client 51.120.83.108:48791] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:46.169593 2026] [proxy_fcgi:error] [pid 42220:tid 42268] [client 20.199.184.99:53845] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:46.835005 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 51.120.83.108:61922] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:47.029835 2026] [proxy_fcgi:error] [pid 42220:tid 42260] [client 20.199.184.99:8588] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:48.154015 2026] [proxy_fcgi:error] [pid 42220:tid 42265] [client 51.120.83.108:58696] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:48.873497 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.184.99:6667] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:49.993268 2026] [proxy_fcgi:error] [pid 42219:tid 42245] [client 51.120.83.108:64270] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:50.621532 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.199.184.99:8608] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:51.671967 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 51.120.83.108:51625] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:51.781163 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 20.199.184.99:48423] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:52.316339 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.199.184.99:7017] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:53.030929 2026] [proxy_fcgi:error] [pid 42220:tid 42261] [client 51.120.83.108:51619] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:53.298758 2026] [proxy_fcgi:error] [pid 42220:tid 42255] [client 20.199.184.99:51862] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:54.210455 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 20.199.184.99:48441] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:55.306958 2026] [proxy_fcgi:error] [pid 42221:tid 42285] [client 20.199.184.99:55382] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:55.384476 2026] [proxy_fcgi:error] [pid 42221:tid 42298] [client 51.120.83.108:47536] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:56.215514 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.199.184.99:53082] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:57.043120 2026] [proxy_fcgi:error] [pid 42220:tid 42257] [client 20.199.184.99:52055] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:57.086272 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 51.120.83.108:63112] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:57.227343 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 20.199.184.99:48421] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:58.841864 2026] [proxy_fcgi:error] [pid 42220:tid 42252] [client 51.120.83.108:52126] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:50:58.919186 2026] [proxy_fcgi:error] [pid 42220:tid 42264] [client 20.199.184.99:57259] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:00.455340 2026] [proxy_fcgi:error] [pid 42219:tid 42241] [client 51.120.83.108:62437] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:00.614779 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 20.199.184.99:52042] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:00.743295 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 20.199.184.99:52408] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:02.178345 2026] [proxy_fcgi:error] [pid 42313:tid 42335] [client 51.120.83.108:62401] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:02.368430 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 20.199.184.99:43066] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:02.517246 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.199.184.99:46352] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:04.032179 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 20.199.184.99:6958] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:04.408470 2026] [proxy_fcgi:error] [pid 52608:tid 52634] [client 51.120.83.108:64999] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:05.930505 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 51.120.83.108:7367] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:06.127544 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.199.184.99:51857] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:07.300104 2026] [proxy_fcgi:error] [pid 42219:tid 42242] [client 20.199.184.99:6664] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:07.437853 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 51.120.83.108:61418] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:08.548075 2026] [proxy_fcgi:error] [pid 42219:tid 42232] [client 51.120.83.108:61418] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:08.999030 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.184.99:57248] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:09.612873 2026] [proxy_fcgi:error] [pid 42219:tid 42240] [client 51.120.83.108:59753] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:10.562937 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 20.199.184.99:43008] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:11.063658 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 51.120.83.108:49747] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:11.420158 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 20.199.184.99:55378] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:13.259412 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 51.120.83.108:52157] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:13.485304 2026] [proxy_fcgi:error] [pid 42221:tid 42294] [client 20.199.184.99:52049] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:13.772760 2026] [proxy_fcgi:error] [pid 42221:tid 42288] [client 20.199.184.99:63899] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:14.038061 2026] [proxy_fcgi:error] [pid 42221:tid 42298] [client 20.199.184.99:52049] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:15.031645 2026] [proxy_fcgi:error] [pid 42219:tid 42233] [client 20.199.184.99:8576] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:15.560682 2026] [proxy_fcgi:error] [pid 42219:tid 42225] [client 51.120.83.108:52140] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:16.811885 2026] [proxy_fcgi:error] [pid 42220:tid 42259] [client 20.199.184.99:51840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:17.201791 2026] [proxy_fcgi:error] [pid 42220:tid 42272] [client 20.199.184.99:7131] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:18.024173 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 51.120.83.108:61430] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:18.564884 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 20.199.184.99:57262] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:20.458734 2026] [proxy_fcgi:error] [pid 42220:tid 42275] [client 20.199.184.99:49739] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:21.248670 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 51.120.83.108:61439] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:24.204740 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 20.199.184.99:54331] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:24.467055 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 51.120.83.108:58272] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:25.989761 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.199.184.99:57235] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:30.508080 2026] [proxy_fcgi:error] [pid 42221:tid 42289] [client 20.199.184.99:55412] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:34.031274 2026] [proxy_fcgi:error] [pid 42219:tid 42223] [client 20.199.184.99:46338] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:35.642786 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 51.120.83.108:8084] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:36.221139 2026] [proxy_fcgi:error] [pid 42221:tid 42294] [client 20.199.184.99:52388] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:37.036544 2026] [proxy_fcgi:error] [pid 42221:tid 42287] [client 51.120.83.108:57470] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:38.698213 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 51.120.83.108:42287] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:39.896946 2026] [proxy_fcgi:error] [pid 42221:tid 42278] [client 51.120.83.108:58274] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:40.907924 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 51.120.83.108:43284] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:42.088433 2026] [proxy_fcgi:error] [pid 42221:tid 42294] [client 51.120.83.108:49788] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:43.156991 2026] [proxy_fcgi:error] [pid 42220:tid 42252] [client 20.199.184.99:65075] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:43.971151 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 51.120.83.108:8112] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:45.390880 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 20.199.184.99:54306] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:46.218054 2026] [proxy_fcgi:error] [pid 42220:tid 42262] [client 51.120.83.108:61399] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:47.390147 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 20.166.82.91:47003] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:48.236963 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 51.120.83.108:7376] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:48.766150 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.199.184.99:48487] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:48.918134 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.166.82.91:62994] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:49.892321 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 51.120.83.108:43310] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:50.533436 2026] [proxy_fcgi:error] [pid 42313:tid 42335] [client 20.199.184.99:65035] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:51.982550 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 51.120.83.108:43270] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:52.291707 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.166.82.91:7669] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:53.718563 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 20.199.184.99:57693] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:54.614182 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 51.120.83.108:57431] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:55.084251 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 20.199.184.99:43174] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:55.133087 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 20.166.82.91:63011] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:56.241943 2026] [proxy_fcgi:error] [pid 42219:tid 42224] [client 51.120.83.108:42282] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:56.582631 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 20.199.184.99:57779] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:57.652034 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.199.184.99:50232] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:58.412565 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 20.166.82.91:58050] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:51:59.083290 2026] [proxy_fcgi:error] [pid 42221:tid 42296] [client 51.120.83.108:42240] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:00.784779 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.199.184.99:50186] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:00.908508 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 51.120.83.108:61415] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:02.247308 2026] [proxy_fcgi:error] [pid 52608:tid 52621] [client 20.166.82.91:7951] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:03.381883 2026] [proxy_fcgi:error] [pid 42219:tid 42236] [client 51.120.83.108:42268] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:03.652651 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 20.166.82.91:47024] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:05.418717 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 51.120.83.108:61438] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:06.314626 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.166.82.91:7964] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:06.656006 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 51.120.83.108:60266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:07.709110 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 20.199.184.99:59471] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:08.162526 2026] [proxy_fcgi:error] [pid 42219:tid 42231] [client 20.166.82.91:7942] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:09.612411 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 20.199.184.99:45487] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:10.569283 2026] [proxy_fcgi:error] [pid 42219:tid 42229] [client 20.166.82.91:7656] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:12.543504 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 51.120.83.108:60248] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:12.644907 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 20.199.184.99:42590] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:13.290564 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 20.166.82.91:47000] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:14.513807 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 20.199.184.99:9114] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:15.110879 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 51.120.83.108:45434] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:17.430335 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 20.199.184.99:49680] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:18.523713 2026] [proxy_fcgi:error] [pid 42220:tid 42256] [client 20.166.82.91:7527] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:18.898957 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 20.199.184.99:60924] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:19.518074 2026] [proxy_fcgi:error] [pid 42313:tid 42328] [client 51.120.83.108:60272] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:20.581311 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 20.166.82.91:46987] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:21.000385 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 20.199.184.99:60865] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:21.705920 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 51.120.83.108:64331] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:22.165798 2026] [proxy_fcgi:error] [pid 42313:tid 42325] [client 20.199.184.99:60865] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:22.701770 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 20.166.82.91:7644] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:23.541480 2026] [proxy_fcgi:error] [pid 42220:tid 42265] [client 51.120.83.108:64368] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:24.759362 2026] [proxy_fcgi:error] [pid 42219:tid 42236] [client 20.199.184.99:58263] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:25.588978 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 51.120.83.108:64329] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:25.624285 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.166.82.91:64941] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:26.168337 2026] [proxy_fcgi:error] [pid 52608:tid 52622] [client 20.199.184.99:9104] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:27.446502 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 20.166.82.91:7632] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:27.626970 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.199.184.99:42622] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:29.175933 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 51.120.83.108:60344] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:29.596686 2026] [proxy_fcgi:error] [pid 42219:tid 42247] [client 20.166.82.91:63030] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:29.734750 2026] [proxy_fcgi:error] [pid 42220:tid 42275] [client 20.199.184.99:9098] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:32.360539 2026] [proxy_fcgi:error] [pid 42313:tid 42336] [client 20.199.184.99:54262] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:33.035250 2026] [proxy_fcgi:error] [pid 52608:tid 52618] [client 51.120.83.108:45442] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:33.221924 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 20.166.82.91:7730] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:34.671394 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 51.120.83.108:7848] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:36.368344 2026] [proxy_fcgi:error] [pid 42220:tid 42259] [client 20.166.82.91:7624] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:36.738547 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 51.120.83.108:45385] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:37.914279 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 51.120.83.108:60297] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:38.955134 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 20.166.82.91:64905] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:39.418300 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 51.120.83.108:60324] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:39.916396 2026] [proxy_fcgi:error] [pid 42313:tid 42323] [client 20.199.184.99:60900] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:41.111096 2026] [proxy_fcgi:error] [pid 42219:tid 42225] [client 51.120.83.108:45503] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:43.670163 2026] [proxy_fcgi:error] [pid 42220:tid 42253] [client 51.120.83.108:46439] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:44.598245 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 20.199.184.99:60866] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:46.410827 2026] [proxy_fcgi:error] [pid 42220:tid 42272] [client 51.120.83.108:60340] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:47.038146 2026] [proxy_fcgi:error] [pid 42220:tid 42275] [client 51.120.83.108:60340] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:47.074667 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 20.199.184.99:9112] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:48.152205 2026] [proxy_fcgi:error] [pid 42220:tid 42274] [client 20.199.184.99:46049] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:48.410584 2026] [proxy_fcgi:error] [pid 42220:tid 42253] [client 20.166.82.91:7678] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:49.552752 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 51.120.83.108:7556] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:49.708580 2026] [proxy_fcgi:error] [pid 42221:tid 42284] [client 20.199.184.99:60956] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:51.614440 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 20.199.184.99:60876] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:52.573653 2026] [proxy_fcgi:error] [pid 42221:tid 42296] [client 51.120.83.108:45432] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:54.136657 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 51.120.83.108:64363] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:54.653746 2026] [proxy_fcgi:error] [pid 42219:tid 42232] [client 20.199.184.99:54268] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:55.099727 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 20.166.82.91:64943] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:55.790030 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 51.120.83.108:45472] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:56.385929 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 20.199.184.99:46034] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:56.722434 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.166.82.91:7702] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:57.534056 2026] [proxy_fcgi:error] [pid 42219:tid 42244] [client 51.120.83.108:7856] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:58.026251 2026] [proxy_fcgi:error] [pid 42219:tid 42242] [client 20.199.184.99:60950] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:58.657400 2026] [proxy_fcgi:error] [pid 42219:tid 42245] [client 51.120.83.108:7865] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:59.226621 2026] [proxy_fcgi:error] [pid 42220:tid 42262] [client 20.166.82.91:7697] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:52:59.651203 2026] [proxy_fcgi:error] [pid 42219:tid 42232] [client 51.120.83.108:45495] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:01.002375 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 51.120.83.108:45456] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:01.246805 2026] [proxy_fcgi:error] [pid 42221:tid 42298] [client 20.199.184.99:9099] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:01.319059 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 20.166.82.91:62993] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:02.204995 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 51.120.83.108:42260] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:03.205432 2026] [proxy_fcgi:error] [pid 42221:tid 42279] [client 20.166.82.91:7686] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:03.882628 2026] [proxy_fcgi:error] [pid 42220:tid 42255] [client 51.120.83.108:56768] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:04.443854 2026] [proxy_fcgi:error] [pid 42220:tid 42274] [client 20.199.184.99:60949] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:04.986065 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 20.199.184.99:60949] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:06.575516 2026] [proxy_fcgi:error] [pid 42221:tid 42297] [client 51.120.83.108:45459] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:07.291670 2026] [proxy_fcgi:error] [pid 42220:tid 42271] [client 20.166.82.91:48415] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:08.168875 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 20.199.184.99:51948] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:08.838132 2026] [proxy_fcgi:error] [pid 42219:tid 42228] [client 51.120.83.108:45090] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:10.242527 2026] [proxy_fcgi:error] [pid 42221:tid 42285] [client 20.199.184.99:50249] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:11.608877 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.166.82.91:58020] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:12.264579 2026] [proxy_fcgi:error] [pid 42219:tid 42241] [client 20.199.184.99:54264] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:13.445139 2026] [proxy_fcgi:error] [pid 42221:tid 42282] [client 20.199.184.99:41345] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:13.806283 2026] [proxy_fcgi:error] [pid 42220:tid 42259] [client 51.120.83.108:60318] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:15.008145 2026] [proxy_fcgi:error] [pid 42219:tid 42247] [client 20.166.82.91:64956] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:15.642645 2026] [proxy_fcgi:error] [pid 52608:tid 52616] [client 20.199.184.99:51911] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:16.823713 2026] [proxy_fcgi:error] [pid 52608:tid 52632] [client 51.120.83.108:55179] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:17.804977 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 20.199.184.99:8445] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:18.561918 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 51.120.83.108:60311] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:18.735694 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 20.166.82.91:7973] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:20.474510 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 20.199.184.99:60930] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:20.795543 2026] [proxy_fcgi:error] [pid 42313:tid 42328] [client 51.120.83.108:45447] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:21.047946 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.166.82.91:63006] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:21.365047 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 51.120.83.108:45447] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:22.744770 2026] [proxy_fcgi:error] [pid 42313:tid 42323] [client 20.199.184.99:55432] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:23.736296 2026] [proxy_fcgi:error] [pid 42313:tid 42321] [client 51.120.83.108:7609] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:24.010667 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 20.166.82.91:47004] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:24.965641 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.199.184.99:51929] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:25.467014 2026] [proxy_fcgi:error] [pid 42313:tid 42336] [client 51.120.83.108:42868] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:26.494150 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.166.82.91:62998] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:27.090722 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 51.120.83.108:42876] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:28.345753 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 51.120.83.108:50357] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:30.040329 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 20.199.184.99:50263] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:30.614412 2026] [proxy_fcgi:error] [pid 42221:tid 42289] [client 51.120.83.108:52549] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:32.362312 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 20.166.82.91:64949] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:33.837809 2026] [proxy_fcgi:error] [pid 42219:tid 42233] [client 51.120.83.108:42840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:36.772931 2026] [proxy_fcgi:error] [pid 52608:tid 52625] [client 20.166.82.91:62986] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:37.593400 2026] [proxy_fcgi:error] [pid 42220:tid 42259] [client 51.120.83.108:57821] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:38.128384 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 20.199.184.99:58220] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:39.721451 2026] [proxy_fcgi:error] [pid 42221:tid 42302] [client 51.120.83.108:60889] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:39.933572 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 20.199.184.99:58220] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:43.086013 2026] [proxy_fcgi:error] [pid 42219:tid 42241] [client 20.199.184.99:50889] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:43.849481 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 51.120.83.108:57892] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:45.231890 2026] [proxy_fcgi:error] [pid 42221:tid 42296] [client 20.166.82.91:64933] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:45.889536 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 51.120.83.108:57802] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:47.147667 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 51.120.83.108:52584] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:47.752601 2026] [proxy_fcgi:error] [pid 42313:tid 42336] [client 51.120.83.108:52584] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:48.233939 2026] [proxy_fcgi:error] [pid 42219:tid 42238] [client 20.166.82.91:7637] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:49.645806 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 51.120.83.108:57893] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:49.800958 2026] [proxy_fcgi:error] [pid 42220:tid 42271] [client 20.166.82.91:58051] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:50.962479 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 20.166.82.91:57988] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:52.203865 2026] [proxy_fcgi:error] [pid 42219:tid 42247] [client 20.166.82.91:7683] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:53.817718 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 20.166.82.91:7676] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:57.324066 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 20.166.82.91:58029] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:53:59.279132 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.166.82.91:63021] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:01.540948 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 20.166.82.91:7946] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:03.130698 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 20.166.82.91:46989] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:05.317571 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 20.166.82.91:64909] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:07.052126 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.166.82.91:7626] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:08.569771 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 20.166.82.91:7490] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:10.303880 2026] [proxy_fcgi:error] [pid 42219:tid 42233] [client 20.166.82.91:7967] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:13.660590 2026] [proxy_fcgi:error] [pid 52608:tid 52635] [client 20.166.82.91:7736] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:15.351019 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 20.166.82.91:64920] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:17.918967 2026] [proxy_fcgi:error] [pid 42221:tid 42287] [client 20.166.82.91:62981] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:20.400981 2026] [proxy_fcgi:error] [pid 42220:tid 42259] [client 20.166.82.91:47034] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:22.197069 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.166.82.91:7501] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:23.914332 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 20.166.82.91:58001] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:25.125570 2026] [proxy_fcgi:error] [pid 42220:tid 42261] [client 20.166.82.91:53331] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:27.153274 2026] [proxy_fcgi:error] [pid 42313:tid 42327] [client 20.166.82.91:7671] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:28.877774 2026] [proxy_fcgi:error] [pid 42219:tid 42223] [client 20.166.82.91:58038] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:30.374259 2026] [proxy_fcgi:error] [pid 42221:tid 42295] [client 20.166.82.91:55270] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:32.351618 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 20.166.82.91:53327] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:34.097851 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 20.166.82.91:55295] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:54:35.630300 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 20.166.82.91:7503] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:55:59.168075 2026] [proxy_fcgi:error] [pid 42313:tid 42325] [client 20.166.82.91:7709] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:04.810518 2026] [proxy_fcgi:error] [pid 42220:tid 42256] [client 20.166.82.91:50490] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:07.767165 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 20.166.82.91:7523] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:10.204743 2026] [proxy_fcgi:error] [pid 52608:tid 52611] [client 20.166.82.91:64448] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:12.155669 2026] [proxy_fcgi:error] [pid 42221:tid 42283] [client 20.166.82.91:55262] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:13.923609 2026] [proxy_fcgi:error] [pid 42219:tid 42224] [client 20.166.82.91:63087] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:16.283216 2026] [proxy_fcgi:error] [pid 42219:tid 42242] [client 20.166.82.91:45052] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:18.308720 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 20.166.82.91:7533] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:20.770304 2026] [proxy_fcgi:error] [pid 42220:tid 42260] [client 20.166.82.91:7743] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:22.589295 2026] [proxy_fcgi:error] [pid 52608:tid 52612] [client 20.166.82.91:7532] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:24.342085 2026] [proxy_fcgi:error] [pid 42219:tid 42233] [client 20.166.82.91:7972] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:25.969219 2026] [proxy_fcgi:error] [pid 42219:tid 42229] [client 20.166.82.91:53330] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:27.146124 2026] [proxy_fcgi:error] [pid 42221:tid 42298] [client 20.166.82.91:50477] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:29.957002 2026] [proxy_fcgi:error] [pid 42220:tid 42267] [client 20.166.82.91:7703] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:32.695540 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 20.166.82.91:45055] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:34.552136 2026] [proxy_fcgi:error] [pid 42221:tid 42286] [client 20.166.82.91:45039] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:38.270904 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.166.82.91:53319] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:41.318204 2026] [proxy_fcgi:error] [pid 42219:tid 42223] [client 20.166.82.91:7708] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:43.432503 2026] [proxy_fcgi:error] [pid 42220:tid 42252] [client 20.166.82.91:55235] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:46.133525 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 20.166.82.91:50473] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:47.960140 2026] [proxy_fcgi:error] [pid 42220:tid 42275] [client 20.166.82.91:53369] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:49.387730 2026] [proxy_fcgi:error] [pid 42219:tid 42232] [client 20.166.82.91:63043] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:51.377922 2026] [proxy_fcgi:error] [pid 52608:tid 52631] [client 20.166.82.91:53339] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:53.500425 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 20.166.82.91:7494] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:54.770682 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 20.166.82.91:45016] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:56.534141 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 20.166.82.91:53322] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:57.585707 2026] [proxy_fcgi:error] [pid 42313:tid 42321] [client 20.166.82.91:55273] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:56:58.883418 2026] [proxy_fcgi:error] [pid 52608:tid 52624] [client 20.166.82.91:7492] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:00.549425 2026] [proxy_fcgi:error] [pid 42219:tid 42226] [client 20.166.82.91:45026] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:02.204953 2026] [proxy_fcgi:error] [pid 42219:tid 42247] [client 20.166.82.91:64474] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:03.709249 2026] [proxy_fcgi:error] [pid 52608:tid 52620] [client 20.166.82.91:45018] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:04.944993 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 20.166.82.91:7728] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:06.439812 2026] [proxy_fcgi:error] [pid 42221:tid 42298] [client 20.166.82.91:7529] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:07.901469 2026] [proxy_fcgi:error] [pid 42221:tid 42294] [client 20.166.82.91:64484] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:10.506639 2026] [proxy_fcgi:error] [pid 42219:tid 42233] [client 20.166.82.91:7700] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:11.072447 2026] [proxy_fcgi:error] [pid 42219:tid 42246] [client 20.166.82.91:7700] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:12.154177 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 20.166.82.91:63076] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:13.791717 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 20.166.82.91:55244] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:15.030258 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 20.166.82.91:7717] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:17.727500 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 20.166.82.91:63077] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:20.218364 2026] [proxy_fcgi:error] [pid 42313:tid 42325] [client 20.166.82.91:7526] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:22.977507 2026] [proxy_fcgi:error] [pid 42219:tid 42243] [client 20.166.82.91:7992] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:24.456095 2026] [proxy_fcgi:error] [pid 42220:tid 42254] [client 20.166.82.91:64511] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:26.826800 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 20.166.82.91:53325] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:28.369170 2026] [proxy_fcgi:error] [pid 52608:tid 52613] [client 20.166.82.91:64457] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:29.642774 2026] [proxy_fcgi:error] [pid 52608:tid 52615] [client 20.166.82.91:7508] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:31.358540 2026] [proxy_fcgi:error] [pid 42221:tid 42291] [client 20.166.82.91:55277] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:32.842907 2026] [proxy_fcgi:error] [pid 42220:tid 42273] [client 20.166.82.91:64471] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:34.302594 2026] [proxy_fcgi:error] [pid 52608:tid 52630] [client 20.166.82.91:7516] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:35.551000 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 20.166.82.91:45022] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:37.030793 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 20.166.82.91:45048] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:38.859609 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 20.166.82.91:55293] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:39.395198 2026] [proxy_fcgi:error] [pid 52608:tid 52617] [client 20.166.82.91:55293] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:41.563272 2026] [proxy_fcgi:error] [pid 42221:tid 42297] [client 20.166.82.91:7706] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:43.481017 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 20.166.82.91:7704] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:46.734723 2026] [proxy_fcgi:error] [pid 42220:tid 42261] [client 20.166.82.91:50455] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:48.192906 2026] [proxy_fcgi:error] [pid 42221:tid 42298] [client 20.166.82.91:7657] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:49.428314 2026] [proxy_fcgi:error] [pid 42221:tid 42289] [client 20.166.82.91:7504] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:50.486619 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 20.166.82.91:63052] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:51.661252 2026] [proxy_fcgi:error] [pid 52608:tid 52619] [client 20.166.82.91:53358] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:52.847915 2026] [proxy_fcgi:error] [pid 42313:tid 42321] [client 20.166.82.91:45011] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:54.266164 2026] [proxy_fcgi:error] [pid 42219:tid 42225] [client 20.166.82.91:64452] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:55.694449 2026] [proxy_fcgi:error] [pid 52608:tid 52628] [client 20.166.82.91:62983] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:57.685664 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.166.82.91:55241] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 11 23:57:58.223898 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.166.82.91:55241] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:43:59.326609 2026] [proxy_fcgi:error] [pid 36938:tid 36957] [client 158.158.55.67:65144] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:00.399745 2026] [proxy_fcgi:error] [pid 36909:tid 36929] [client 158.158.55.67:63824] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:01.333731 2026] [proxy_fcgi:error] [pid 44698:tid 44707] [client 158.158.55.67:63886] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:02.004620 2026] [proxy_fcgi:error] [pid 44698:tid 44715] [client 158.158.55.67:63886] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:02.911112 2026] [proxy_fcgi:error] [pid 36909:tid 36912] [client 158.158.55.67:45142] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:03.691181 2026] [proxy_fcgi:error] [pid 44698:tid 44703] [client 158.158.55.67:45139] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:04.570521 2026] [proxy_fcgi:error] [pid 45064:tid 45113] [client 158.158.55.67:45181] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:05.692799 2026] [proxy_fcgi:error] [pid 44700:tid 44764] [client 158.158.55.67:63901] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:06.246277 2026] [proxy_fcgi:error] [pid 44700:tid 44746] [client 158.158.55.67:63901] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:07.391450 2026] [proxy_fcgi:error] [pid 36909:tid 36931] [client 158.158.55.67:62133] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:08.403112 2026] [proxy_fcgi:error] [pid 44700:tid 44767] [client 158.158.55.67:62085] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:09.291274 2026] [proxy_fcgi:error] [pid 44700:tid 44744] [client 158.158.55.67:62086] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:10.315427 2026] [proxy_fcgi:error] [pid 44698:tid 44726] [client 158.158.55.67:63843] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:11.230074 2026] [proxy_fcgi:error] [pid 36909:tid 36911] [client 158.158.55.67:40913] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:11.828752 2026] [proxy_fcgi:error] [pid 36909:tid 36932] [client 158.158.55.67:40913] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:12.901641 2026] [proxy_fcgi:error] [pid 36909:tid 36923] [client 158.158.55.67:49417] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:13.869532 2026] [proxy_fcgi:error] [pid 44698:tid 44715] [client 158.158.55.67:62110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:14.747617 2026] [proxy_fcgi:error] [pid 45064:tid 45114] [client 158.158.55.67:63887] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:15.574710 2026] [proxy_fcgi:error] [pid 36909:tid 36917] [client 158.158.55.67:40923] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:16.548557 2026] [proxy_fcgi:error] [pid 36938:tid 36940] [client 158.158.55.67:49452] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:17.592657 2026] [proxy_fcgi:error] [pid 34152:tid 34176] [client 158.158.55.67:63872] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:18.765673 2026] [proxy_fcgi:error] [pid 44698:tid 44719] [client 158.158.55.67:62088] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:20.281522 2026] [proxy_fcgi:error] [pid 36938:tid 36962] [client 158.158.55.67:63829] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:21.620648 2026] [proxy_fcgi:error] [pid 44701:tid 44794] [client 158.158.55.67:63923] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:22.754330 2026] [proxy_fcgi:error] [pid 36909:tid 36915] [client 158.158.55.67:49414] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:23.982324 2026] [proxy_fcgi:error] [pid 36938:tid 36957] [client 158.158.55.67:63855] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:26.569630 2026] [proxy_fcgi:error] [pid 44698:tid 44703] [client 158.158.55.67:40897] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:28.356538 2026] [proxy_fcgi:error] [pid 36909:tid 36917] [client 158.158.55.67:62097] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:31.053517 2026] [proxy_fcgi:error] [pid 45064:tid 45092] [client 158.158.55.67:40929] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:32.728690 2026] [proxy_fcgi:error] [pid 44698:tid 44712] [client 158.158.55.67:62103] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:34.154686 2026] [proxy_fcgi:error] [pid 36938:tid 36940] [client 158.158.55.67:62089] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:35.208048 2026] [proxy_fcgi:error] [pid 36909:tid 36922] [client 158.158.55.67:63861] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:36.379433 2026] [proxy_fcgi:error] [pid 44701:tid 44799] [client 158.158.55.67:45166] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:37.477212 2026] [proxy_fcgi:error] [pid 36909:tid 36927] [client 158.158.55.67:63862] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:38.634978 2026] [proxy_fcgi:error] [pid 36938:tid 36952] [client 158.158.55.67:40957] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:39.717019 2026] [proxy_fcgi:error] [pid 44701:tid 44778] [client 158.158.55.67:40917] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:40.703372 2026] [proxy_fcgi:error] [pid 36909:tid 36915] [client 158.158.55.67:65147] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:41.946660 2026] [proxy_fcgi:error] [pid 44698:tid 44713] [client 158.158.55.67:65103] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:42.929643 2026] [proxy_fcgi:error] [pid 44701:tid 44794] [client 158.158.55.67:40927] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:43.846366 2026] [proxy_fcgi:error] [pid 36909:tid 36925] [client 158.158.55.67:45177] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:44.806438 2026] [proxy_fcgi:error] [pid 44701:tid 44790] [client 158.158.55.67:63879] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:45.651361 2026] [proxy_fcgi:error] [pid 44701:tid 44795] [client 158.158.55.67:63925] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:46.523661 2026] [proxy_fcgi:error] [pid 45064:tid 45102] [client 158.158.55.67:40951] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:47.527449 2026] [proxy_fcgi:error] [pid 44698:tid 44721] [client 158.158.55.67:63860] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:48.452198 2026] [proxy_fcgi:error] [pid 36938:tid 36945] [client 158.158.55.67:62092] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:49.642905 2026] [proxy_fcgi:error] [pid 44700:tid 44750] [client 158.158.55.67:65137] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:50.748652 2026] [proxy_fcgi:error] [pid 44700:tid 44747] [client 158.158.55.67:63880] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:51.724746 2026] [proxy_fcgi:error] [pid 44700:tid 44768] [client 158.158.55.67:65139] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:52.787692 2026] [proxy_fcgi:error] [pid 44700:tid 44755] [client 158.158.55.67:40899] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:53.921647 2026] [proxy_fcgi:error] [pid 36909:tid 36922] [client 158.158.55.67:63882] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:54.841187 2026] [proxy_fcgi:error] [pid 36938:tid 36946] [client 158.158.55.67:63916] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:55.806153 2026] [proxy_fcgi:error] [pid 34152:tid 34164] [client 158.158.55.67:65115] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:56.322855 2026] [proxy_fcgi:error] [pid 34152:tid 34154] [client 158.158.55.67:65115] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:57.470238 2026] [proxy_fcgi:error] [pid 36909:tid 36929] [client 158.158.55.67:63840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:58.397434 2026] [proxy_fcgi:error] [pid 36909:tid 36915] [client 158.158.55.67:63847] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:58.921668 2026] [proxy_fcgi:error] [pid 36909:tid 36914] [client 158.158.55.67:63847] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:44:59.696911 2026] [proxy_fcgi:error] [pid 44700:tid 44755] [client 158.158.55.67:49994] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:00.585515 2026] [proxy_fcgi:error] [pid 44700:tid 44768] [client 158.158.55.67:63933] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:01.382512 2026] [proxy_fcgi:error] [pid 45064:tid 45095] [client 158.158.55.67:65096] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:02.230360 2026] [proxy_fcgi:error] [pid 36909:tid 36926] [client 158.158.55.67:45182] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:03.018822 2026] [proxy_fcgi:error] [pid 36938:tid 36944] [client 158.158.55.67:40933] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:03.967070 2026] [proxy_fcgi:error] [pid 45064:tid 45112] [client 158.158.55.67:65118] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:04.491639 2026] [proxy_fcgi:error] [pid 45064:tid 45111] [client 158.158.55.67:65118] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:05.423167 2026] [proxy_fcgi:error] [pid 44698:tid 44711] [client 158.158.55.67:63926] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:06.340276 2026] [proxy_fcgi:error] [pid 44701:tid 44778] [client 158.158.55.67:62090] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:07.272390 2026] [proxy_fcgi:error] [pid 44701:tid 44796] [client 158.158.55.67:62111] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:08.503003 2026] [proxy_fcgi:error] [pid 36909:tid 36924] [client 158.158.55.67:65141] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:09.324082 2026] [proxy_fcgi:error] [pid 45064:tid 45096] [client 158.158.55.67:62117] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:10.241112 2026] [proxy_fcgi:error] [pid 36909:tid 36916] [client 158.158.55.67:65133] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:11.255893 2026] [proxy_fcgi:error] [pid 44701:tid 44775] [client 158.158.55.67:45122] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:12.362658 2026] [proxy_fcgi:error] [pid 34152:tid 34171] [client 158.158.55.67:62107] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:13.287486 2026] [proxy_fcgi:error] [pid 36909:tid 36919] [client 158.158.55.67:62141] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:13.818714 2026] [proxy_fcgi:error] [pid 36909:tid 36922] [client 158.158.55.67:62141] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:14.809327 2026] [proxy_fcgi:error] [pid 45064:tid 45097] [client 158.158.55.67:65138] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:15.675304 2026] [proxy_fcgi:error] [pid 44698:tid 44705] [client 158.158.55.67:45136] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:16.780449 2026] [proxy_fcgi:error] [pid 44700:tid 44745] [client 158.158.55.67:63850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:17.824250 2026] [proxy_fcgi:error] [pid 45064:tid 45109] [client 158.158.55.67:45125] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:18.882182 2026] [proxy_fcgi:error] [pid 34152:tid 34154] [client 158.158.55.67:40928] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:19.884346 2026] [proxy_fcgi:error] [pid 44698:tid 44704] [client 158.158.55.67:45151] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:20.568418 2026] [proxy_fcgi:error] [pid 44698:tid 44709] [client 158.158.55.67:45151] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:21.632607 2026] [proxy_fcgi:error] [pid 45064:tid 45104] [client 158.158.55.67:65134] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:22.334980 2026] [proxy_fcgi:error] [pid 45064:tid 45105] [client 158.158.55.67:65134] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:23.380900 2026] [proxy_fcgi:error] [pid 44698:tid 44727] [client 158.158.55.67:45129] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:24.367361 2026] [proxy_fcgi:error] [pid 36938:tid 36954] [client 158.158.55.67:63810] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:24.895304 2026] [proxy_fcgi:error] [pid 36938:tid 36943] [client 158.158.55.67:63810] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:25.901679 2026] [proxy_fcgi:error] [pid 34152:tid 34170] [client 158.158.55.67:40906] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:26.445606 2026] [proxy_fcgi:error] [pid 34152:tid 34166] [client 158.158.55.67:40906] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:27.657711 2026] [proxy_fcgi:error] [pid 45064:tid 45095] [client 158.158.55.67:40904] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:28.778533 2026] [proxy_fcgi:error] [pid 36938:tid 36957] [client 158.158.55.67:63858] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:30.004707 2026] [proxy_fcgi:error] [pid 45064:tid 45116] [client 158.158.55.67:40948] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:30.982537 2026] [proxy_fcgi:error] [pid 44701:tid 44773] [client 158.158.55.67:63835] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:32.543890 2026] [proxy_fcgi:error] [pid 44700:tid 44757] [client 158.158.55.67:40965] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:33.432137 2026] [proxy_fcgi:error] [pid 45064:tid 45110] [client 158.158.55.67:40973] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:33.959661 2026] [proxy_fcgi:error] [pid 45064:tid 45104] [client 158.158.55.67:40973] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:35.049077 2026] [proxy_fcgi:error] [pid 36909:tid 36924] [client 158.158.55.67:63815] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:35.562811 2026] [proxy_fcgi:error] [pid 36909:tid 36919] [client 158.158.55.67:63815] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:36.710608 2026] [proxy_fcgi:error] [pid 36938:tid 36958] [client 158.158.55.67:63911] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:37.236758 2026] [proxy_fcgi:error] [pid 36938:tid 36955] [client 158.158.55.67:63911] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:37.474888 2026] [:error] [pid 36938:tid 36954] [client 158.158.55.67:63911] [client 158.158.55.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tinyfilemanager.php"] [unique_id "adqW0YSWpa_VL1JPU6wChQAAAY4"]
[Sun Apr 12 02:45:38.854157 2026] [proxy_fcgi:error] [pid 44700:tid 44761] [client 158.158.55.67:63827] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:40.685329 2026] [proxy_fcgi:error] [pid 36938:tid 36950] [client 158.158.55.67:40935] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:42.216339 2026] [proxy_fcgi:error] [pid 34152:tid 34173] [client 158.158.55.67:62134] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:42.903627 2026] [autoindex:error] [pid 34152:tid 34161] [client 158.158.55.67:63864] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 02:45:43.446188 2026] [proxy_fcgi:error] [pid 34152:tid 34170] [client 158.158.55.67:63864] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:43.981707 2026] [proxy_fcgi:error] [pid 34152:tid 34171] [client 158.158.55.67:63864] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:46.167642 2026] [proxy_fcgi:error] [pid 36909:tid 36927] [client 158.158.55.67:45132] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:47.657678 2026] [proxy_fcgi:error] [pid 45064:tid 45116] [client 158.158.55.67:65091] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:48.215524 2026] [proxy_fcgi:error] [pid 45064:tid 45108] [client 158.158.55.67:65091] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:50.596678 2026] [proxy_fcgi:error] [pid 34152:tid 34165] [client 158.158.55.67:62127] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:53.296288 2026] [proxy_fcgi:error] [pid 44700:tid 44747] [client 158.158.55.67:45171] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:55.470090 2026] [proxy_fcgi:error] [pid 45064:tid 45112] [client 158.158.55.67:45144] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:58.624139 2026] [proxy_fcgi:error] [pid 34152:tid 34160] [client 158.158.55.67:40989] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:45:59.130731 2026] [proxy_fcgi:error] [pid 34152:tid 34170] [client 158.158.55.67:40989] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:01.449336 2026] [proxy_fcgi:error] [pid 44700:tid 44751] [client 158.158.55.67:63826] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:02.486310 2026] [proxy_fcgi:error] [pid 36909:tid 36927] [client 158.158.55.67:63915] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:03.065079 2026] [proxy_fcgi:error] [pid 36909:tid 36932] [client 158.158.55.67:63915] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:06.679608 2026] [proxy_fcgi:error] [pid 44701:tid 44800] [client 158.158.55.67:63812] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:08.181256 2026] [proxy_fcgi:error] [pid 44700:tid 44763] [client 158.158.55.67:63821] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:08.808182 2026] [proxy_fcgi:error] [pid 44700:tid 44759] [client 158.158.55.67:63821] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:12.258135 2026] [proxy_fcgi:error] [pid 44698:tid 44706] [client 158.158.55.67:62142] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:14.365250 2026] [proxy_fcgi:error] [pid 44698:tid 44709] [client 158.158.55.67:40952] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:15.464119 2026] [autoindex:error] [pid 45064:tid 45092] [client 158.158.55.67:49449] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 02:46:15.994644 2026] [proxy_fcgi:error] [pid 45064:tid 45110] [client 158.158.55.67:49449] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:18.121466 2026] [proxy_fcgi:error] [pid 44701:tid 44771] [client 158.158.55.67:62098] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:18.789254 2026] [proxy_fcgi:error] [pid 44701:tid 44779] [client 158.158.55.67:62098] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:19.790316 2026] [proxy_fcgi:error] [pid 34152:tid 34170] [client 158.158.55.67:63921] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:21.016429 2026] [proxy_fcgi:error] [pid 36938:tid 36946] [client 158.158.55.67:40963] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:22.247848 2026] [proxy_fcgi:error] [pid 36938:tid 36940] [client 158.158.55.67:63846] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:23.198668 2026] [proxy_fcgi:error] [pid 34152:tid 34158] [client 158.158.55.67:45179] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:24.315945 2026] [proxy_fcgi:error] [pid 36938:tid 36959] [client 158.158.55.67:63906] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:24.581557 2026] [autoindex:error] [pid 36938:tid 36962] [client 158.158.55.67:63906] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2021/02/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 02:46:25.276811 2026] [proxy_fcgi:error] [pid 36938:tid 36943] [client 158.158.55.67:63906] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:26.429502 2026] [proxy_fcgi:error] [pid 36938:tid 36949] [client 158.158.55.67:45183] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:27.710642 2026] [proxy_fcgi:error] [pid 36909:tid 36929] [client 158.158.55.67:63898] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:29.078678 2026] [proxy_fcgi:error] [pid 44701:tid 44775] [client 158.158.55.67:40940] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:29.604942 2026] [proxy_fcgi:error] [pid 44701:tid 44773] [client 158.158.55.67:40940] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:31.473115 2026] [proxy_fcgi:error] [pid 34152:tid 34167] [client 158.158.55.67:45121] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:33.252097 2026] [:error] [pid 36938:tid 36953] [client 158.158.55.67:63919] [client 158.158.55.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adqXCYSWpa_VL1JPU6wCxwAAAY0"]
[Sun Apr 12 02:46:39.108444 2026] [proxy_fcgi:error] [pid 36909:tid 36920] [client 158.158.55.67:40995] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:40.878602 2026] [proxy_fcgi:error] [pid 34152:tid 34178] [client 158.158.55.67:63907] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:41.123560 2026] [autoindex:error] [pid 34152:tid 34176] [client 158.158.55.67:63907] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 02:46:41.379792 2026] [autoindex:error] [pid 34152:tid 34174] [client 158.158.55.67:63907] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 02:46:41.896355 2026] [proxy_fcgi:error] [pid 34152:tid 34168] [client 158.158.55.67:63907] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:43.624818 2026] [proxy_fcgi:error] [pid 34152:tid 34165] [client 158.158.55.67:62083] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:45.497704 2026] [proxy_fcgi:error] [pid 44700:tid 44746] [client 158.158.55.67:45141] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:46.959608 2026] [proxy_fcgi:error] [pid 36938:tid 36945] [client 158.158.55.67:45155] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:49.167032 2026] [proxy_fcgi:error] [pid 44701:tid 44789] [client 158.158.55.67:49416] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:53.361637 2026] [proxy_fcgi:error] [pid 36909:tid 36928] [client 158.158.55.67:62100] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:46:58.686530 2026] [proxy_fcgi:error] [pid 44700:tid 44767] [client 158.158.55.67:63889] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:01.162590 2026] [proxy_fcgi:error] [pid 44700:tid 44747] [client 158.158.55.67:45120] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:03.192957 2026] [proxy_fcgi:error] [pid 44700:tid 44758] [client 158.158.55.67:45138] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:04.255304 2026] [proxy_fcgi:error] [pid 36938:tid 36960] [client 158.158.55.67:63825] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:05.481831 2026] [proxy_fcgi:error] [pid 44700:tid 44761] [client 158.158.55.67:65149] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:07.223036 2026] [proxy_fcgi:error] [pid 36938:tid 36944] [client 158.158.55.67:45150] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:09.444780 2026] [proxy_fcgi:error] [pid 44698:tid 44713] [client 158.158.55.67:40912] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:10.750326 2026] [proxy_fcgi:error] [pid 44700:tid 44747] [client 158.158.55.67:63869] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:12.366954 2026] [proxy_fcgi:error] [pid 44700:tid 44768] [client 158.158.55.67:40943] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:13.470491 2026] [proxy_fcgi:error] [pid 34152:tid 34167] [client 158.158.55.67:63833] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:14.326649 2026] [proxy_fcgi:error] [pid 36938:tid 36961] [client 158.158.55.67:63841] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:14.852921 2026] [proxy_fcgi:error] [pid 36938:tid 36964] [client 158.158.55.67:63841] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:15.752544 2026] [proxy_fcgi:error] [pid 36938:tid 36941] [client 158.158.55.67:40915] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:16.600890 2026] [proxy_fcgi:error] [pid 44700:tid 44744] [client 158.158.55.67:39119] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:17.722561 2026] [proxy_fcgi:error] [pid 44701:tid 44783] [client 158.158.55.67:65101] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:18.824873 2026] [proxy_fcgi:error] [pid 36909:tid 36911] [client 158.158.55.67:45163] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:19.805522 2026] [proxy_fcgi:error] [pid 36909:tid 36925] [client 158.158.55.67:45152] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:20.770541 2026] [proxy_fcgi:error] [pid 36909:tid 36915] [client 158.158.55.67:63910] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:21.752740 2026] [proxy_fcgi:error] [pid 44700:tid 44757] [client 158.158.55.67:65110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:22.646435 2026] [proxy_fcgi:error] [pid 44698:tid 44708] [client 158.158.55.67:62123] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:23.496284 2026] [proxy_fcgi:error] [pid 44698:tid 44718] [client 158.158.55.67:63895] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:24.301430 2026] [proxy_fcgi:error] [pid 44700:tid 44764] [client 158.158.55.67:49410] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 02:47:25.337909 2026] [proxy_fcgi:error] [pid 36938:tid 36955] [client 158.158.55.67:63866] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 10:42:02.616084 2026] [proxy_fcgi:error] [pid 26567:tid 26585] [client 5.133.192.128:53551] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 15:26:05.380124 2026] [proxy_fcgi:error] [pid 25328:tid 25391] [client 74.7.244.13:42306] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 17:15:08.460650 2026] [proxy_fcgi:error] [pid 25437:tid 25463] [client 54.81.58.132:59172] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 17:15:08.784649 2026] [proxy_fcgi:error] [pid 26600:tid 26640] [client 54.81.58.132:38496] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 12 19:44:55.103853 2026] [proxy_fcgi:error] [pid 25328:tid 25398] [client 74.7.241.184:40688] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:16:54.919035 2026] [proxy_fcgi:error] [pid 11325:tid 11339] [client 66.249.75.97:41970] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:28.526374 2026] [proxy_fcgi:error] [pid 11325:tid 11340] [client 20.151.218.28:61916] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:29.685717 2026] [proxy_fcgi:error] [pid 33942:tid 33990] [client 20.151.218.28:61941] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:31.385712 2026] [proxy_fcgi:error] [pid 11325:tid 11340] [client 20.151.218.28:61265] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:32.458402 2026] [proxy_fcgi:error] [pid 11325:tid 11333] [client 20.151.218.28:61276] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:33.560859 2026] [proxy_fcgi:error] [pid 34048:tid 34058] [client 20.151.218.28:61924] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:34.613586 2026] [proxy_fcgi:error] [pid 34048:tid 34071] [client 20.151.218.28:61866] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:35.514666 2026] [proxy_fcgi:error] [pid 34048:tid 34066] [client 20.151.218.28:61257] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:36.574747 2026] [proxy_fcgi:error] [pid 34048:tid 34053] [client 20.151.218.28:61935] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:37.563452 2026] [proxy_fcgi:error] [pid 11325:tid 11335] [client 20.151.218.28:61277] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:38.406401 2026] [proxy_fcgi:error] [pid 11325:tid 11341] [client 20.151.218.28:61898] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:39.346469 2026] [proxy_fcgi:error] [pid 11325:tid 11338] [client 20.151.218.28:61894] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:40.150857 2026] [proxy_fcgi:error] [pid 11325:tid 11344] [client 20.151.218.28:61212] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:40.976908 2026] [proxy_fcgi:error] [pid 33942:tid 33995] [client 20.151.218.28:61273] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:42.046579 2026] [proxy_fcgi:error] [pid 33942:tid 33992] [client 20.151.218.28:61915] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:43.083824 2026] [proxy_fcgi:error] [pid 33942:tid 34001] [client 20.151.218.28:61951] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:44.551510 2026] [proxy_fcgi:error] [pid 11325:tid 11333] [client 20.151.218.28:61295] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:45.708664 2026] [proxy_fcgi:error] [pid 33942:tid 33996] [client 20.151.218.28:61874] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:46.513765 2026] [proxy_fcgi:error] [pid 33942:tid 33984] [client 20.151.218.28:61838] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:47.523458 2026] [proxy_fcgi:error] [pid 11325:tid 11341] [client 20.151.218.28:61903] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:48.659529 2026] [proxy_fcgi:error] [pid 33943:tid 34020] [client 20.151.218.28:61844] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:49.956963 2026] [proxy_fcgi:error] [pid 11325:tid 11333] [client 20.151.218.28:61923] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:51.181470 2026] [proxy_fcgi:error] [pid 33942:tid 33999] [client 20.151.218.28:61262] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:52.251116 2026] [proxy_fcgi:error] [pid 33942:tid 33987] [client 20.151.218.28:61889] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:53.169496 2026] [proxy_fcgi:error] [pid 34048:tid 34052] [client 20.151.218.28:61876] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:54.144599 2026] [proxy_fcgi:error] [pid 11325:tid 11341] [client 20.151.218.28:61930] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:54.902101 2026] [proxy_fcgi:error] [pid 33943:tid 34030] [client 20.151.218.28:61895] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:55.609752 2026] [proxy_fcgi:error] [pid 33942:tid 34002] [client 20.151.218.28:61300] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:56.761810 2026] [proxy_fcgi:error] [pid 33943:tid 34013] [client 20.151.218.28:61879] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:58.026878 2026] [proxy_fcgi:error] [pid 11325:tid 11351] [client 20.151.218.28:61289] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:19:59.229472 2026] [proxy_fcgi:error] [pid 33942:tid 33992] [client 20.151.218.28:61870] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:00.142123 2026] [proxy_fcgi:error] [pid 33941:tid 33964] [client 20.151.218.28:61881] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:01.303980 2026] [proxy_fcgi:error] [pid 11325:tid 11330] [client 20.151.218.28:61949] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:02.466079 2026] [proxy_fcgi:error] [pid 11325:tid 11343] [client 20.151.218.28:61878] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:04.154845 2026] [proxy_fcgi:error] [pid 33943:tid 34030] [client 20.151.218.28:61833] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:06.438530 2026] [proxy_fcgi:error] [pid 33943:tid 34023] [client 20.151.218.28:61271] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:08.765250 2026] [proxy_fcgi:error] [pid 33942:tid 34000] [client 20.151.218.28:61285] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:09.850498 2026] [proxy_fcgi:error] [pid 11325:tid 11331] [client 20.151.218.28:61927] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:10.891920 2026] [proxy_fcgi:error] [pid 34048:tid 34071] [client 20.151.218.28:61921] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:12.075760 2026] [proxy_fcgi:error] [pid 33942:tid 34000] [client 20.151.218.28:61942] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:13.914859 2026] [proxy_fcgi:error] [pid 33941:tid 33955] [client 20.151.218.28:61875] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:17.799519 2026] [proxy_fcgi:error] [pid 33941:tid 33957] [client 20.151.218.28:61830] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:26.474168 2026] [proxy_fcgi:error] [pid 33943:tid 34010] [client 20.151.218.28:61249] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:27.404154 2026] [proxy_fcgi:error] [pid 34048:tid 34054] [client 20.151.218.28:61197] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:28.436901 2026] [proxy_fcgi:error] [pid 11325:tid 11330] [client 20.151.218.28:61832] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:29.738903 2026] [proxy_fcgi:error] [pid 33943:tid 34030] [client 20.151.218.28:61248] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:30.689779 2026] [proxy_fcgi:error] [pid 34048:tid 34069] [client 20.151.218.28:61258] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:31.684774 2026] [proxy_fcgi:error] [pid 34048:tid 34062] [client 20.151.218.28:61254] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:32.709751 2026] [proxy_fcgi:error] [pid 11325:tid 11334] [client 20.151.218.28:61857] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:20:33.906798 2026] [:error] [pid 33943:tid 34007] [client 20.151.218.28:61259] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pomo/v2.php"] [unique_id "adwMoayoXuZjocnxM5FeLQAAAIE"]
[Mon Apr 13 05:20:34.473971 2026] [:error] [pid 34048:tid 34063] [client 20.151.218.28:61294] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pomo/v2.php"] [unique_id "adwMovSiQ_PJjlY5EhzvNQAAAM0"]
[Mon Apr 13 05:20:35.013320 2026] [:error] [pid 11325:tid 11351] [client 20.151.218.28:61835] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pomo/v2.php"] [unique_id "adwMo-CGj3EEJtCwa0N_GAAAARg"]
[Mon Apr 13 05:20:35.669661 2026] [:error] [pid 33943:tid 34028] [client 20.151.218.28:61852] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pomo/v2.php"] [unique_id "adwMo6yoXuZjocnxM5FeNgAAAJY"]
[Mon Apr 13 05:20:36.402760 2026] [:error] [pid 11325:tid 11340] [client 20.151.218.28:61858] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nxd.php"] [unique_id "adwMpOCGj3EEJtCwa0N_KAAAAQ0"]
[Mon Apr 13 05:20:37.096288 2026] [:error] [pid 33943:tid 34020] [client 20.151.218.28:61943] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nxd.php"] [unique_id "adwMpayoXuZjocnxM5FePgAAAI4"]
[Mon Apr 13 05:20:39.608557 2026] [:error] [pid 11325:tid 11350] [client 20.151.218.28:60609] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nxd.php"] [unique_id "adwMp-CGj3EEJtCwa0N_VQAAARc"]
[Mon Apr 13 05:20:46.694205 2026] [:error] [pid 33942:tid 33999] [client 20.151.218.28:61932] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/nxd.php"] [unique_id "adwMrhNHe8geO_lMeFaSzgAAAFQ"]
[Mon Apr 13 05:20:54.812883 2026] [:error] [pid 33942:tid 33984] [client 20.151.218.28:61839] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/payout.php"] [unique_id "adwMthNHe8geO_lMeFaTIAAAAEU"]
[Mon Apr 13 05:20:59.995292 2026] [:error] [pid 33942:tid 33985] [client 20.151.218.28:61297] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/payout.php"] [unique_id "adwMuxNHe8geO_lMeFaTVQAAAEY"]
[Mon Apr 13 05:21:08.644186 2026] [:error] [pid 33943:tid 34026] [client 20.151.218.28:61860] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uxquidwa.php"] [unique_id "adwMxKyoXuZjocnxM5FfQAAAAJQ"]
[Mon Apr 13 05:21:10.584641 2026] [:error] [pid 34048:tid 34074] [client 20.151.218.28:61877] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uxquidwa.php"] [unique_id "adwMxvSiQ_PJjlY5EhzvvwAAANg"]
[Mon Apr 13 05:21:12.141796 2026] [:error] [pid 33943:tid 34021] [client 20.151.218.28:61307] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uxquidwa.php"] [unique_id "adwMyKyoXuZjocnxM5FfVAAAAI8"]
[Mon Apr 13 05:21:13.829947 2026] [:error] [pid 11325:tid 11347] [client 20.151.218.28:61853] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uxquidwa.php"] [unique_id "adwMyeCGj3EEJtCwa0OArwAAARQ"]
[Mon Apr 13 05:21:15.000445 2026] [:error] [pid 33942:tid 33996] [client 20.151.218.28:61892] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/combined.php"] [unique_id "adwMyhNHe8geO_lMeFaTgwAAAFE"]
[Mon Apr 13 05:21:16.802290 2026] [:error] [pid 33943:tid 34027] [client 20.151.218.28:61901] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/combined.php"] [unique_id "adwMzKyoXuZjocnxM5FfZAAAAJU"]
[Mon Apr 13 05:21:24.282671 2026] [:error] [pid 34048:tid 34070] [client 20.151.218.28:60634] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/combined.php"] [unique_id "adwM1PSiQ_PJjlY5Ehzv2wAAANQ"]
[Mon Apr 13 05:21:28.398063 2026] [:error] [pid 11325:tid 11351] [client 20.151.218.28:61299] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/combined.php"] [unique_id "adwM2OCGj3EEJtCwa0OBqwAAARg"]
[Mon Apr 13 05:21:29.037677 2026] [:error] [pid 33943:tid 34015] [client 20.151.218.28:61286] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mari.php"] [unique_id "adwM2ayoXuZjocnxM5FffAAAAIk"]
[Mon Apr 13 05:21:29.660956 2026] [:error] [pid 33943:tid 34012] [client 20.151.218.28:61302] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mari.php"] [unique_id "adwM2ayoXuZjocnxM5FfgAAAAIY"]
[Mon Apr 13 05:21:30.923558 2026] [proxy_fcgi:error] [pid 11325:tid 11347] [client 20.151.218.28:61272] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:21:32.033148 2026] [proxy_fcgi:error] [pid 33942:tid 33998] [client 20.151.218.28:61946] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:21:33.003797 2026] [proxy_fcgi:error] [pid 33942:tid 33985] [client 20.151.218.28:61190] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:21:33.838194 2026] [proxy_fcgi:error] [pid 33943:tid 34016] [client 20.151.218.28:61843] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:21:35.325254 2026] [proxy_fcgi:error] [pid 33943:tid 34014] [client 20.151.218.28:61293] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:21:36.709262 2026] [proxy_fcgi:error] [pid 33942:tid 33998] [client 20.151.218.28:61268] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:21:37.912102 2026] [proxy_fcgi:error] [pid 33943:tid 34006] [client 20.151.218.28:61885] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:21:38.823009 2026] [proxy_fcgi:error] [pid 33943:tid 34023] [client 20.151.218.28:61246] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:21:39.842988 2026] [proxy_fcgi:error] [pid 11325:tid 11335] [client 20.151.218.28:61849] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:21:41.028179 2026] [proxy_fcgi:error] [pid 33943:tid 34018] [client 20.151.218.28:61260] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:21:42.347585 2026] [proxy_fcgi:error] [pid 34048:tid 34067] [client 20.151.218.28:61828] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:21:43.660361 2026] [proxy_fcgi:error] [pid 33943:tid 34027] [client 20.151.218.28:61263] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:21:45.044488 2026] [proxy_fcgi:error] [pid 33943:tid 34012] [client 20.151.218.28:61826] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:21:47.013564 2026] [:error] [pid 34048:tid 34071] [client 20.151.218.28:61847] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/indo.php"] [unique_id "adwM6_SiQ_PJjlY5EhzwJwAAANU"]
[Mon Apr 13 05:21:48.459767 2026] [:error] [pid 33943:tid 34017] [client 20.151.218.28:61282] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/indo.php"] [unique_id "adwM7KyoXuZjocnxM5Ff2AAAAIs"]
[Mon Apr 13 05:21:49.175465 2026] [:error] [pid 11325:tid 11349] [client 20.151.218.28:61298] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/indo.php"] [unique_id "adwM7eCGj3EEJtCwa0OCtgAAARY"]
[Mon Apr 13 05:21:49.666845 2026] [:error] [pid 33941:tid 33950] [client 20.151.218.28:61836] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/indo.php"] [unique_id "adwM7W_NKERAxgG-rYMzwwAAAAA"]
[Mon Apr 13 05:21:50.653875 2026] [:error] [pid 34048:tid 34058] [client 20.151.218.28:61841] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pu.php"] [unique_id "adwM7vSiQ_PJjlY5EhzwMQAAAMg"]
[Mon Apr 13 05:21:51.134454 2026] [:error] [pid 33943:tid 34030] [client 20.151.218.28:61250] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pu.php"] [unique_id "adwM76yoXuZjocnxM5Ff4wAAAJg"]
[Mon Apr 13 05:21:51.809607 2026] [:error] [pid 33943:tid 34018] [client 20.151.218.28:61205] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pu.php"] [unique_id "adwM76yoXuZjocnxM5Ff5wAAAIw"]
[Mon Apr 13 05:21:52.523845 2026] [:error] [pid 34048:tid 34071] [client 20.151.218.28:61950] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pu.php"] [unique_id "adwM8PSiQ_PJjlY5EhzwNAAAANU"]
[Mon Apr 13 05:21:53.417069 2026] [:error] [pid 33942:tid 33998] [client 20.151.218.28:61186] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/docs.php"] [unique_id "adwM8RNHe8geO_lMeFaUOAAAAFM"]
[Mon Apr 13 05:21:53.912519 2026] [:error] [pid 33943:tid 34017] [client 20.151.218.28:61854] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/docs.php"] [unique_id "adwM8ayoXuZjocnxM5Ff8QAAAIs"]
[Mon Apr 13 05:21:54.461739 2026] [:error] [pid 11325:tid 11336] [client 20.151.218.28:61944] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/docs.php"] [unique_id "adwM8uCGj3EEJtCwa0OCywAAAQk"]
[Mon Apr 13 05:21:55.028218 2026] [:error] [pid 34048:tid 34055] [client 20.151.218.28:61230] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/docs.php"] [unique_id "adwM8_SiQ_PJjlY5EhzwOAAAAMU"]
[Mon Apr 13 05:21:55.831110 2026] [:error] [pid 33942:tid 34003] [client 20.151.218.28:61306] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/js/cache.php"] [unique_id "adwM8xNHe8geO_lMeFaUPwAAAFg"]
[Mon Apr 13 05:21:56.589659 2026] [:error] [pid 11325:tid 11343] [client 20.151.218.28:60617] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/js/cache.php"] [unique_id "adwM9OCGj3EEJtCwa0OC0wAAARA"]
[Mon Apr 13 05:21:57.378507 2026] [:error] [pid 34048:tid 34063] [client 20.151.218.28:61912] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/js/cache.php"] [unique_id "adwM9fSiQ_PJjlY5EhzwQgAAAM0"]
[Mon Apr 13 05:21:58.105763 2026] [:error] [pid 33943:tid 34014] [client 20.151.218.28:61241] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/js/cache.php"] [unique_id "adwM9qyoXuZjocnxM5Ff_gAAAIg"]
[Mon Apr 13 05:21:59.098181 2026] [:error] [pid 33943:tid 34022] [client 20.151.218.28:61859] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gaza.php"] [unique_id "adwM96yoXuZjocnxM5FgCwAAAJA"]
[Mon Apr 13 05:21:59.793663 2026] [:error] [pid 33943:tid 34012] [client 20.151.218.28:61914] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gaza.php"] [unique_id "adwM96yoXuZjocnxM5FgEQAAAIY"]
[Mon Apr 13 05:22:00.544197 2026] [:error] [pid 34048:tid 34061] [client 20.151.218.28:61308] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gaza.php"] [unique_id "adwM-PSiQ_PJjlY5EhzwRAAAAMs"]
[Mon Apr 13 05:22:02.064290 2026] [:error] [pid 33943:tid 34008] [client 20.151.218.28:61292] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gaza.php"] [unique_id "adwM-qyoXuZjocnxM5FgIgAAAII"]
[Mon Apr 13 05:22:09.376113 2026] [:error] [pid 33943:tid 34015] [client 20.151.218.28:60670] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/XX.php"] [unique_id "adwNAayoXuZjocnxM5FgQAAAAIk"]
[Mon Apr 13 05:22:12.324688 2026] [:error] [pid 11325:tid 11344] [client 20.151.218.28:61253] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/XX.php"] [unique_id "adwNBOCGj3EEJtCwa0ODBAAAARE"]
[Mon Apr 13 05:22:14.130432 2026] [:error] [pid 33943:tid 34019] [client 20.151.218.28:61907] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/XX.php"] [unique_id "adwNBqyoXuZjocnxM5FgaAAAAI0"]
[Mon Apr 13 05:22:15.606269 2026] [:error] [pid 33942:tid 33985] [client 20.151.218.28:61846] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/XX.php"] [unique_id "adwNBxNHe8geO_lMeFaUVgAAAEY"]
[Mon Apr 13 05:22:16.443334 2026] [:error] [pid 11325:tid 11345] [client 20.151.218.28:61929] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fm.php/sts.php"] [unique_id "adwNCOCGj3EEJtCwa0ODBgAAARI"]
[Mon Apr 13 05:22:17.195134 2026] [:error] [pid 33941:tid 33967] [client 20.151.218.28:61910] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fm.php/sts.php"] [unique_id "adwNCW_NKERAxgG-rYMz2wAAABA"]
[Mon Apr 13 05:22:18.737507 2026] [:error] [pid 33943:tid 34029] [client 20.151.218.28:61193] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fm.php/sts.php"] [unique_id "adwNCqyoXuZjocnxM5FgewAAAJc"]
[Mon Apr 13 05:22:20.818976 2026] [:error] [pid 33943:tid 34011] [client 20.151.218.28:61238] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fm.php/sts.php"] [unique_id "adwNDKyoXuZjocnxM5FghgAAAIU"]
[Mon Apr 13 05:22:22.209116 2026] [:error] [pid 34048:tid 34054] [client 20.151.218.28:61223] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.tmb/cloud.php"] [unique_id "adwNDvSiQ_PJjlY5EhzwYAAAAMQ"]
[Mon Apr 13 05:22:25.981042 2026] [:error] [pid 34048:tid 34070] [client 20.151.218.28:61899] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.tmb/cloud.php"] [unique_id "adwNEfSiQ_PJjlY5EhzwagAAANQ"]
[Mon Apr 13 05:22:27.237972 2026] [:error] [pid 11325:tid 11338] [client 20.151.218.28:61890] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.tmb/cloud.php"] [unique_id "adwNE-CGj3EEJtCwa0ODKwAAAQs"]
[Mon Apr 13 05:22:28.901562 2026] [:error] [pid 33943:tid 34020] [client 20.151.218.28:60658] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.tmb/cloud.php"] [unique_id "adwNFKyoXuZjocnxM5FgnQAAAI4"]
[Mon Apr 13 05:22:29.943860 2026] [:error] [pid 33941:tid 33953] [client 20.151.218.28:61883] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/owlmailer.php"] [unique_id "adwNFW_NKERAxgG-rYMz6gAAAAM"]
[Mon Apr 13 05:22:31.462045 2026] [:error] [pid 11325:tid 11342] [client 20.151.218.28:60638] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/owlmailer.php"] [unique_id "adwNF-CGj3EEJtCwa0ODQAAAAQ8"]
[Mon Apr 13 05:22:32.942986 2026] [:error] [pid 33943:tid 34020] [client 20.151.218.28:61281] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/owlmailer.php"] [unique_id "adwNGKyoXuZjocnxM5FgsAAAAI4"]
[Mon Apr 13 05:22:34.863949 2026] [:error] [pid 33943:tid 34010] [client 20.151.218.28:60637] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/owlmailer.php"] [unique_id "adwNGqyoXuZjocnxM5FgswAAAIQ"]
[Mon Apr 13 05:22:35.766372 2026] [:error] [pid 34048:tid 34063] [client 20.151.218.28:60652] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/F0x.php"] [unique_id "adwNG_SiQ_PJjlY5EhzwewAAAM0"]
[Mon Apr 13 05:22:37.116018 2026] [:error] [pid 33941:tid 33961] [client 20.151.218.28:60175] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/F0x.php"] [unique_id "adwNHW_NKERAxgG-rYMz9gAAAAo"]
[Mon Apr 13 05:22:37.735621 2026] [:error] [pid 33943:tid 34028] [client 20.151.218.28:61235] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/F0x.php"] [unique_id "adwNHayoXuZjocnxM5FgvgAAAJY"]
[Mon Apr 13 05:22:38.387464 2026] [:error] [pid 11325:tid 11344] [client 20.151.218.28:61842] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/F0x.php"] [unique_id "adwNHuCGj3EEJtCwa0ODSQAAARE"]
[Mon Apr 13 05:22:40.027746 2026] [:error] [pid 11325:tid 11340] [client 20.151.218.28:61290] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/rlpc.php"] [unique_id "adwNIOCGj3EEJtCwa0ODUwAAAQ0"]
[Mon Apr 13 05:22:40.702256 2026] [:error] [pid 33943:tid 34026] [client 20.151.218.28:60641] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/rlpc.php"] [unique_id "adwNIKyoXuZjocnxM5FgxgAAAJQ"]
[Mon Apr 13 05:22:41.516566 2026] [:error] [pid 33943:tid 34007] [client 20.151.218.28:61896] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/rlpc.php"] [unique_id "adwNIayoXuZjocnxM5FgywAAAIE"]
[Mon Apr 13 05:22:41.986640 2026] [:error] [pid 33943:tid 34009] [client 20.151.218.28:61851] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/rlpc.php"] [unique_id "adwNIayoXuZjocnxM5FgzwAAAIM"]
[Mon Apr 13 05:22:42.473219 2026] [:error] [pid 33943:tid 34020] [client 20.151.218.28:61864] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-p.php7"] [unique_id "adwNIqyoXuZjocnxM5Fg1AAAAI4"]
[Mon Apr 13 05:22:42.885064 2026] [:error] [pid 11325:tid 11337] [client 20.151.218.28:61229] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-p.php7"] [unique_id "adwNIuCGj3EEJtCwa0ODXQAAAQo"]
[Mon Apr 13 05:22:43.328803 2026] [:error] [pid 33943:tid 34019] [client 20.151.218.28:61855] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-p.php7"] [unique_id "adwNI6yoXuZjocnxM5Fg2AAAAI0"]
[Mon Apr 13 05:22:43.919772 2026] [:error] [pid 11325:tid 11339] [client 20.151.218.28:61840] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-p.php7"] [unique_id "adwNI-CGj3EEJtCwa0ODYwAAAQw"]
[Mon Apr 13 05:22:44.819950 2026] [proxy_fcgi:error] [pid 11325:tid 11330] [client 20.151.218.28:60563] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:22:45.556551 2026] [proxy_fcgi:error] [pid 33941:tid 33950] [client 20.151.218.28:61900] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:22:46.421968 2026] [proxy_fcgi:error] [pid 34048:tid 34051] [client 20.151.218.28:61283] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:22:47.458194 2026] [proxy_fcgi:error] [pid 33942:tid 33999] [client 20.151.218.28:61824] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:22:48.238587 2026] [proxy_fcgi:error] [pid 33943:tid 34029] [client 20.151.218.28:61196] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:22:49.122519 2026] [:error] [pid 11325:tid 11342] [client 20.151.218.28:61309] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/133.php"] [unique_id "adwNKeCGj3EEJtCwa0ODdAAAAQ8"]
[Mon Apr 13 05:22:50.088458 2026] [:error] [pid 33942:tid 33986] [client 20.151.218.28:61305] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/133.php"] [unique_id "adwNKhNHe8geO_lMeFaUggAAAEc"]
[Mon Apr 13 05:22:50.811483 2026] [:error] [pid 33941:tid 33960] [client 20.151.218.28:61862] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/133.php"] [unique_id "adwNKm_NKERAxgG-rYM0AwAAAAk"]
[Mon Apr 13 05:22:51.326389 2026] [:error] [pid 11325:tid 11328] [client 20.151.218.28:60556] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/133.php"] [unique_id "adwNK-CGj3EEJtCwa0ODgQAAAQE"]
[Mon Apr 13 05:22:52.012712 2026] [:error] [pid 33941:tid 33957] [client 20.151.218.28:61837] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ssxsl.php"] [unique_id "adwNLG_NKERAxgG-rYM0CwAAAAc"]
[Mon Apr 13 05:22:52.581334 2026] [:error] [pid 11325:tid 11351] [client 20.151.218.28:61873] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ssxsl.php"] [unique_id "adwNLOCGj3EEJtCwa0ODhwAAARg"]
[Mon Apr 13 05:22:53.270905 2026] [:error] [pid 11325:tid 11349] [client 20.151.218.28:61909] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ssxsl.php"] [unique_id "adwNLeCGj3EEJtCwa0ODiwAAARY"]
[Mon Apr 13 05:22:53.738855 2026] [:error] [pid 33942:tid 33997] [client 20.151.218.28:61873] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ssxsl.php"] [unique_id "adwNLRNHe8geO_lMeFaUhwAAAFI"]
[Mon Apr 13 05:22:54.221222 2026] [:error] [pid 33942:tid 33991] [client 20.151.218.28:60226] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/AE5VAL.php"] [unique_id "adwNLhNHe8geO_lMeFaUiAAAAEw"]
[Mon Apr 13 05:22:54.704232 2026] [:error] [pid 11325:tid 11327] [client 20.151.218.28:60585] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/AE5VAL.php"] [unique_id "adwNLuCGj3EEJtCwa0ODlgAAAQA"]
[Mon Apr 13 05:22:55.415617 2026] [:error] [pid 33943:tid 34015] [client 20.151.218.28:61902] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/AE5VAL.php"] [unique_id "adwNL6yoXuZjocnxM5Fg8wAAAIk"]
[Mon Apr 13 05:22:56.174140 2026] [:error] [pid 11325:tid 11329] [client 20.151.218.28:61891] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/AE5VAL.php"] [unique_id "adwNMOCGj3EEJtCwa0ODnAAAAQI"]
[Mon Apr 13 05:22:57.035514 2026] [:error] [pid 33943:tid 34020] [client 20.151.218.28:61269] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gold.php"] [unique_id "adwNMayoXuZjocnxM5Fg-wAAAI4"]
[Mon Apr 13 05:22:57.472511 2026] [:error] [pid 33941:tid 33971] [client 20.151.218.28:61905] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gold.php"] [unique_id "adwNMW_NKERAxgG-rYM0DwAAABQ"]
[Mon Apr 13 05:22:57.927215 2026] [:error] [pid 33941:tid 33953] [client 20.151.218.28:60661] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gold.php"] [unique_id "adwNMW_NKERAxgG-rYM0EQAAAAM"]
[Mon Apr 13 05:22:58.512643 2026] [:error] [pid 34048:tid 34054] [client 20.151.218.28:60251] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gold.php"] [unique_id "adwNMvSiQ_PJjlY5EhzwnQAAAMQ"]
[Mon Apr 13 05:22:59.059987 2026] [:error] [pid 34048:tid 34068] [client 20.151.218.28:61882] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gely.php"] [unique_id "adwNM_SiQ_PJjlY5EhzwnwAAANI"]
[Mon Apr 13 05:22:59.513389 2026] [:error] [pid 11325:tid 11328] [client 20.151.218.28:60619] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gely.php"] [unique_id "adwNM-CGj3EEJtCwa0ODqAAAAQE"]
[Mon Apr 13 05:23:00.000999 2026] [:error] [pid 34048:tid 34053] [client 20.151.218.28:61266] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gely.php"] [unique_id "adwNM_SiQ_PJjlY5EhzwogAAAMM"]
[Mon Apr 13 05:23:00.436727 2026] [:error] [pid 11325:tid 11335] [client 20.151.218.28:61888] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gely.php"] [unique_id "adwNNOCGj3EEJtCwa0ODrAAAAQg"]
[Mon Apr 13 05:23:01.028484 2026] [:error] [pid 33942:tid 33996] [client 20.151.218.28:60582] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xBrain.php"] [unique_id "adwNNRNHe8geO_lMeFaUlQAAAFE"]
[Mon Apr 13 05:23:01.527124 2026] [:error] [pid 34048:tid 34061] [client 20.151.218.28:60639] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xBrain.php"] [unique_id "adwNNfSiQ_PJjlY5EhzwpwAAAMs"]
[Mon Apr 13 05:23:02.101600 2026] [:error] [pid 34048:tid 34063] [client 20.151.218.28:61209] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xBrain.php"] [unique_id "adwNNvSiQ_PJjlY5EhzwqgAAAM0"]
[Mon Apr 13 05:23:02.559481 2026] [:error] [pid 34048:tid 34071] [client 20.151.218.28:61911] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xBrain.php"] [unique_id "adwNNvSiQ_PJjlY5EhzwrgAAANU"]
[Mon Apr 13 05:23:03.560577 2026] [:error] [pid 33943:tid 34008] [client 20.151.218.28:61192] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sagafif.php"] [unique_id "adwNN6yoXuZjocnxM5FhDwAAAII"]
[Mon Apr 13 05:23:06.204072 2026] [:error] [pid 33941:tid 33963] [client 20.151.218.28:61834] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sagafif.php"] [unique_id "adwNOm_NKERAxgG-rYM0HAAAAAw"]
[Mon Apr 13 05:23:08.715886 2026] [:error] [pid 33943:tid 34009] [client 20.151.218.28:61829] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sagafif.php"] [unique_id "adwNPKyoXuZjocnxM5FhHQAAAIM"]
[Mon Apr 13 05:23:14.625104 2026] [:error] [pid 11325:tid 11344] [client 20.151.218.28:60625] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sagafif.php"] [unique_id "adwNQuCGj3EEJtCwa0OD2AAAARE"]
[Mon Apr 13 05:23:15.346024 2026] [:error] [pid 34048:tid 34074] [client 20.151.218.28:61284] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-trc.php"] [unique_id "adwNQ_SiQ_PJjlY5EhzwvwAAANg"]
[Mon Apr 13 05:23:16.266150 2026] [:error] [pid 33942:tid 33999] [client 20.151.218.28:61867] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-trc.php"] [unique_id "adwNRBNHe8geO_lMeFaUvgAAAFQ"]
[Mon Apr 13 05:23:17.354516 2026] [:error] [pid 11325:tid 11344] [client 20.151.218.28:61207] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-trc.php"] [unique_id "adwNReCGj3EEJtCwa0OD5gAAARE"]
[Mon Apr 13 05:23:18.445175 2026] [:error] [pid 11325:tid 11347] [client 20.151.218.28:61232] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-trc.php"] [unique_id "adwNRuCGj3EEJtCwa0OD7gAAARQ"]
[Mon Apr 13 05:23:19.208074 2026] [:error] [pid 33943:tid 34023] [client 20.151.218.28:61906] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/tesla1.php"] [unique_id "adwNR6yoXuZjocnxM5FhLgAAAJE"]
[Mon Apr 13 05:23:19.731437 2026] [:error] [pid 33943:tid 34018] [client 20.151.218.28:61236] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/tesla1.php"] [unique_id "adwNR6yoXuZjocnxM5FhMQAAAIw"]
[Mon Apr 13 05:23:20.235917 2026] [:error] [pid 11325:tid 11341] [client 20.151.218.28:61928] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/tesla1.php"] [unique_id "adwNSOCGj3EEJtCwa0OD9AAAAQ4"]
[Mon Apr 13 05:23:21.011001 2026] [:error] [pid 11325:tid 11346] [client 20.151.218.28:60588] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/tesla1.php"] [unique_id "adwNSeCGj3EEJtCwa0OD9gAAARM"]
[Mon Apr 13 05:23:21.569680 2026] [:error] [pid 33941:tid 33952] [client 20.151.218.28:61245] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/aks.php"] [unique_id "adwNSW_NKERAxgG-rYM0MgAAAAI"]
[Mon Apr 13 05:23:22.891564 2026] [:error] [pid 33942:tid 33982] [client 20.151.218.28:60621] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/aks.php"] [unique_id "adwNShNHe8geO_lMeFaUxQAAAEM"]
[Mon Apr 13 05:23:23.856691 2026] [:error] [pid 11325:tid 11342] [client 20.151.218.28:60660] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/aks.php"] [unique_id "adwNS-CGj3EEJtCwa0OD-gAAAQ8"]
[Mon Apr 13 05:23:25.173830 2026] [:error] [pid 33942:tid 33986] [client 20.151.218.28:61296] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/aks.php"] [unique_id "adwNTRNHe8geO_lMeFaU0QAAAEc"]
[Mon Apr 13 05:23:25.977487 2026] [:error] [pid 33943:tid 34019] [client 20.151.218.28:61275] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pomo/l.php"] [unique_id "adwNTayoXuZjocnxM5FhQQAAAI0"]
[Mon Apr 13 05:23:26.467442 2026] [:error] [pid 34048:tid 34051] [client 20.151.218.28:61239] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pomo/l.php"] [unique_id "adwNTvSiQ_PJjlY5Ehzw8AAAAME"]
[Mon Apr 13 05:23:26.912554 2026] [:error] [pid 33941:tid 33969] [client 20.151.218.28:60560] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pomo/l.php"] [unique_id "adwNTm_NKERAxgG-rYM0NAAAABI"]
[Mon Apr 13 05:23:27.326088 2026] [:error] [pid 11325:tid 11351] [client 20.151.218.28:61904] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/pomo/l.php"] [unique_id "adwNT-CGj3EEJtCwa0OEAQAAARg"]
[Mon Apr 13 05:23:27.831123 2026] [:error] [pid 34048:tid 34073] [client 20.151.218.28:60664] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ase.php"] [unique_id "adwNT_SiQ_PJjlY5Ehzw9wAAANc"]
[Mon Apr 13 05:23:28.545164 2026] [:error] [pid 34048:tid 34065] [client 20.151.218.28:60224] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ase.php"] [unique_id "adwNUPSiQ_PJjlY5Ehzw-gAAAM8"]
[Mon Apr 13 05:23:29.171315 2026] [:error] [pid 33942:tid 33994] [client 20.151.218.28:61243] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ase.php"] [unique_id "adwNURNHe8geO_lMeFaU2QAAAE8"]
[Mon Apr 13 05:23:29.868811 2026] [:error] [pid 33942:tid 33990] [client 20.151.218.28:61198] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ase.php"] [unique_id "adwNURNHe8geO_lMeFaU3AAAAEs"]
[Mon Apr 13 05:23:31.454389 2026] [:error] [pid 11325:tid 11345] [client 20.151.218.28:60627] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ktgob.php"] [unique_id "adwNU-CGj3EEJtCwa0OEEAAAARI"]
[Mon Apr 13 05:23:32.776150 2026] [:error] [pid 11325:tid 11337] [client 20.151.218.28:61226] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ktgob.php"] [unique_id "adwNVOCGj3EEJtCwa0OEGwAAAQo"]
[Mon Apr 13 05:23:33.283787 2026] [:error] [pid 11325:tid 11346] [client 20.151.218.28:61184] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ktgob.php"] [unique_id "adwNVeCGj3EEJtCwa0OEHgAAARM"]
[Mon Apr 13 05:23:34.088111 2026] [:error] [pid 11325:tid 11341] [client 20.151.218.28:60236] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ktgob.php"] [unique_id "adwNVuCGj3EEJtCwa0OEIgAAAQ4"]
[Mon Apr 13 05:23:35.186754 2026] [:error] [pid 33941:tid 33972] [client 20.151.218.28:60618] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/abc.php"] [unique_id "adwNV2_NKERAxgG-rYM0OQAAABU"]
[Mon Apr 13 05:23:36.448982 2026] [:error] [pid 33943:tid 34029] [client 20.151.218.28:61871] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/abc.php"] [unique_id "adwNWKyoXuZjocnxM5FhTAAAAJc"]
[Mon Apr 13 05:23:40.021546 2026] [:error] [pid 33942:tid 33986] [client 20.151.218.28:61947] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/abc.php"] [unique_id "adwNXBNHe8geO_lMeFaU7AAAAEc"]
[Mon Apr 13 05:23:43.290294 2026] [:error] [pid 33942:tid 33990] [client 20.151.218.28:61861] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/abc.php"] [unique_id "adwNXxNHe8geO_lMeFaU8gAAAEs"]
[Mon Apr 13 05:23:44.420974 2026] [:error] [pid 33942:tid 33980] [client 20.151.218.28:61224] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/afile.php"] [unique_id "adwNYBNHe8geO_lMeFaU9QAAAEE"]
[Mon Apr 13 05:23:45.486428 2026] [:error] [pid 33942:tid 34003] [client 20.151.218.28:60614] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/afile.php"] [unique_id "adwNYRNHe8geO_lMeFaU-AAAAFg"]
[Mon Apr 13 05:23:47.163472 2026] [:error] [pid 33942:tid 33980] [client 20.151.218.28:61933] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/afile.php"] [unique_id "adwNYxNHe8geO_lMeFaU_wAAAEE"]
[Mon Apr 13 05:23:49.511206 2026] [proxy_fcgi:error] [pid 33942:tid 33998] [client 20.151.218.28:61938] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:23:50.852276 2026] [proxy_fcgi:error] [pid 11325:tid 11330] [client 20.151.218.28:60647] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:23:52.167768 2026] [proxy_fcgi:error] [pid 11325:tid 11334] [client 20.151.218.28:61233] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 05:23:53.277506 2026] [proxy_fcgi:error] [pid 34048:tid 34061] [client 20.151.218.28:61932] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 09:46:06.409299 2026] [proxy_fcgi:error] [pid 63311:tid 63387] [client 20.151.248.149:30666] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 09:46:07.144658 2026] [proxy_fcgi:error] [pid 63310:tid 63359] [client 20.151.248.149:30664] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 09:46:07.895528 2026] [proxy_fcgi:error] [pid 63406:tid 63430] [client 20.151.248.149:30715] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 09:46:08.663437 2026] [proxy_fcgi:error] [pid 7228:tid 7252] [client 20.151.248.149:30659] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 09:46:09.446106 2026] [proxy_fcgi:error] [pid 7228:tid 7246] [client 20.151.248.149:30697] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 09:46:10.164208 2026] [proxy_fcgi:error] [pid 7228:tid 7232] [client 20.151.248.149:30602] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 09:46:10.891450 2026] [proxy_fcgi:error] [pid 63406:tid 63415] [client 20.151.248.149:30658] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 11:15:10.076004 2026] [proxy_fcgi:error] [pid 63310:tid 63368] [client 20.151.248.149:2677] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 11:15:10.849850 2026] [proxy_fcgi:error] [pid 57183:tid 57207] [client 20.151.248.149:2671] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 11:15:11.583444 2026] [proxy_fcgi:error] [pid 7228:tid 7245] [client 20.151.248.149:65043] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 11:15:12.317103 2026] [proxy_fcgi:error] [pid 63311:tid 63386] [client 20.151.248.149:65076] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 11:15:13.034561 2026] [proxy_fcgi:error] [pid 63310:tid 63363] [client 20.151.248.149:2666] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 11:15:13.748549 2026] [proxy_fcgi:error] [pid 63310:tid 63350] [client 20.151.248.149:2647] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 11:15:14.537574 2026] [proxy_fcgi:error] [pid 7228:tid 7234] [client 20.151.248.149:2710] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 14:17:50.934483 2026] [proxy_fcgi:error] [pid 57183:tid 57200] [client 136.119.151.235:50219] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 15:26:14.780271 2026] [proxy_fcgi:error] [pid 7228:tid 7235] [client 64.15.129.103:23034] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 19:30:13.725469 2026] [proxy_fcgi:error] [pid 63310:tid 63358] [client 209.141.32.143:51452] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 13 20:40:51.747658 2026] [:error] [pid 63406:tid 63427] [client 103.77.107.178:63363] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/sftp-config.json"] [unique_id "adzkU7HZEIkQ0Zmgp5qqygAAANA"]
[Mon Apr 13 20:40:51.953587 2026] [:error] [pid 63406:tid 63420] [client 103.77.107.178:63371] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.vscode/sftp.json"] [unique_id "adzkU7HZEIkQ0Zmgp5qqzQAAAMk"]
[Tue Apr 14 02:53:43.496411 2026] [proxy_fcgi:error] [pid 60317:tid 60359] [client 192.36.109.108:55433] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 03:41:01.576959 2026] [proxy_fcgi:error] [pid 19689:tid 19759] [client 178.128.105.125:52623] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 04:26:10.798042 2026] [proxy_fcgi:error] [pid 19687:tid 19713] [client 130.89.144.164:59368] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 04:26:11.604450 2026] [proxy_fcgi:error] [pid 19793:tid 19802] [client 130.89.144.164:63436] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 05:24:51.175393 2026] [proxy_fcgi:error] [pid 19689:tid 19762] [client 66.249.79.224:44211] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 07:13:07.880625 2026] [proxy_fcgi:error] [pid 35713:tid 35730] [client 44.209.43.227:54979] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 07:51:08.561050 2026] [proxy_fcgi:error] [pid 37226:tid 37237] [client 216.73.216.30:54454] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 07:51:08.765698 2026] [:error] [pid 37226:tid 37246] [client 216.73.216.30:54454] [client 216.73.216.30] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.southerncrosscentre.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.southerncrosscentre.au"] [uri "/robots.txt"] [unique_id "ad2BbJOA5-IQ0IVmQCqz5QAAAVI"]
[Tue Apr 14 07:51:09.075877 2026] [proxy_fcgi:error] [pid 37226:tid 37246] [client 216.73.216.30:54454] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 07:51:09.577946 2026] [proxy_fcgi:error] [pid 37226:tid 37232] [client 216.73.216.30:54454] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 08:21:34.643524 2026] [proxy_fcgi:error] [pid 35630:tid 35691] [client 192.175.111.228:25826] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 09:02:30.422978 2026] [:error] [pid 35630:tid 35704] [client 216.73.216.30:54894] [client 216.73.216.30] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||southerncrosscentre.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "southerncrosscentre.au"] [uri "/robots.txt"] [unique_id "ad2SJjer0pVFxOiOauXICwAAAJI"]
[Tue Apr 14 09:02:31.264724 2026] [proxy_fcgi:error] [pid 35630:tid 35704] [client 216.73.216.30:54894] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 15:19:34.627841 2026] [proxy_fcgi:error] [pid 35630:tid 35705] [client 93.158.90.66:59705] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 18:24:16.646850 2026] [proxy_fcgi:error] [pid 59986:tid 60034] [client 34.141.215.197:32768] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 18:40:58.071638 2026] [proxy_fcgi:error] [pid 59985:tid 60007] [client 74.208.119.119:41760] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:02:30.291706 2026] [proxy_fcgi:error] [pid 59987:tid 60068] [client 20.220.197.80:8130] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:02:40.529755 2026] [proxy_fcgi:error] [pid 59985:tid 59996] [client 20.220.197.80:8178] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:02:42.878673 2026] [proxy_fcgi:error] [pid 60074:tid 60094] [client 20.220.197.80:8157] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:02:47.618536 2026] [proxy_fcgi:error] [pid 59986:tid 60031] [client 20.220.197.80:8075] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:02:59.786674 2026] [proxy_fcgi:error] [pid 22177:tid 22195] [client 20.220.197.80:8185] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:03:03.503248 2026] [proxy_fcgi:error] [pid 59986:tid 60031] [client 20.220.197.80:8139] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:03:04.892501 2026] [proxy_fcgi:error] [pid 3810:tid 3830] [client 20.220.197.80:8169] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:03:25.204131 2026] [:error] [pid 59986:tid 60022] [client 20.220.197.80:8191] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/congeree.php"] [unique_id "ad5JLZ6axKeW6bX4H7eV_wAAAEI"]
[Tue Apr 14 22:04:03.940320 2026] [:error] [pid 60074:tid 60077] [client 20.220.197.80:8111] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/seo.php"] [unique_id "ad5JU-tqnEmNU9vpHCm1ngAAAME"]
[Tue Apr 14 22:05:26.053746 2026] [:error] [pid 3810:tid 3826] [client 20.220.197.80:8182] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/jatuh.php"] [unique_id "ad5Jpsqc5XaYZhFXVGe6wQAAAY0"]
[Tue Apr 14 22:05:35.980658 2026] [proxy_fcgi:error] [pid 59987:tid 60065] [client 20.220.197.80:8151] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:05:50.090692 2026] [:error] [pid 3778:tid 3797] [client 20.220.197.80:8065] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/green.php"] [unique_id "ad5Jvhx5DfpNmYF_PaH4OAAAAVE"]
[Tue Apr 14 22:06:04.417191 2026] [:error] [pid 3810:tid 3832] [client 20.220.197.80:8079] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/multirole.php"] [unique_id "ad5JzMqc5XaYZhFXVGe6_AAAAZM"]
[Tue Apr 14 22:06:08.435268 2026] [:error] [pid 59985:tid 60001] [client 20.220.197.80:8179] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/multirole.php"] [unique_id "ad5J0OgHaxkvLE6V1kltbQAAAAg"]
[Tue Apr 14 22:06:12.104036 2026] [:error] [pid 59986:tid 60023] [client 20.220.197.80:8071] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/multirole.php"] [unique_id "ad5J1J6axKeW6bX4H7eYYAAAAEM"]
[Tue Apr 14 22:06:15.269867 2026] [:error] [pid 3810:tid 3826] [client 20.220.197.80:8158] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/RIP.php"] [unique_id "ad5J18qc5XaYZhFXVGe7SAAAAY0"]
[Tue Apr 14 22:07:23.962735 2026] [:error] [pid 59986:tid 60026] [client 20.220.197.80:8157] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sf.php"] [unique_id "ad5KG56axKeW6bX4H7eYxAAAAEY"]
[Tue Apr 14 22:07:26.393514 2026] [:error] [pid 60074:tid 60100] [client 20.220.197.80:8180] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sf.php"] [unique_id "ad5KHutqnEmNU9vpHCm3DgAAANg"]
[Tue Apr 14 22:07:32.548725 2026] [:error] [pid 3810:tid 3836] [client 20.220.197.80:8072] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sf.php"] [unique_id "ad5KJMqc5XaYZhFXVGe76wAAAZc"]
[Tue Apr 14 22:07:35.248998 2026] [:error] [pid 59987:tid 60060] [client 20.220.197.80:8082] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xozx.php"] [unique_id "ad5KJ1Wpk-Tfi6_vLKpCwgAAAI0"]
[Tue Apr 14 22:07:43.475181 2026] [:error] [pid 60074:tid 60100] [client 20.220.197.80:8100] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xozx.php"] [unique_id "ad5KL-tqnEmNU9vpHCm3GgAAANg"]
[Tue Apr 14 22:08:19.200463 2026] [proxy_fcgi:error] [pid 59986:tid 60022] [client 20.220.197.80:8147] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:10:55.212309 2026] [:error] [pid 59986:tid 60043] [client 20.220.197.80:8188] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/h2.php"] [unique_id "ad5K756axKeW6bX4H7ebEAAAAFc"]
[Tue Apr 14 22:11:18.808113 2026] [:error] [pid 3810:tid 3836] [client 20.220.197.80:8067] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-class.php"] [unique_id "ad5LBsqc5XaYZhFXVGe96AAAAZc"]
[Tue Apr 14 22:11:24.272275 2026] [:error] [pid 22177:tid 22189] [client 20.220.197.80:8094] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-class.php"] [unique_id "ad5LDITVeJSXHDIlEDuT1QAAAQo"]
[Tue Apr 14 22:11:36.842710 2026] [:error] [pid 60074:tid 60086] [client 20.220.197.80:8003] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mjq.php/kma.php"] [unique_id "ad5LGOtqnEmNU9vpHCm4ZAAAAMo"]
[Tue Apr 14 22:11:42.413544 2026] [:error] [pid 59986:tid 60029] [client 20.220.197.80:8177] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mjq.php/kma.php"] [unique_id "ad5LHp6axKeW6bX4H7ebwwAAAEk"]
[Tue Apr 14 22:12:09.373050 2026] [:error] [pid 59986:tid 60031] [client 20.220.197.80:8161] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/export.php"] [unique_id "ad5LOZ6axKeW6bX4H7ecHAAAAEs"]
[Tue Apr 14 22:12:11.608464 2026] [:error] [pid 59986:tid 60028] [client 20.220.197.80:8075] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/export.php"] [unique_id "ad5LO56axKeW6bX4H7ecIQAAAEg"]
[Tue Apr 14 22:13:34.193448 2026] [proxy_fcgi:error] [pid 60074:tid 60100] [client 20.220.197.80:8071] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:13:40.424479 2026] [proxy_fcgi:error] [pid 59985:tid 59996] [client 20.220.197.80:8154] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:14:19.970191 2026] [proxy_fcgi:error] [pid 3778:tid 3780] [client 20.220.197.80:8077] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:18:11.050212 2026] [proxy_fcgi:error] [pid 59986:tid 60033] [client 20.220.197.80:8155] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:18:35.114755 2026] [proxy_fcgi:error] [pid 3810:tid 3837] [client 20.220.197.80:8154] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:18:40.880708 2026] [proxy_fcgi:error] [pid 3810:tid 3822] [client 20.220.197.80:8151] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:18:43.397812 2026] [proxy_fcgi:error] [pid 22177:tid 22184] [client 20.220.197.80:8082] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:18:51.425634 2026] [proxy_fcgi:error] [pid 3810:tid 3836] [client 20.220.197.80:8071] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:20:17.251247 2026] [proxy_fcgi:error] [pid 3778:tid 3783] [client 20.220.197.80:8075] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:20:27.766085 2026] [proxy_fcgi:error] [pid 59986:tid 60038] [client 20.220.197.80:8147] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:21:03.200539 2026] [proxy_fcgi:error] [pid 59986:tid 60044] [client 20.220.197.80:8070] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:21:58.431055 2026] [proxy_fcgi:error] [pid 59987:tid 60048] [client 20.220.197.80:8157] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:22:09.102763 2026] [proxy_fcgi:error] [pid 3778:tid 3781] [client 20.220.197.80:8178] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:22:22.326514 2026] [proxy_fcgi:error] [pid 3810:tid 3827] [client 20.220.197.80:8145] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:22:26.575960 2026] [proxy_fcgi:error] [pid 3810:tid 3827] [client 20.220.197.80:8066] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:22:59.093278 2026] [proxy_fcgi:error] [pid 59987:tid 60061] [client 20.220.197.80:8096] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:24:03.193817 2026] [proxy_fcgi:error] [pid 59987:tid 60068] [client 20.220.197.80:8165] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:25:16.277925 2026] [proxy_fcgi:error] [pid 3778:tid 3786] [client 20.220.197.80:8069] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:25:25.265801 2026] [proxy_fcgi:error] [pid 22177:tid 22186] [client 20.220.197.80:8071] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:26:45.926922 2026] [:error] [pid 3810:tid 3816] [client 20.220.197.80:8082] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ftde.php"] [unique_id "ad5Opcqc5XaYZhFXVGfD0QAAAYM"]
[Tue Apr 14 22:26:47.402698 2026] [:error] [pid 3810:tid 3818] [client 20.220.197.80:8184] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ftde.php"] [unique_id "ad5Op8qc5XaYZhFXVGfD2gAAAYU"]
[Tue Apr 14 22:27:15.044425 2026] [:error] [pid 3810:tid 3821] [client 20.220.197.80:8177] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shadow-bot.php"] [unique_id "ad5Ow8qc5XaYZhFXVGfEMAAAAYg"]
[Tue Apr 14 22:27:16.417851 2026] [:error] [pid 60074:tid 60088] [client 20.220.197.80:8090] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shadow-bot.php"] [unique_id "ad5OxOtqnEmNU9vpHCm-UAAAAMw"]
[Tue Apr 14 22:27:18.572761 2026] [:error] [pid 59986:tid 60022] [client 20.220.197.80:8081] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shadow-bot.php"] [unique_id "ad5Oxp6axKeW6bX4H7ekCQAAAEI"]
[Tue Apr 14 22:27:19.685067 2026] [:error] [pid 3778:tid 3800] [client 20.220.197.80:8175] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shadow-bot.php"] [unique_id "ad5Oxxx5DfpNmYF_PaH-UQAAAVQ"]
[Tue Apr 14 22:27:22.151908 2026] [:error] [pid 3810:tid 3813] [client 20.220.197.80:8110] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ianmg.php"] [unique_id "ad5Oysqc5XaYZhFXVGfESwAAAYA"]
[Tue Apr 14 22:27:26.480072 2026] [:error] [pid 3778:tid 3788] [client 20.220.197.80:8191] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ianmg.php"] [unique_id "ad5Ozhx5DfpNmYF_PaH-XgAAAUg"]
[Tue Apr 14 22:27:30.550505 2026] [:error] [pid 3810:tid 3824] [client 20.220.197.80:8067] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ianmg.php"] [unique_id "ad5O0sqc5XaYZhFXVGfEVgAAAYs"]
[Tue Apr 14 22:27:33.769291 2026] [proxy_fcgi:error] [pid 59987:tid 60067] [client 20.220.197.80:8181] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:27:44.254478 2026] [proxy_fcgi:error] [pid 60074:tid 60085] [client 20.220.197.80:8072] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:27:47.519195 2026] [proxy_fcgi:error] [pid 3778:tid 3783] [client 20.220.197.80:8145] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:28:11.981849 2026] [:error] [pid 22177:tid 22187] [client 20.220.197.80:8073] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/snus.php"] [unique_id "ad5O-4TVeJSXHDIlEDuW-wAAAQg"]
[Tue Apr 14 22:28:28.004851 2026] [:error] [pid 3778:tid 3800] [client 20.220.197.80:8183] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shlo.php"] [unique_id "ad5PDBx5DfpNmYF_PaH-pgAAAVQ"]
[Tue Apr 14 22:28:45.063071 2026] [:error] [pid 59986:tid 60024] [client 20.220.197.80:8155] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mas80.php"] [unique_id "ad5PHZ6axKeW6bX4H7ek5gAAAEQ"]
[Tue Apr 14 22:28:46.640229 2026] [:error] [pid 59987:tid 60051] [client 20.220.197.80:8070] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mas80.php"] [unique_id "ad5PHlWpk-Tfi6_vLKpI3wAAAIQ"]
[Tue Apr 14 22:28:48.511522 2026] [:error] [pid 60074:tid 60091] [client 20.220.197.80:8089] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mas80.php"] [unique_id "ad5PIOtqnEmNU9vpHCm_OAAAAM8"]
[Tue Apr 14 22:29:06.345699 2026] [proxy_fcgi:error] [pid 59985:tid 59996] [client 20.220.197.80:8092] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:29:14.597873 2026] [:error] [pid 59987:tid 60063] [client 20.220.197.80:8150] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cilus.php"] [unique_id "ad5POlWpk-Tfi6_vLKpI_gAAAJA"]
[Tue Apr 14 22:29:15.645585 2026] [:error] [pid 60074:tid 60087] [client 20.220.197.80:8144] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cilus.php"] [unique_id "ad5PO-tqnEmNU9vpHCm_jwAAAMs"]
[Tue Apr 14 22:29:18.213658 2026] [:error] [pid 59985:tid 60009] [client 20.220.197.80:8138] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cilus.php"] [unique_id "ad5PPugHaxkvLE6V1klxxgAAABA"]
[Tue Apr 14 22:29:21.365337 2026] [:error] [pid 3778:tid 3798] [client 20.220.197.80:8128] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cilus.php"] [unique_id "ad5PQRx5DfpNmYF_PaH_GwAAAVI"]
[Tue Apr 14 22:29:49.658895 2026] [:error] [pid 59987:tid 60063] [client 20.220.197.80:8178] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fcnlp.php"] [unique_id "ad5PXVWpk-Tfi6_vLKpJHQAAAJA"]
[Tue Apr 14 22:30:26.205355 2026] [:error] [pid 3810:tid 3831] [client 20.220.197.80:8075] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-su.php"] [unique_id "ad5Pgsqc5XaYZhFXVGfFcgAAAZI"]
[Tue Apr 14 22:30:29.091436 2026] [:error] [pid 22177:tid 22188] [client 20.220.197.80:8105] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-su.php"] [unique_id "ad5PhYTVeJSXHDIlEDuXXgAAAQk"]
[Tue Apr 14 22:30:57.946250 2026] [:error] [pid 60074:tid 60076] [client 20.220.197.80:8190] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ZSLeDE.php"] [unique_id "ad5PoetqnEmNU9vpHCnAHQAAAMA"]
[Tue Apr 14 22:31:26.333109 2026] [proxy_fcgi:error] [pid 60074:tid 60079] [client 20.220.197.80:8185] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:31:35.267822 2026] [proxy_fcgi:error] [pid 59985:tid 59993] [client 20.220.197.80:8166] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:31:39.432869 2026] [:error] [pid 59987:tid 60065] [client 20.220.197.80:8173] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin-filters.php"] [unique_id "ad5Py1Wpk-Tfi6_vLKpJzwAAAJI"]
[Tue Apr 14 22:32:11.024744 2026] [:error] [pid 59986:tid 60035] [client 20.220.197.80:8169] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gm.php"] [unique_id "ad5P656axKeW6bX4H7emqQAAAE8"]
[Tue Apr 14 22:32:19.120093 2026] [:error] [pid 3810:tid 3830] [client 20.220.197.80:8182] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gm.php"] [unique_id "ad5P88qc5XaYZhFXVGfGRwAAAZE"]
[Tue Apr 14 22:32:22.134668 2026] [:error] [pid 22177:tid 22186] [client 20.220.197.80:8176] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/gm.php"] [unique_id "ad5P9oTVeJSXHDIlEDuX7gAAAQc"]
[Tue Apr 14 22:32:26.473092 2026] [:error] [pid 59985:tid 60014] [client 20.220.197.80:8145] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/kiwkiw.php"] [unique_id "ad5P-ugHaxkvLE6V1klyTQAAABU"]
[Tue Apr 14 22:32:36.668425 2026] [proxy_fcgi:error] [pid 59986:tid 60039] [client 20.220.197.80:8072] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:33:11.407195 2026] [:error] [pid 60074:tid 60088] [client 20.220.197.80:8065] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ahutr.php"] [unique_id "ad5QJ-tqnEmNU9vpHCnBWQAAAMw"]
[Tue Apr 14 22:33:34.214135 2026] [:error] [pid 59985:tid 60000] [client 20.220.197.80:8188] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/lupo.php"] [unique_id "ad5QPugHaxkvLE6V1klycQAAAAc"]
[Tue Apr 14 22:33:50.582278 2026] [proxy_fcgi:error] [pid 59986:tid 60021] [client 20.220.197.80:8144] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:33:59.690721 2026] [proxy_fcgi:error] [pid 3810:tid 3825] [client 20.220.197.80:8150] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:34:32.549902 2026] [:error] [pid 60074:tid 60078] [client 20.220.197.80:8161] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a7.php"] [unique_id "ad5QeOtqnEmNU9vpHCnBjgAAAMI"]
[Tue Apr 14 22:34:49.405941 2026] [:error] [pid 59986:tid 60034] [client 20.220.197.80:8073] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/rujgeote.php"] [unique_id "ad5QiZ6axKeW6bX4H7eoIgAAAE4"]
[Tue Apr 14 22:34:55.066102 2026] [:error] [pid 60074:tid 60084] [client 20.220.197.80:8085] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/rujgeote.php"] [unique_id "ad5Qj-tqnEmNU9vpHCnBoQAAAMg"]
[Tue Apr 14 22:35:03.447997 2026] [proxy_fcgi:error] [pid 59986:tid 60023] [client 20.220.197.80:8179] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:35:09.792597 2026] [proxy_fcgi:error] [pid 3778:tid 3800] [client 20.220.197.80:8071] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:35:44.314529 2026] [:error] [pid 22177:tid 22188] [client 20.220.197.80:8136] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/only.php"] [unique_id "ad5QwITVeJSXHDIlEDuY0wAAAQk"]
[Tue Apr 14 22:35:50.826092 2026] [:error] [pid 60074:tid 60078] [client 20.220.197.80:8064] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/only.php"] [unique_id "ad5QxutqnEmNU9vpHCnCAgAAAMI"]
[Tue Apr 14 22:35:52.479580 2026] [:error] [pid 3810:tid 3823] [client 20.220.197.80:8175] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/only.php"] [unique_id "ad5QyMqc5XaYZhFXVGfHfgAAAYo"]
[Tue Apr 14 22:36:11.574340 2026] [:error] [pid 3810:tid 3825] [client 20.220.197.80:8101] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/un.php"] [unique_id "ad5Q28qc5XaYZhFXVGfHpAAAAYw"]
[Tue Apr 14 22:37:31.298685 2026] [:error] [pid 59986:tid 60023] [client 20.220.197.80:8134] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-bugs.php"] [unique_id "ad5RK56axKeW6bX4H7epmAAAAEM"]
[Tue Apr 14 22:39:40.220661 2026] [:error] [pid 22177:tid 22186] [client 20.220.197.80:8075] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ww.php"] [unique_id "ad5RrITVeJSXHDIlEDuaCwAAAQc"]
[Tue Apr 14 22:39:47.017050 2026] [:error] [pid 60074:tid 60096] [client 20.220.197.80:8077] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ww.php"] [unique_id "ad5Rs-tqnEmNU9vpHCnDbAAAANQ"]
[Tue Apr 14 22:39:49.606731 2026] [:error] [pid 3810:tid 3814] [client 20.220.197.80:8138] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ww.php"] [unique_id "ad5Rtcqc5XaYZhFXVGfJlQAAAYE"]
[Tue Apr 14 22:39:59.035426 2026] [:error] [pid 59986:tid 60041] [client 20.220.197.80:8076] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-tymanage.php"] [unique_id "ad5Rv56axKeW6bX4H7erMwAAAFU"]
[Tue Apr 14 22:40:05.947296 2026] [proxy_fcgi:error] [pid 59986:tid 60040] [client 20.220.197.80:8178] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:40:20.956110 2026] [proxy_fcgi:error] [pid 3810:tid 3825] [client 20.220.197.80:8188] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:40:24.525441 2026] [:error] [pid 59986:tid 60041] [client 20.220.197.80:8152] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/rithin.php"] [unique_id "ad5R2J6axKeW6bX4H7er0QAAAFU"]
[Tue Apr 14 22:40:27.463743 2026] [:error] [pid 59986:tid 60032] [client 20.220.197.80:8169] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/rithin.php"] [unique_id "ad5R256axKeW6bX4H7er6AAAAEw"]
[Tue Apr 14 22:40:36.482207 2026] [:error] [pid 59987:tid 60060] [client 20.220.197.80:8183] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/rithin.php"] [unique_id "ad5R5FWpk-Tfi6_vLKpLiAAAAI0"]
[Tue Apr 14 22:41:39.412320 2026] [:error] [pid 3810:tid 3815] [client 20.220.197.80:8081] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-block.php"] [unique_id "ad5SI8qc5XaYZhFXVGfKsAAAAYI"]
[Tue Apr 14 22:42:46.438363 2026] [proxy_fcgi:error] [pid 59985:tid 60009] [client 20.220.197.80:8180] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:42:56.069410 2026] [proxy_fcgi:error] [pid 59985:tid 60003] [client 20.220.197.80:8067] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:43:17.681964 2026] [proxy_fcgi:error] [pid 59986:tid 60033] [client 20.220.197.80:8070] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:44:36.125407 2026] [proxy_fcgi:error] [pid 60074:tid 60100] [client 20.220.197.80:8142] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:44:39.389098 2026] [proxy_fcgi:error] [pid 22177:tid 22193] [client 20.220.197.80:8146] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:44:49.115284 2026] [proxy_fcgi:error] [pid 3778:tid 3782] [client 20.220.197.80:8188] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:44:51.891605 2026] [proxy_fcgi:error] [pid 59985:tid 59996] [client 20.220.197.80:8186] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:44:53.046881 2026] [proxy_fcgi:error] [pid 3778:tid 3794] [client 20.220.197.80:8083] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:44:54.309813 2026] [proxy_fcgi:error] [pid 59986:tid 60030] [client 20.220.197.80:8157] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:44:54.837063 2026] [proxy_fcgi:error] [pid 59986:tid 60042] [client 20.220.197.80:8157] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:44:59.483885 2026] [proxy_fcgi:error] [pid 59986:tid 60032] [client 20.220.197.80:8137] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:45:25.918756 2026] [proxy_fcgi:error] [pid 3778:tid 3802] [client 20.220.197.80:8174] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:45:31.370315 2026] [proxy_fcgi:error] [pid 59985:tid 60008] [client 20.220.197.80:8162] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:45:42.688153 2026] [proxy_fcgi:error] [pid 60074:tid 60094] [client 20.220.197.80:8177] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:46:09.723458 2026] [proxy_fcgi:error] [pid 59987:tid 60064] [client 20.220.197.80:8131] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:47:17.673581 2026] [proxy_fcgi:error] [pid 59985:tid 60001] [client 20.220.197.80:8128] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:47:27.382078 2026] [proxy_fcgi:error] [pid 3810:tid 3836] [client 20.220.197.80:8082] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:48:15.518959 2026] [proxy_fcgi:error] [pid 3778:tid 3798] [client 20.220.197.80:8147] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:48:20.984716 2026] [proxy_fcgi:error] [pid 59986:tid 60028] [client 20.220.197.80:8167] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:48:25.677189 2026] [proxy_fcgi:error] [pid 59987:tid 60047] [client 20.220.197.80:8170] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:48:33.485723 2026] [proxy_fcgi:error] [pid 22177:tid 22200] [client 20.220.197.80:8171] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:48:36.155113 2026] [proxy_fcgi:error] [pid 60074:tid 60100] [client 20.220.197.80:8163] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:48:44.194528 2026] [proxy_fcgi:error] [pid 3778:tid 3787] [client 20.220.197.80:8132] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:48:51.450706 2026] [proxy_fcgi:error] [pid 60074:tid 60090] [client 20.220.197.80:8076] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:49:19.908505 2026] [proxy_fcgi:error] [pid 3810:tid 3814] [client 20.220.197.80:8151] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:49:33.022539 2026] [proxy_fcgi:error] [pid 59987:tid 60063] [client 20.220.197.80:8146] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:49:36.011703 2026] [proxy_fcgi:error] [pid 3810:tid 3816] [client 20.220.197.80:8080] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:49:45.111802 2026] [proxy_fcgi:error] [pid 3810:tid 3818] [client 20.220.197.80:8165] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:49:46.419695 2026] [proxy_fcgi:error] [pid 59986:tid 60042] [client 20.220.197.80:8095] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:49:58.284545 2026] [proxy_fcgi:error] [pid 59987:tid 60051] [client 20.220.197.80:8136] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:52:07.744413 2026] [proxy_fcgi:error] [pid 59987:tid 60055] [client 20.220.197.80:8070] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:52:10.027329 2026] [proxy_fcgi:error] [pid 3778:tid 3792] [client 20.220.197.80:8074] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:52:13.062126 2026] [proxy_fcgi:error] [pid 59986:tid 60023] [client 20.220.197.80:8130] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:52:18.794796 2026] [proxy_fcgi:error] [pid 60074:tid 60094] [client 20.220.197.80:8149] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:53:07.992091 2026] [proxy_fcgi:error] [pid 59986:tid 60020] [client 20.220.197.80:8186] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:53:29.240517 2026] [proxy_fcgi:error] [pid 3810:tid 3824] [client 20.220.197.80:8066] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:53:34.403580 2026] [proxy_fcgi:error] [pid 3778:tid 3788] [client 20.220.197.80:8157] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 22:54:31.660609 2026] [proxy_fcgi:error] [pid 59986:tid 60028] [client 20.220.197.80:8084] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 14 23:33:02.093498 2026] [:error] [pid 59987:tid 60064] [client 194.5.82.71:58689] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "ad5eLlWpk-Tfi6_vLKpXkAAAAJE"]
[Tue Apr 14 23:33:02.274523 2026] [:error] [pid 59985:tid 60011] [client 194.5.82.55:25373] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "ad5eLugHaxkvLE6V1kl8ggAAABI"]
[Tue Apr 14 23:33:02.456178 2026] [:error] [pid 59987:tid 60071] [client 194.5.82.61:47443] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "ad5eLlWpk-Tfi6_vLKpXkgAAAJg"]
[Tue Apr 14 23:33:02.641452 2026] [:error] [pid 3778:tid 3785] [client 194.5.82.95:49645] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403.php"] [unique_id "ad5eLhx5DfpNmYF_PaEQyQAAAUU"]
[Tue Apr 14 23:33:02.829855 2026] [:error] [pid 59987:tid 60067] [client 194.5.82.60:46045] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/"] [unique_id "ad5eLlWpk-Tfi6_vLKpXkwAAAJQ"]
[Tue Apr 14 23:33:03.012679 2026] [:error] [pid 60074:tid 60093] [client 194.5.82.94:28689] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/users.php"] [unique_id "ad5eL-tqnEmNU9vpHCnUSgAAANE"]
[Tue Apr 14 23:33:03.194651 2026] [:error] [pid 3810:tid 3827] [client 194.5.82.88:61199] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/.well-known/core.php"] [unique_id "ad5eL8qc5XaYZhFXVGfgOwAAAY4"]
[Tue Apr 14 23:33:03.382160 2026] [:error] [pid 3810:tid 3820] [client 194.5.82.62:54565] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "ad5eL8qc5XaYZhFXVGfgPAAAAYc"]
[Tue Apr 14 23:33:04.983026 2026] [:error] [pid 3778:tid 3804] [client 194.5.82.76:43687] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/goods.php"] [unique_id "ad5eMBx5DfpNmYF_PaEQzQAAAVg"]
[Tue Apr 14 23:33:05.164088 2026] [:error] [pid 3810:tid 3837] [client 194.5.82.94:30443] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "ad5eMcqc5XaYZhFXVGfgPwAAAZg"]
[Tue Apr 14 23:33:05.345563 2026] [:error] [pid 60074:tid 60095] [client 194.5.82.101:39279] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/adminfuns.php"] [unique_id "ad5eMetqnEmNU9vpHCnUTwAAANM"]
[Tue Apr 14 23:33:05.527496 2026] [:error] [pid 59985:tid 60005] [client 194.5.82.86:49329] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/admin/"] [unique_id "ad5eMegHaxkvLE6V1kl8hQAAAAw"]
[Tue Apr 14 23:33:05.707819 2026] [:error] [pid 60074:tid 60081] [client 194.5.82.68:51387] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/"] [unique_id "ad5eMetqnEmNU9vpHCnUUwAAAMU"]
[Tue Apr 14 23:33:05.888644 2026] [:error] [pid 3778:tid 3782] [client 194.5.82.87:24543] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/shell.php"] [unique_id "ad5eMRx5DfpNmYF_PaEQzwAAAUI"]
[Tue Apr 14 23:33:06.069658 2026] [:error] [pid 22177:tid 22183] [client 194.5.82.96:44195] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "ad5eMoTVeJSXHDIlEDulKwAAAQQ"]
[Tue Apr 14 23:33:06.251306 2026] [:error] [pid 59985:tid 60000] [client 194.5.82.82:51395] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/shell/"] [unique_id "ad5eMugHaxkvLE6V1kl8iAAAAAc"]
[Tue Apr 14 23:33:06.432566 2026] [:error] [pid 59985:tid 59993] [client 194.5.82.73:33241] [client 194.5.82.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/"] [unique_id "ad5eMugHaxkvLE6V1kl8igAAAAA"]
[Tue Apr 14 23:33:06.612460 2026] [:error] [pid 22177:tid 22201] [client 194.5.82.83:64955] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/1.php"] [unique_id "ad5eMoTVeJSXHDIlEDulLQAAARY"]
[Tue Apr 14 23:33:06.795870 2026] [:error] [pid 22177:tid 22200] [client 194.5.82.94:26255] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/"] [unique_id "ad5eMoTVeJSXHDIlEDulLgAAARU"]
[Tue Apr 14 23:33:06.978202 2026] [:error] [pid 3810:tid 3821] [client 194.5.82.101:35803] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "ad5eMsqc5XaYZhFXVGfgQwAAAYg"]
[Tue Apr 14 23:33:07.160404 2026] [:error] [pid 59985:tid 60009] [client 194.5.82.100:26057] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "ad5eM-gHaxkvLE6V1kl8jAAAABA"]
[Tue Apr 14 23:33:07.341500 2026] [:error] [pid 60074:tid 60078] [client 194.5.82.97:47995] [client 194.5.82.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "ad5eM-tqnEmNU9vpHCnUVgAAAMI"]
[Tue Apr 14 23:33:07.531655 2026] [:error] [pid 3778:tid 3796] [client 194.5.82.102:22377] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/speculative8.php"] [unique_id "ad5eMxx5DfpNmYF_PaEQ0QAAAVA"]
[Tue Apr 14 23:33:07.717086 2026] [:error] [pid 3810:tid 3814] [client 194.5.82.62:26153] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/item.php"] [unique_id "ad5eM8qc5XaYZhFXVGfgRgAAAYE"]
[Tue Apr 14 23:33:07.897892 2026] [:error] [pid 59985:tid 60001] [client 194.5.82.64:37821] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ad5eM-gHaxkvLE6V1kl8jwAAAAg"]
[Tue Apr 14 23:33:08.079011 2026] [:error] [pid 22177:tid 22191] [client 194.5.82.87:41625] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/"] [unique_id "ad5eNITVeJSXHDIlEDulMwAAAQw"]
[Tue Apr 14 23:33:08.260444 2026] [:error] [pid 3778:tid 3798] [client 194.5.82.85:34307] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/class.api.php"] [unique_id "ad5eNBx5DfpNmYF_PaEQ1AAAAVI"]
[Tue Apr 14 23:33:08.443467 2026] [:error] [pid 3778:tid 3793] [client 194.5.82.95:27393] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/php-compat/"] [unique_id "ad5eNBx5DfpNmYF_PaEQ1gAAAU0"]
[Tue Apr 14 23:33:08.623459 2026] [:error] [pid 59985:tid 60015] [client 194.5.82.91:21777] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "ad5eNOgHaxkvLE6V1kl8kQAAABY"]
[Tue Apr 14 23:33:08.804148 2026] [:error] [pid 59985:tid 60005] [client 194.5.82.92:49019] [client 194.5.82.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-config-sample.php"] [unique_id "ad5eNOgHaxkvLE6V1kl8kgAAAAw"]
[Tue Apr 14 23:33:08.984140 2026] [:error] [pid 60074:tid 60076] [client 194.5.82.76:31303] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/"] [unique_id "ad5eNOtqnEmNU9vpHCnUXgAAAMA"]
[Tue Apr 14 23:33:09.165316 2026] [:error] [pid 59985:tid 60000] [client 194.5.82.80:32365] [client 194.5.82.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/news-portal/sitebar.php"] [unique_id "ad5eNegHaxkvLE6V1kl8lQAAAAc"]
[Tue Apr 14 23:33:09.345992 2026] [:error] [pid 59985:tid 59993] [client 194.5.82.86:27985] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/admin.php"] [unique_id "ad5eNegHaxkvLE6V1kl8lgAAAAA"]
[Tue Apr 14 23:33:09.536802 2026] [:error] [pid 59985:tid 60007] [client 194.5.82.101:54737] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "ad5eNegHaxkvLE6V1kl8mAAAAA4"]
[Tue Apr 14 23:33:09.718139 2026] [:error] [pid 59987:tid 60052] [client 194.5.82.92:38035] [client 194.5.82.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/fukasawa/inc/classes/403.php"] [unique_id "ad5eNVWpk-Tfi6_vLKpXlwAAAIU"]
[Tue Apr 14 23:33:09.900517 2026] [:error] [pid 3778:tid 3802] [client 194.5.82.69:65337] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/"] [unique_id "ad5eNRx5DfpNmYF_PaEQ2wAAAVY"]
[Tue Apr 14 23:33:10.106869 2026] [:error] [pid 59987:tid 60050] [client 194.5.82.81:23901] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/PHPMailer/s"] [unique_id "ad5eNlWpk-Tfi6_vLKpXmwAAAIM"]
[Tue Apr 14 23:33:10.289445 2026] [:error] [pid 3778:tid 3783] [client 194.5.82.80:45399] [client 194.5.82.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/file.php"] [unique_id "ad5eNhx5DfpNmYF_PaEQ3AAAAUM"]
[Tue Apr 14 23:33:10.474890 2026] [:error] [pid 3810:tid 3819] [client 194.5.82.91:34493] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "ad5eNsqc5XaYZhFXVGfgSAAAAYY"]
[Tue Apr 14 23:33:10.655706 2026] [:error] [pid 59985:tid 60001] [client 194.5.82.70:56397] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/comments/feed/"] [unique_id "ad5eNugHaxkvLE6V1kl8mgAAAAg"]
[Tue Apr 14 23:33:10.840633 2026] [:error] [pid 59987:tid 60071] [client 194.5.82.66:27829] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/shell.php"] [unique_id "ad5eNlWpk-Tfi6_vLKpXnQAAAJg"]
[Tue Apr 14 23:33:11.037136 2026] [:error] [pid 59985:tid 60017] [client 194.5.82.91:24249] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/updates.php"] [unique_id "ad5eN-gHaxkvLE6V1kl8mwAAABg"]
[Tue Apr 14 23:33:12.621307 2026] [:error] [pid 22177:tid 22195] [client 194.5.82.57:61935] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/updraft/plugins-old/updraftplus/vendor/team-updraft/"] [unique_id "ad5eOITVeJSXHDIlEDulPwAAARA"]
[Tue Apr 14 23:33:12.809049 2026] [:error] [pid 59985:tid 60002] [client 194.5.82.98:49007] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/system_core.php"] [unique_id "ad5eOOgHaxkvLE6V1kl8nAAAAAk"]
[Tue Apr 14 23:33:12.990428 2026] [:error] [pid 59986:tid 60028] [client 194.5.82.74:61729] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "ad5eOJ6axKeW6bX4H7fHuwAAAEg"]
[Tue Apr 14 23:33:13.170102 2026] [:error] [pid 3810:tid 3827] [client 194.5.82.62:24897] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "ad5eOcqc5XaYZhFXVGfgZgAAAY4"]
[Tue Apr 14 23:33:13.351445 2026] [:error] [pid 3778:tid 3803] [client 194.5.82.81:34525] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "ad5eORx5DfpNmYF_PaEQ4QAAAVc"]
[Tue Apr 14 23:33:13.534035 2026] [:error] [pid 3810:tid 3814] [client 194.5.82.98:36047] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "ad5eOcqc5XaYZhFXVGfgaAAAAYE"]
[Tue Apr 14 23:33:13.716983 2026] [:error] [pid 22177:tid 22196] [client 194.5.82.54:36497] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ad5eOYTVeJSXHDIlEDulQwAAARE"]
[Tue Apr 14 23:33:13.898864 2026] [:error] [pid 3778:tid 3787] [client 194.5.82.73:35299] [client 194.5.82.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/index/function.php"] [unique_id "ad5eORx5DfpNmYF_PaEQ4wAAAUc"]
[Tue Apr 14 23:33:14.078567 2026] [:error] [pid 60074:tid 60099] [client 194.5.82.104:50989] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/edit.php"] [unique_id "ad5eOutqnEmNU9vpHCnUawAAANc"]
[Tue Apr 14 23:33:14.270935 2026] [:error] [pid 60074:tid 60090] [client 194.5.82.61:39063] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-bindings/"] [unique_id "ad5eOutqnEmNU9vpHCnUbQAAAM4"]
[Tue Apr 14 23:33:14.450424 2026] [:error] [pid 60074:tid 60082] [client 194.5.82.71:40037] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/network/cache/"] [unique_id "ad5eOutqnEmNU9vpHCnUcAAAAMY"]
[Tue Apr 14 23:33:14.630944 2026] [:error] [pid 3810:tid 3825] [client 194.5.82.87:33185] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "ad5eOsqc5XaYZhFXVGfgawAAAYw"]
[Tue Apr 14 23:33:16.210027 2026] [:error] [pid 3810:tid 3832] [client 194.5.82.100:58143] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/upgrade/"] [unique_id "ad5ePMqc5XaYZhFXVGfgewAAAZM"]
[Tue Apr 14 23:33:16.408102 2026] [:error] [pid 3810:tid 3835] [client 194.5.82.54:59585] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/plugins/"] [unique_id "ad5ePMqc5XaYZhFXVGfgfgAAAZY"]
[Tue Apr 14 23:33:16.593768 2026] [:error] [pid 3810:tid 3816] [client 194.5.82.60:52881] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/"] [unique_id "ad5ePMqc5XaYZhFXVGfggAAAAYM"]
[Tue Apr 14 23:33:16.773760 2026] [:error] [pid 59987:tid 60053] [client 194.5.82.85:22453] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/images/"] [unique_id "ad5ePFWpk-Tfi6_vLKpXqwAAAIY"]
[Tue Apr 14 23:33:16.954130 2026] [:error] [pid 22177:tid 22182] [client 194.5.82.168:22299] [client 194.5.82.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/mah.php"] [unique_id "ad5ePITVeJSXHDIlEDulSQAAAQM"]
[Tue Apr 14 23:33:17.134792 2026] [:error] [pid 59987:tid 60063] [client 194.5.82.98:36637] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/bless.php"] [unique_id "ad5ePVWpk-Tfi6_vLKpXrQAAAJA"]
[Tue Apr 14 23:33:17.315343 2026] [:error] [pid 22177:tid 22203] [client 194.5.82.76:20043] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-wlx.php"] [unique_id "ad5ePYTVeJSXHDIlEDulSgAAARg"]
[Tue Apr 14 23:33:17.495571 2026] [:error] [pid 59985:tid 60017] [client 194.5.82.96:62399] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/radio.php"] [unique_id "ad5ePegHaxkvLE6V1kl8qQAAABg"]
[Tue Apr 14 23:33:17.674937 2026] [:error] [pid 59987:tid 60055] [client 194.5.82.84:47855] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/light/"] [unique_id "ad5ePVWpk-Tfi6_vLKpXsAAAAIg"]
[Tue Apr 14 23:33:17.854808 2026] [:error] [pid 22177:tid 22188] [client 194.5.82.84:49635] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/network/"] [unique_id "ad5ePYTVeJSXHDIlEDulTwAAAQk"]
[Tue Apr 14 23:33:18.032881 2026] [:error] [pid 59987:tid 60057] [client 194.5.82.87:34211] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/test.php"] [unique_id "ad5ePlWpk-Tfi6_vLKpXswAAAIo"]
[Tue Apr 14 23:33:18.211208 2026] [:error] [pid 22177:tid 22195] [client 194.5.82.88:47951] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/"] [unique_id "ad5ePoTVeJSXHDIlEDulUgAAARA"]
[Tue Apr 14 23:33:18.390040 2026] [:error] [pid 59987:tid 60047] [client 194.5.82.90:63687] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/"] [unique_id "ad5ePlWpk-Tfi6_vLKpXtgAAAIA"]
[Tue Apr 14 23:33:18.571318 2026] [:error] [pid 59985:tid 60000] [client 194.5.82.88:44045] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/private/"] [unique_id "ad5ePugHaxkvLE6V1kl8rgAAAAc"]
[Tue Apr 14 23:33:18.753765 2026] [:error] [pid 59987:tid 60053] [client 194.5.82.69:42715] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/system.php"] [unique_id "ad5ePlWpk-Tfi6_vLKpXuAAAAIY"]
[Tue Apr 14 23:33:18.933745 2026] [:error] [pid 59985:tid 59993] [client 194.5.82.89:30111] [client 194.5.82.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ad5ePugHaxkvLE6V1kl8rwAAAAA"]
[Tue Apr 14 23:33:19.115902 2026] [:error] [pid 59985:tid 59996] [client 194.5.82.70:61945] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/"] [unique_id "ad5eP-gHaxkvLE6V1kl8sAAAAAM"]
[Tue Apr 14 23:33:19.296577 2026] [:error] [pid 59985:tid 60007] [client 194.5.82.77:53437] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/404.php"] [unique_id "ad5eP-gHaxkvLE6V1kl8sQAAAA4"]
[Tue Apr 14 23:33:19.476063 2026] [:error] [pid 59985:tid 60013] [client 194.5.82.83:56929] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/about.php"] [unique_id "ad5eP-gHaxkvLE6V1kl8sgAAABQ"]
[Tue Apr 14 23:33:19.655878 2026] [:error] [pid 59987:tid 60064] [client 194.5.82.96:48927] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/includes/"] [unique_id "ad5eP1Wpk-Tfi6_vLKpXwAAAAJE"]
[Tue Apr 14 23:33:19.836680 2026] [:error] [pid 59986:tid 60021] [client 194.5.82.85:55041] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/simple.php"] [unique_id "ad5eP56axKeW6bX4H7fHwgAAAEE"]
[Tue Apr 14 23:33:20.016709 2026] [:error] [pid 22177:tid 22202] [client 194.5.82.87:22359] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wa/"] [unique_id "ad5eQITVeJSXHDIlEDulWgAAARc"]
[Tue Apr 14 23:33:20.196901 2026] [:error] [pid 22177:tid 22189] [client 194.5.82.99:25957] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "ad5eQITVeJSXHDIlEDulXAAAAQo"]
[Tue Apr 14 23:33:20.379864 2026] [:error] [pid 59985:tid 60017] [client 194.5.82.88:46825] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "ad5eQOgHaxkvLE6V1kl8tAAAABg"]
[Tue Apr 14 23:33:20.560394 2026] [:error] [pid 59987:tid 60069] [client 194.5.82.77:39581] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-good.php"] [unique_id "ad5eQFWpk-Tfi6_vLKpXxwAAAJY"]
[Tue Apr 14 23:33:20.742215 2026] [:error] [pid 59985:tid 59997] [client 194.5.82.66:53447] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/"] [unique_id "ad5eQOgHaxkvLE6V1kl8uAAAAAQ"]
[Tue Apr 14 23:33:20.922078 2026] [:error] [pid 3810:tid 3814] [client 194.5.82.84:52911] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-activate.php"] [unique_id "ad5eQMqc5XaYZhFXVGfgjAAAAYE"]
[Tue Apr 14 23:33:21.101996 2026] [:error] [pid 22177:tid 22192] [client 194.5.82.92:56989] [client 194.5.82.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/code/"] [unique_id "ad5eQYTVeJSXHDIlEDulYgAAAQ0"]
[Tue Apr 14 23:33:21.281792 2026] [:error] [pid 59987:tid 60068] [client 194.5.82.66:32495] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "ad5eQVWpk-Tfi6_vLKpXyQAAAJU"]
[Tue Apr 14 23:33:21.593971 2026] [:error] [pid 59985:tid 60007] [client 194.5.82.95:36907] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/"] [unique_id "ad5eQegHaxkvLE6V1kl8vQAAAA4"]
[Tue Apr 14 23:33:21.774828 2026] [:error] [pid 22177:tid 22199] [client 194.5.82.77:40645] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/"] [unique_id "ad5eQYTVeJSXHDIlEDulZAAAARQ"]
[Tue Apr 14 23:33:21.955196 2026] [:error] [pid 3810:tid 3836] [client 194.5.82.80:53745] [client 194.5.82.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/includes/images/"] [unique_id "ad5eQcqc5XaYZhFXVGfgjwAAAZc"]
[Tue Apr 14 23:33:22.135065 2026] [:error] [pid 59985:tid 60015] [client 194.5.82.71:34541] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/"] [unique_id "ad5eQugHaxkvLE6V1kl8wgAAABY"]
[Tue Apr 14 23:33:22.316439 2026] [:error] [pid 3778:tid 3797] [client 194.5.82.62:63779] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "ad5eQhx5DfpNmYF_PaEQ5gAAAVE"]
[Tue Apr 14 23:33:22.496391 2026] [:error] [pid 59986:tid 60023] [client 194.5.82.87:22779] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad5eQp6axKeW6bX4H7fHwwAAAEM"]
[Tue Apr 14 23:33:22.678515 2026] [:error] [pid 59987:tid 60069] [client 194.5.82.69:30405] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "ad5eQlWpk-Tfi6_vLKpX0wAAAJY"]
[Tue Apr 14 23:33:22.861286 2026] [:error] [pid 22177:tid 22182] [client 194.5.82.95:46031] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/"] [unique_id "ad5eQoTVeJSXHDIlEDulagAAAQM"]
[Tue Apr 14 23:33:23.045944 2026] [:error] [pid 22177:tid 22203] [client 194.5.82.72:49153] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/.well-known/"] [unique_id "ad5eQ4TVeJSXHDIlEDulbAAAARg"]
[Tue Apr 14 23:33:23.226186 2026] [:error] [pid 22177:tid 22187] [client 194.5.82.72:61763] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/2024/"] [unique_id "ad5eQ4TVeJSXHDIlEDulcAAAAQg"]
[Tue Apr 14 23:33:23.405384 2026] [:error] [pid 59985:tid 59997] [client 194.5.82.167:64443] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "ad5eQ-gHaxkvLE6V1kl8xgAAAAQ"]
[Tue Apr 14 23:33:23.722383 2026] [:error] [pid 3778:tid 3780] [client 194.5.82.91:62801] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "ad5eQxx5DfpNmYF_PaEQ6QAAAUA"]
[Tue Apr 14 23:33:23.902490 2026] [:error] [pid 59987:tid 60060] [client 194.5.82.58:29077] [client 194.5.82.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/src/Core/"] [unique_id "ad5eQ1Wpk-Tfi6_vLKpX1wAAAI0"]
[Tue Apr 14 23:33:24.085710 2026] [:error] [pid 3810:tid 3814] [client 194.5.82.56:61525] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/mediaelement/"] [unique_id "ad5eRMqc5XaYZhFXVGfgkgAAAYE"]
[Tue Apr 14 23:33:24.264915 2026] [:error] [pid 22177:tid 22194] [client 194.5.82.71:38843] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "ad5eRITVeJSXHDIlEDuldgAAAQ8"]
[Tue Apr 14 23:33:24.449554 2026] [:error] [pid 22177:tid 22179] [client 194.5.82.89:40581] [client 194.5.82.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/x.php"] [unique_id "ad5eRITVeJSXHDIlEDuleAAAAQA"]
[Tue Apr 14 23:33:24.633186 2026] [:error] [pid 3778:tid 3784] [client 194.5.82.78:33991] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/bolt.php"] [unique_id "ad5eRBx5DfpNmYF_PaEQ7QAAAUQ"]
[Tue Apr 14 23:33:24.814308 2026] [:error] [pid 59987:tid 60053] [client 194.5.82.68:56763] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ad5eRFWpk-Tfi6_vLKpX2QAAAIY"]
[Tue Apr 14 23:33:24.993981 2026] [:error] [pid 3778:tid 3791] [client 194.5.82.103:62193] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/info.php"] [unique_id "ad5eRBx5DfpNmYF_PaEQ8AAAAUs"]
[Tue Apr 14 23:33:25.173217 2026] [:error] [pid 59987:tid 60069] [client 194.5.82.71:58981] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content.php"] [unique_id "ad5eRVWpk-Tfi6_vLKpX3AAAAJY"]
[Tue Apr 14 23:33:25.365907 2026] [:error] [pid 22177:tid 22190] [client 194.5.82.54:52869] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin.php"] [unique_id "ad5eRYTVeJSXHDIlEDulewAAAQs"]
[Tue Apr 14 23:33:25.546693 2026] [:error] [pid 59987:tid 60054] [client 194.5.82.63:31389] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/"] [unique_id "ad5eRVWpk-Tfi6_vLKpX3wAAAIc"]
[Tue Apr 14 23:33:25.729927 2026] [:error] [pid 59985:tid 60001] [client 194.5.82.83:47449] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/script-modules/block-library/file/"] [unique_id "ad5eRegHaxkvLE6V1kl8ygAAAAg"]
[Tue Apr 14 23:33:25.910501 2026] [:error] [pid 59985:tid 60002] [client 194.5.82.60:54311] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "ad5eRegHaxkvLE6V1kl8ywAAAAk"]
[Tue Apr 14 23:33:26.089504 2026] [:error] [pid 60074:tid 60080] [client 194.5.82.85:53353] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/as.php"] [unique_id "ad5eRutqnEmNU9vpHCnUeQAAAMQ"]
[Tue Apr 14 23:33:26.272651 2026] [:error] [pid 60074:tid 60093] [client 194.5.82.65:26209] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/a.php"] [unique_id "ad5eRutqnEmNU9vpHCnUewAAANE"]
[Tue Apr 14 23:33:29.226245 2026] [:error] [pid 60074:tid 60085] [client 194.5.82.168:56605] [client 194.5.82.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/function/function.php"] [unique_id "ad5eSetqnEmNU9vpHCnUggAAAMk"]
[Tue Apr 14 23:33:29.406779 2026] [:error] [pid 3778:tid 3791] [client 194.5.82.68:24399] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "ad5eSRx5DfpNmYF_PaEQ_wAAAUs"]
[Tue Apr 14 23:33:29.587761 2026] [:error] [pid 59985:tid 60011] [client 194.5.82.78:33705] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/upload/zczv.php"] [unique_id "ad5eSegHaxkvLE6V1kl80gAAABI"]
[Tue Apr 14 23:33:29.768278 2026] [:error] [pid 59985:tid 60017] [client 194.5.82.74:47695] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comment-date/"] [unique_id "ad5eSegHaxkvLE6V1kl81AAAABg"]
[Tue Apr 14 23:33:29.950671 2026] [:error] [pid 3778:tid 3801] [client 194.5.82.54:20481] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/user.php"] [unique_id "ad5eSRx5DfpNmYF_PaERBAAAAVU"]
[Tue Apr 14 23:33:30.132470 2026] [:error] [pid 3778:tid 3800] [client 194.5.82.68:59703] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "ad5eShx5DfpNmYF_PaERBQAAAVQ"]
[Tue Apr 14 23:33:30.316531 2026] [:error] [pid 3778:tid 3794] [client 194.5.82.79:57065] [client 194.5.82.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/"] [unique_id "ad5eShx5DfpNmYF_PaERCAAAAU4"]
[Tue Apr 14 23:33:30.499756 2026] [:error] [pid 59987:tid 60049] [client 194.5.82.99:44421] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/"] [unique_id "ad5eSlWpk-Tfi6_vLKpX7wAAAII"]
[Tue Apr 14 23:33:30.787341 2026] [:error] [pid 59987:tid 60067] [client 194.5.82.56:37305] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "ad5eSlWpk-Tfi6_vLKpX8wAAAJQ"]
[Tue Apr 14 23:33:30.967977 2026] [:error] [pid 22177:tid 22196] [client 194.5.82.62:64885] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/edit-post/"] [unique_id "ad5eSoTVeJSXHDIlEDuljgAAARE"]
[Tue Apr 14 23:33:31.151302 2026] [:error] [pid 3810:tid 3831] [client 194.5.82.79:28879] [client 194.5.82.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "ad5eS8qc5XaYZhFXVGfgrwAAAZI"]
[Tue Apr 14 23:33:31.332342 2026] [:error] [pid 3810:tid 3822] [client 194.5.82.85:63153] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ad5eS8qc5XaYZhFXVGfgsQAAAYk"]
[Tue Apr 14 23:33:31.518260 2026] [:error] [pid 3810:tid 3818] [client 194.5.82.89:33667] [client 194.5.82.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ws.php"] [unique_id "ad5eS8qc5XaYZhFXVGfgswAAAYU"]
[Tue Apr 14 23:33:31.702356 2026] [:error] [pid 59985:tid 60005] [client 194.5.82.81:53455] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "ad5eS-gHaxkvLE6V1kl82AAAAAw"]
[Tue Apr 14 23:33:31.882479 2026] [:error] [pid 3810:tid 3814] [client 194.5.82.82:23129] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "ad5eS8qc5XaYZhFXVGfgtwAAAYE"]
[Tue Apr 14 23:33:32.064310 2026] [:error] [pid 59985:tid 59994] [client 194.5.82.96:25863] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/themes.php"] [unique_id "ad5eTOgHaxkvLE6V1kl82QAAAAE"]
[Tue Apr 14 23:33:32.245386 2026] [:error] [pid 22177:tid 22197] [client 194.5.82.90:64789] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/"] [unique_id "ad5eTITVeJSXHDIlEDulkgAAARI"]
[Tue Apr 14 23:33:32.424868 2026] [:error] [pid 3778:tid 3782] [client 194.5.82.167:52781] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ioxi-o.php"] [unique_id "ad5eTBx5DfpNmYF_PaERFgAAAUI"]
[Tue Apr 14 23:33:32.603121 2026] [:error] [pid 59986:tid 60042] [client 194.5.82.70:22409] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ad5eTJ6axKeW6bX4H7fHywAAAFY"]
[Tue Apr 14 23:33:32.782989 2026] [:error] [pid 3810:tid 3831] [client 194.5.82.81:54501] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "ad5eTMqc5XaYZhFXVGfgugAAAZI"]
[Tue Apr 14 23:33:32.963923 2026] [:error] [pid 59985:tid 60006] [client 194.5.82.62:39589] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/"] [unique_id "ad5eTOgHaxkvLE6V1kl83QAAAA0"]
[Tue Apr 14 23:33:33.143110 2026] [:error] [pid 22177:tid 22190] [client 194.5.82.79:44871] [client 194.5.82.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/log.php"] [unique_id "ad5eTYTVeJSXHDIlEDullQAAAQs"]
[Tue Apr 14 23:33:33.328957 2026] [:error] [pid 59987:tid 60049] [client 194.5.82.102:39747] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/image/"] [unique_id "ad5eTVWpk-Tfi6_vLKpX_QAAAII"]
[Tue Apr 14 23:33:33.508316 2026] [:error] [pid 59987:tid 60047] [client 194.5.82.84:58579] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/options.php"] [unique_id "ad5eTVWpk-Tfi6_vLKpYAAAAAIA"]
[Tue Apr 14 23:33:33.688513 2026] [:error] [pid 59987:tid 60063] [client 194.5.82.74:48243] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/header.php"] [unique_id "ad5eTVWpk-Tfi6_vLKpYAQAAAJA"]
[Tue Apr 14 23:33:33.868553 2026] [:error] [pid 22177:tid 22203] [client 194.5.82.100:55255] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/"] [unique_id "ad5eTYTVeJSXHDIlEDulmQAAARg"]
[Tue Apr 14 23:33:34.048044 2026] [:error] [pid 59987:tid 60066] [client 194.5.82.65:34493] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/widgets/"] [unique_id "ad5eTlWpk-Tfi6_vLKpYBAAAAJM"]
[Tue Apr 14 23:33:34.231590 2026] [:error] [pid 22177:tid 22196] [client 194.5.82.66:47577] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/themes/"] [unique_id "ad5eToTVeJSXHDIlEDulmgAAARE"]
[Tue Apr 14 23:33:34.415069 2026] [:error] [pid 59985:tid 59996] [client 194.5.82.93:30431] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/worksec.php"] [unique_id "ad5eTugHaxkvLE6V1kl85gAAAAM"]
[Tue Apr 14 23:33:34.601682 2026] [:error] [pid 3810:tid 3818] [client 194.5.82.76:50515] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/includes/"] [unique_id "ad5eTsqc5XaYZhFXVGfgvQAAAYU"]
[Tue Apr 14 23:33:34.781868 2026] [:error] [pid 3810:tid 3816] [client 194.5.82.99:21699] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/click.php"] [unique_id "ad5eTsqc5XaYZhFXVGfgvwAAAYM"]
[Tue Apr 14 23:33:34.962801 2026] [:error] [pid 3810:tid 3837] [client 194.5.82.73:28069] [client 194.5.82.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/bk/"] [unique_id "ad5eTsqc5XaYZhFXVGfgwQAAAZg"]
[Tue Apr 14 23:33:35.143742 2026] [:error] [pid 59985:tid 60006] [client 194.5.82.83:36473] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "ad5eT-gHaxkvLE6V1kl86gAAAA0"]
[Tue Apr 14 23:33:35.324722 2026] [:error] [pid 59985:tid 59998] [client 194.5.82.89:52983] [client 194.5.82.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/about.php"] [unique_id "ad5eT-gHaxkvLE6V1kl86wAAAAU"]
[Tue Apr 14 23:33:35.508775 2026] [:error] [pid 3778:tid 3782] [client 194.5.82.96:23251] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-file.php"] [unique_id "ad5eTxx5DfpNmYF_PaERIwAAAUI"]
[Tue Apr 14 23:33:35.692721 2026] [:error] [pid 59986:tid 60023] [client 194.5.82.77:38759] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "ad5eT56axKeW6bX4H7fH0AAAAEM"]
[Tue Apr 14 23:33:35.880773 2026] [:error] [pid 60074:tid 60079] [client 194.5.82.77:23255] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyone/template-parts/"] [unique_id "ad5eT-tqnEmNU9vpHCnUhgAAAMM"]
[Tue Apr 14 23:33:36.059638 2026] [:error] [pid 60074:tid 60092] [client 194.5.82.71:54903] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/buy.php"] [unique_id "ad5eUOtqnEmNU9vpHCnUiAAAANA"]
[Tue Apr 14 23:33:36.238496 2026] [:error] [pid 3810:tid 3832] [client 194.5.82.64:40879] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comments-pagination-numbers/"] [unique_id "ad5eUMqc5XaYZhFXVGfg0QAAAZM"]
[Tue Apr 14 23:33:36.418988 2026] [:error] [pid 60074:tid 60076] [client 194.5.82.83:20019] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ad5eUOtqnEmNU9vpHCnUigAAAMA"]
[Tue Apr 14 23:33:36.599466 2026] [:error] [pid 22177:tid 22186] [client 194.5.82.61:42591] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "ad5eUITVeJSXHDIlEDuloAAAAQc"]
[Tue Apr 14 23:33:36.781191 2026] [:error] [pid 22177:tid 22191] [client 194.5.82.91:36411] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ahax.php"] [unique_id "ad5eUITVeJSXHDIlEDulogAAAQw"]
[Tue Apr 14 23:33:36.964416 2026] [:error] [pid 60074:tid 60086] [client 194.5.82.90:48995] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/num.php"] [unique_id "ad5eUOtqnEmNU9vpHCnUjQAAAMo"]
[Tue Apr 14 23:33:37.251394 2026] [:error] [pid 60074:tid 60100] [client 194.5.82.55:52729] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "ad5eUetqnEmNU9vpHCnUkQAAANg"]
[Tue Apr 14 23:33:37.430020 2026] [:error] [pid 59987:tid 60063] [client 194.5.82.91:36553] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ad5eUVWpk-Tfi6_vLKpYDgAAAJA"]
[Tue Apr 14 23:33:37.610996 2026] [:error] [pid 3810:tid 3826] [client 194.5.82.59:45381] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/app.php"] [unique_id "ad5eUcqc5XaYZhFXVGfg1wAAAY0"]
[Tue Apr 14 23:33:37.789656 2026] [:error] [pid 22177:tid 22187] [client 194.5.82.63:40583] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "ad5eUYTVeJSXHDIlEDulpwAAAQg"]
[Tue Apr 14 23:33:37.968145 2026] [:error] [pid 59985:tid 60005] [client 194.5.82.168:27205] [client 194.5.82.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/admin/function.php"] [unique_id "ad5eUegHaxkvLE6V1kl88gAAAAw"]
[Tue Apr 14 23:33:38.150661 2026] [:error] [pid 22177:tid 22195] [client 194.5.82.74:24761] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/files.php"] [unique_id "ad5eUoTVeJSXHDIlEDulqAAAARA"]
[Tue Apr 14 23:33:38.332220 2026] [:error] [pid 22177:tid 22202] [client 194.5.82.84:21529] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/"] [unique_id "ad5eUoTVeJSXHDIlEDulqQAAARc"]
[Tue Apr 14 23:33:39.518359 2026] [:error] [pid 60074:tid 60081] [client 194.5.82.91:44703] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/column/"] [unique_id "ad5eU-tqnEmNU9vpHCnUmwAAAMU"]
[Tue Apr 14 23:33:39.699139 2026] [:error] [pid 60074:tid 60095] [client 194.5.82.98:53839] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/video/"] [unique_id "ad5eU-tqnEmNU9vpHCnUnQAAANM"]
[Tue Apr 14 23:33:39.878520 2026] [:error] [pid 60074:tid 60099] [client 194.5.82.95:29451] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/pattern/"] [unique_id "ad5eU-tqnEmNU9vpHCnUnwAAANc"]
[Tue Apr 14 23:33:40.059746 2026] [:error] [pid 3810:tid 3814] [client 194.5.82.67:60403] [client 194.5.82.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/system.php"] [unique_id "ad5eVMqc5XaYZhFXVGfg4QAAAYE"]
[Tue Apr 14 23:33:40.240481 2026] [:error] [pid 3810:tid 3813] [client 194.5.82.59:31587] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "ad5eVMqc5XaYZhFXVGfg5QAAAYA"]
[Tue Apr 14 23:33:40.419917 2026] [:error] [pid 22177:tid 22192] [client 194.5.82.84:22697] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-links-opml.php"] [unique_id "ad5eVITVeJSXHDIlEDulsAAAAQ0"]
[Tue Apr 14 23:33:40.602288 2026] [:error] [pid 59986:tid 60041] [client 194.5.82.88:52161] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "ad5eVJ6axKeW6bX4H7fH3wAAAFU"]
[Tue Apr 14 23:33:40.782893 2026] [:error] [pid 3778:tid 3783] [client 194.5.82.86:42821] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "ad5eVBx5DfpNmYF_PaERKwAAAUM"]
[Tue Apr 14 23:33:41.020707 2026] [:error] [pid 60074:tid 60082] [client 194.5.82.95:50915] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/aa.php"] [unique_id "ad5eVetqnEmNU9vpHCnUowAAAMY"]
[Tue Apr 14 23:33:41.202066 2026] [:error] [pid 60074:tid 60088] [client 194.5.82.167:31327] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "ad5eVetqnEmNU9vpHCnUpAAAAMw"]
[Tue Apr 14 23:33:41.382627 2026] [:error] [pid 59987:tid 60062] [client 194.5.82.73:27133] [client 194.5.82.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "ad5eVVWpk-Tfi6_vLKpYGAAAAI8"]
[Tue Apr 14 23:33:41.570250 2026] [:error] [pid 60074:tid 60097] [client 194.5.82.54:45797] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-content/"] [unique_id "ad5eVetqnEmNU9vpHCnUpgAAANU"]
[Tue Apr 14 23:33:41.755770 2026] [:error] [pid 60074:tid 60083] [client 194.5.82.104:28101] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-update.php"] [unique_id "ad5eVetqnEmNU9vpHCnUpwAAAMc"]
[Tue Apr 14 23:33:41.936726 2026] [:error] [pid 22177:tid 22199] [client 194.5.82.87:53949] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/images/"] [unique_id "ad5eVYTVeJSXHDIlEDulswAAARQ"]
[Tue Apr 14 23:33:42.115919 2026] [:error] [pid 59987:tid 60050] [client 194.5.82.102:61601] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/packed.php"] [unique_id "ad5eVlWpk-Tfi6_vLKpYHAAAAIM"]
[Tue Apr 14 23:33:42.296799 2026] [:error] [pid 3810:tid 3831] [client 194.5.82.97:53107] [client 194.5.82.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/"] [unique_id "ad5eVsqc5XaYZhFXVGfg7AAAAZI"]
[Tue Apr 14 23:33:42.478008 2026] [:error] [pid 3810:tid 3836] [client 194.5.82.76:59443] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/script-loader-react-refresh.php"] [unique_id "ad5eVsqc5XaYZhFXVGfg7gAAAZc"]
[Tue Apr 14 23:33:42.658445 2026] [:error] [pid 3810:tid 3815] [client 194.5.82.82:58621] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "ad5eVsqc5XaYZhFXVGfg8AAAAYI"]
[Tue Apr 14 23:33:42.840329 2026] [:error] [pid 22177:tid 22193] [client 194.5.82.91:60097] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-themes.php"] [unique_id "ad5eVoTVeJSXHDIlEDultQAAAQ4"]
[Tue Apr 14 23:33:43.019866 2026] [:error] [pid 59986:tid 60039] [client 194.5.82.61:21495] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/customize-widgets/"] [unique_id "ad5eV56axKeW6bX4H7fH4wAAAFM"]
[Tue Apr 14 23:33:43.312917 2026] [:error] [pid 3810:tid 3837] [client 194.5.82.81:35643] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comments-pagination-next/"] [unique_id "ad5eV8qc5XaYZhFXVGfg8wAAAZg"]
[Tue Apr 14 23:33:43.492815 2026] [:error] [pid 60074:tid 60092] [client 194.5.82.92:35585] [client 194.5.82.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/install.php"] [unique_id "ad5eV-tqnEmNU9vpHCnUsQAAANA"]
[Tue Apr 14 23:33:43.678165 2026] [:error] [pid 3778:tid 3786] [client 194.5.82.65:21197] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/"] [unique_id "ad5eVxx5DfpNmYF_PaERLwAAAUY"]
[Tue Apr 14 23:33:43.860957 2026] [:error] [pid 3810:tid 3823] [client 194.5.82.73:36589] [client 194.5.82.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "ad5eV8qc5XaYZhFXVGfg9AAAAYo"]
[Tue Apr 14 23:33:44.072290 2026] [:error] [pid 3778:tid 3788] [client 194.5.82.168:39655] [client 194.5.82.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/media/"] [unique_id "ad5eWBx5DfpNmYF_PaERMQAAAUg"]
[Tue Apr 14 23:33:44.254141 2026] [:error] [pid 3778:tid 3796] [client 194.5.82.80:44141] [client 194.5.82.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/about.php"] [unique_id "ad5eWBx5DfpNmYF_PaERNwAAAVA"]
[Tue Apr 14 23:33:44.432997 2026] [:error] [pid 3778:tid 3800] [client 194.5.82.84:21607] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ad5eWBx5DfpNmYF_PaEROgAAAVQ"]
[Tue Apr 14 23:33:44.614193 2026] [:error] [pid 3778:tid 3784] [client 194.5.82.60:44949] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/accordion/"] [unique_id "ad5eWBx5DfpNmYF_PaERPgAAAUQ"]
[Tue Apr 14 23:33:44.798668 2026] [:error] [pid 59986:tid 60040] [client 194.5.82.93:46217] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/2.php"] [unique_id "ad5eWJ6axKeW6bX4H7fH5QAAAFQ"]
[Tue Apr 14 23:33:44.987227 2026] [:error] [pid 3810:tid 3829] [client 194.5.82.94:53779] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/separator/"] [unique_id "ad5eWMqc5XaYZhFXVGfg9QAAAZA"]
[Tue Apr 14 23:33:45.167850 2026] [:error] [pid 3778:tid 3789] [client 194.5.82.58:57343] [client 194.5.82.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-template/"] [unique_id "ad5eWRx5DfpNmYF_PaERQwAAAUk"]
[Tue Apr 14 23:33:45.348245 2026] [:error] [pid 59985:tid 60014] [client 194.5.82.66:25891] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "ad5eWegHaxkvLE6V1kl8-AAAABU"]
[Tue Apr 14 23:33:45.528492 2026] [:error] [pid 60074:tid 60095] [client 194.5.82.84:46631] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/elementor/"] [unique_id "ad5eWetqnEmNU9vpHCnUtgAAANM"]
[Tue Apr 14 23:33:45.709519 2026] [:error] [pid 60074:tid 60080] [client 194.5.82.83:52819] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "ad5eWetqnEmNU9vpHCnUugAAAMQ"]
[Tue Apr 14 23:33:45.891246 2026] [:error] [pid 59986:tid 60020] [client 194.5.82.54:24163] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/library/"] [unique_id "ad5eWZ6axKeW6bX4H7fH5gAAAEA"]
[Tue Apr 14 23:33:46.071377 2026] [:error] [pid 3778:tid 3790] [client 194.5.82.68:50313] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "ad5eWhx5DfpNmYF_PaERRQAAAUo"]
[Tue Apr 14 23:33:46.252255 2026] [:error] [pid 59985:tid 60000] [client 194.5.82.66:41433] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentytwo/assets/fonts/"] [unique_id "ad5eWugHaxkvLE6V1kl8-gAAAAc"]
[Tue Apr 14 23:33:47.981008 2026] [:error] [pid 3810:tid 3828] [client 194.5.82.83:51009] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/system_log.php"] [unique_id "ad5eW8qc5XaYZhFXVGfg_wAAAY8"]
[Tue Apr 14 23:33:48.168007 2026] [:error] [pid 59986:tid 60020] [client 194.5.82.99:44441] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/upload.php"] [unique_id "ad5eXJ6axKeW6bX4H7fH8wAAAEA"]
[Tue Apr 14 23:33:48.352096 2026] [:error] [pid 59985:tid 60010] [client 194.5.82.60:29881] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/lock360.php"] [unique_id "ad5eXOgHaxkvLE6V1kl8_AAAABE"]
[Tue Apr 14 23:33:48.533489 2026] [:error] [pid 22177:tid 22193] [client 194.5.82.93:50799] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wpforms/"] [unique_id "ad5eXITVeJSXHDIlEDulwgAAAQ4"]
[Tue Apr 14 23:33:48.712806 2026] [:error] [pid 3810:tid 3832] [client 194.5.82.64:21481] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/mah/function.php"] [unique_id "ad5eXMqc5XaYZhFXVGfhAAAAAZM"]
[Tue Apr 14 23:33:48.892907 2026] [:error] [pid 60074:tid 60096] [client 194.5.82.61:36615] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/navigation-submenu/"] [unique_id "ad5eXOtqnEmNU9vpHCnUvwAAANQ"]
[Tue Apr 14 23:33:49.073462 2026] [:error] [pid 59986:tid 60036] [client 194.5.82.90:20249] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/neve/assets/apps/dashboard/build/"] [unique_id "ad5eXZ6axKeW6bX4H7fH-QAAAFA"]
[Tue Apr 14 23:33:49.253066 2026] [:error] [pid 3810:tid 3824] [client 194.5.82.79:58053] [client 194.5.82.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/2025/"] [unique_id "ad5eXcqc5XaYZhFXVGfhBAAAAYs"]
[Tue Apr 14 23:33:49.432346 2026] [:error] [pid 3810:tid 3827] [client 194.5.82.78:56587] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/group/"] [unique_id "ad5eXcqc5XaYZhFXVGfhBwAAAY4"]
[Tue Apr 14 23:33:49.611296 2026] [:error] [pid 60074:tid 60084] [client 194.5.82.87:20721] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/home-link/"] [unique_id "ad5eXetqnEmNU9vpHCnUwQAAAMg"]
[Tue Apr 14 23:33:49.792398 2026] [:error] [pid 22177:tid 22190] [client 194.5.82.64:36099] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "ad5eXYTVeJSXHDIlEDulxQAAAQs"]
[Tue Apr 14 23:33:49.972610 2026] [:error] [pid 59986:tid 60042] [client 194.5.82.83:27345] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "ad5eXZ6axKeW6bX4H7fH-wAAAFY"]
[Tue Apr 14 23:33:50.151892 2026] [:error] [pid 22177:tid 22185] [client 194.5.82.82:42907] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/m.php"] [unique_id "ad5eXoTVeJSXHDIlEDulygAAAQY"]
[Tue Apr 14 23:33:50.333689 2026] [:error] [pid 59987:tid 60062] [client 194.5.82.94:65413] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "ad5eXlWpk-Tfi6_vLKpYNAAAAI8"]
[Tue Apr 14 23:33:50.514735 2026] [:error] [pid 59985:tid 60015] [client 194.5.82.72:43333] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/src/Content/Type/"] [unique_id "ad5eXugHaxkvLE6V1kl9AwAAABY"]
[Tue Apr 14 23:33:50.698074 2026] [:error] [pid 59987:tid 60052] [client 194.5.82.64:27741] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "ad5eXlWpk-Tfi6_vLKpYOAAAAIU"]
[Tue Apr 14 23:33:50.878135 2026] [:error] [pid 3810:tid 3836] [client 194.5.82.91:63609] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/"] [unique_id "ad5eXsqc5XaYZhFXVGfhDwAAAZc"]
[Tue Apr 14 23:33:51.059820 2026] [:error] [pid 3810:tid 3825] [client 194.5.82.71:39503] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/commands/"] [unique_id "ad5eX8qc5XaYZhFXVGfhFAAAAYw"]
[Tue Apr 14 23:33:51.243549 2026] [:error] [pid 3810:tid 3826] [client 194.5.82.71:21307] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "ad5eX8qc5XaYZhFXVGfhGAAAAY0"]
[Tue Apr 14 23:33:51.428945 2026] [:error] [pid 3810:tid 3822] [client 194.5.82.101:26343] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/panel.php"] [unique_id "ad5eX8qc5XaYZhFXVGfhHAAAAYk"]
[Tue Apr 14 23:33:51.610905 2026] [:error] [pid 3810:tid 3820] [client 194.5.82.167:48677] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/.well-known/acme-challenge/"] [unique_id "ad5eX8qc5XaYZhFXVGfhIgAAAYc"]
[Tue Apr 14 23:33:51.795296 2026] [:error] [pid 60074:tid 60079] [client 194.5.82.73:49843] [client 194.5.82.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/table/"] [unique_id "ad5eX-tqnEmNU9vpHCnUxgAAAMM"]
[Tue Apr 14 23:33:51.981865 2026] [:error] [pid 3810:tid 3832] [client 194.5.82.95:56153] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/search/"] [unique_id "ad5eX8qc5XaYZhFXVGfhJwAAAZM"]
[Tue Apr 14 23:33:52.164781 2026] [:error] [pid 3778:tid 3784] [client 194.5.82.101:45339] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/html-api/widgets/"] [unique_id "ad5eYBx5DfpNmYF_PaERUgAAAUQ"]
[Tue Apr 14 23:33:52.345541 2026] [:error] [pid 59986:tid 60031] [client 194.5.82.98:45641] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/reception1/includes/tcpdf/examples/config/"] [unique_id "ad5eYJ6axKeW6bX4H7fIAgAAAEs"]
[Tue Apr 14 23:33:52.528047 2026] [:error] [pid 22177:tid 22193] [client 194.5.82.84:58789] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/freeform/"] [unique_id "ad5eYITVeJSXHDIlEDulzwAAAQ4"]
[Tue Apr 14 23:33:52.708481 2026] [:error] [pid 3778:tid 3785] [client 194.5.82.168:64545] [client 194.5.82.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/options.php"] [unique_id "ad5eYBx5DfpNmYF_PaERVQAAAUU"]
[Tue Apr 14 23:33:52.888652 2026] [:error] [pid 60074:tid 60082] [client 194.5.82.90:20771] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "ad5eYOtqnEmNU9vpHCnUyAAAAMY"]
[Tue Apr 14 23:33:53.073768 2026] [:error] [pid 60074:tid 60097] [client 194.5.82.56:54705] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "ad5eYetqnEmNU9vpHCnUygAAANU"]
[Tue Apr 14 23:33:53.261284 2026] [:error] [pid 59986:tid 60043] [client 194.5.82.85:47439] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ad5eYZ6axKeW6bX4H7fIBgAAAFc"]
[Tue Apr 14 23:33:53.442003 2026] [:error] [pid 59985:tid 59993] [client 194.5.82.83:63731] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/social-links/"] [unique_id "ad5eYegHaxkvLE6V1kl9CQAAAAA"]
[Tue Apr 14 23:33:53.625681 2026] [:error] [pid 3778:tid 3781] [client 194.5.82.84:23461] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/edit-wolf.php"] [unique_id "ad5eYRx5DfpNmYF_PaERWAAAAUE"]
[Tue Apr 14 23:33:53.807341 2026] [:error] [pid 59985:tid 59995] [client 194.5.82.81:54069] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "ad5eYegHaxkvLE6V1kl9DQAAAAI"]
[Tue Apr 14 23:33:53.987559 2026] [:error] [pid 59985:tid 59999] [client 194.5.82.79:61867] [client 194.5.82.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jcrop/"] [unique_id "ad5eYegHaxkvLE6V1kl9EgAAAAY"]
[Tue Apr 14 23:33:54.169010 2026] [:error] [pid 3778:tid 3783] [client 194.5.82.58:36617] [client 194.5.82.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "ad5eYhx5DfpNmYF_PaERWgAAAUM"]
[Tue Apr 14 23:33:54.355056 2026] [:error] [pid 3810:tid 3820] [client 194.5.82.76:24697] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comment-reply-link/"] [unique_id "ad5eYsqc5XaYZhFXVGfhLAAAAYc"]
[Tue Apr 14 23:33:54.540124 2026] [:error] [pid 60074:tid 60095] [client 194.5.82.73:35053] [client 194.5.82.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/mini.php"] [unique_id "ad5eYutqnEmNU9vpHCnUzgAAANM"]
[Tue Apr 14 23:33:54.723757 2026] [:error] [pid 22177:tid 22184] [client 194.5.82.69:39077] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ab.php"] [unique_id "ad5eYoTVeJSXHDIlEDul2gAAAQU"]
[Tue Apr 14 23:33:54.904607 2026] [:error] [pid 60074:tid 60089] [client 194.5.82.85:63901] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/000.php"] [unique_id "ad5eYutqnEmNU9vpHCnUzwAAAM0"]
[Tue Apr 14 23:33:55.085430 2026] [:error] [pid 59986:tid 60022] [client 194.5.82.100:42841] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/radio.php"] [unique_id "ad5eY56axKeW6bX4H7fIEAAAAEI"]
[Tue Apr 14 23:33:55.266279 2026] [:error] [pid 59986:tid 60043] [client 194.5.82.64:31609] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "ad5eY56axKeW6bX4H7fIEgAAAFc"]
[Tue Apr 14 23:33:55.447884 2026] [:error] [pid 59985:tid 60012] [client 194.5.82.98:35975] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/we.php"] [unique_id "ad5eY-gHaxkvLE6V1kl9FwAAABM"]
[Tue Apr 14 23:33:55.628961 2026] [:error] [pid 3778:tid 3789] [client 194.5.82.76:47281] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/themes.php"] [unique_id "ad5eYxx5DfpNmYF_PaERXgAAAUk"]
[Tue Apr 14 23:33:55.809995 2026] [:error] [pid 59986:tid 60038] [client 194.5.82.77:61929] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/search/images/"] [unique_id "ad5eY56axKeW6bX4H7fIFwAAAFI"]
[Tue Apr 14 23:33:55.989574 2026] [:error] [pid 59987:tid 60067] [client 194.5.82.62:22133] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/t.php"] [unique_id "ad5eY1Wpk-Tfi6_vLKpYSQAAAJQ"]
[Tue Apr 14 23:33:56.170398 2026] [:error] [pid 3778:tid 3788] [client 194.5.82.64:52749] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/template-singl-portfolio.php"] [unique_id "ad5eZBx5DfpNmYF_PaERYAAAAUg"]
[Tue Apr 14 23:33:56.354948 2026] [:error] [pid 59986:tid 60043] [client 194.5.82.93:48117] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-cache-sys/"] [unique_id "ad5eZJ6axKeW6bX4H7fIIAAAAFc"]
[Tue Apr 14 23:33:56.535866 2026] [:error] [pid 3778:tid 3793] [client 194.5.82.74:43189] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/config.php"] [unique_id "ad5eZBx5DfpNmYF_PaERYwAAAU0"]
[Tue Apr 14 23:33:56.715621 2026] [:error] [pid 3778:tid 3804] [client 194.5.82.65:36051] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/"] [unique_id "ad5eZBx5DfpNmYF_PaERZAAAAVg"]
[Tue Apr 14 23:33:56.907736 2026] [:error] [pid 59986:tid 60021] [client 194.5.82.100:22409] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/widgets/"] [unique_id "ad5eZJ6axKeW6bX4H7fIJgAAAEE"]
[Tue Apr 14 23:33:57.130302 2026] [:error] [pid 59987:tid 60057] [client 194.5.82.69:30047] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/new.php"] [unique_id "ad5eZVWpk-Tfi6_vLKpYSwAAAIo"]
[Tue Apr 14 23:33:57.316248 2026] [:error] [pid 3810:tid 3818] [client 194.5.82.61:20527] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-signin.php"] [unique_id "ad5eZcqc5XaYZhFXVGfhMwAAAYU"]
[Tue Apr 14 23:33:57.507139 2026] [:error] [pid 59986:tid 60024] [client 194.5.82.77:57649] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/"] [unique_id "ad5eZZ6axKeW6bX4H7fIKAAAAEQ"]
[Tue Apr 14 23:33:57.693219 2026] [:error] [pid 59986:tid 60030] [client 194.5.82.90:40331] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/database.php"] [unique_id "ad5eZZ6axKeW6bX4H7fIKgAAAEo"]
[Tue Apr 14 23:33:57.872818 2026] [:error] [pid 3778:tid 3801] [client 194.5.82.84:60577] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/legacy-widget/"] [unique_id "ad5eZRx5DfpNmYF_PaERcgAAAVU"]
[Tue Apr 14 23:33:58.051608 2026] [:error] [pid 3778:tid 3800] [client 194.5.82.82:47217] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/providers/"] [unique_id "ad5eZhx5DfpNmYF_PaERdAAAAVQ"]
[Tue Apr 14 23:33:58.230953 2026] [:error] [pid 3778:tid 3782] [client 194.5.82.72:37169] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp-cron.php"] [unique_id "ad5eZhx5DfpNmYF_PaEReAAAAUI"]
[Tue Apr 14 23:33:58.411249 2026] [:error] [pid 59986:tid 60034] [client 194.5.82.70:24273] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/lock360.php"] [unique_id "ad5eZp6axKeW6bX4H7fILwAAAE4"]
[Tue Apr 14 23:33:58.593468 2026] [:error] [pid 59986:tid 60020] [client 194.5.82.65:65447] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/query-pagination/"] [unique_id "ad5eZp6axKeW6bX4H7fIMwAAAEA"]
[Tue Apr 14 23:33:58.785690 2026] [:error] [pid 59985:tid 60010] [client 194.5.82.61:48465] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "ad5eZugHaxkvLE6V1kl9GQAAABE"]
[Tue Apr 14 23:33:58.972747 2026] [:error] [pid 59986:tid 60043] [client 194.5.82.65:23153] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/css.php"] [unique_id "ad5eZp6axKeW6bX4H7fINwAAAFc"]
[Tue Apr 14 23:33:59.158562 2026] [:error] [pid 59985:tid 60006] [client 194.5.82.84:32235] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/network/"] [unique_id "ad5eZ-gHaxkvLE6V1kl9HQAAAA0"]
[Tue Apr 14 23:33:59.338770 2026] [:error] [pid 59986:tid 60031] [client 194.5.82.78:46873] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/block-bindings/"] [unique_id "ad5eZ56axKeW6bX4H7fIOgAAAEs"]
[Tue Apr 14 23:33:59.636456 2026] [:error] [pid 59986:tid 60039] [client 194.5.82.91:52583] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/session_init.php"] [unique_id "ad5eZ56axKeW6bX4H7fIPAAAAFM"]
[Tue Apr 14 23:33:59.816122 2026] [:error] [pid 59985:tid 60015] [client 194.5.82.64:22769] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/file.php"] [unique_id "ad5eZ-gHaxkvLE6V1kl9HwAAABY"]
[Tue Apr 14 23:33:59.998208 2026] [:error] [pid 3778:tid 3800] [client 194.5.82.72:51491] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/joker.php"] [unique_id "ad5eZxx5DfpNmYF_PaERgAAAAVQ"]
[Tue Apr 14 23:34:00.197342 2026] [:error] [pid 3778:tid 3784] [client 194.5.82.62:47403] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/page-list/"] [unique_id "ad5eaBx5DfpNmYF_PaERgwAAAUQ"]
[Tue Apr 14 23:34:00.388270 2026] [:error] [pid 59986:tid 60036] [client 194.5.82.64:22471] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Exception/"] [unique_id "ad5eaJ6axKeW6bX4H7fIRAAAAFA"]
[Tue Apr 14 23:34:00.576421 2026] [:error] [pid 3778:tid 3791] [client 194.5.82.100:45959] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist"] [unique_id "ad5eaBx5DfpNmYF_PaERhQAAAUs"]
[Tue Apr 14 23:34:00.777738 2026] [:error] [pid 3778:tid 3802] [client 194.5.82.69:64213] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/buy.php"] [unique_id "ad5eaBx5DfpNmYF_PaERhwAAAVY"]
[Tue Apr 14 23:34:00.976318 2026] [:error] [pid 59985:tid 59993] [client 194.5.82.94:62849] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/about.php"] [unique_id "ad5eaOgHaxkvLE6V1kl9JQAAAAA"]
[Tue Apr 14 23:34:01.157616 2026] [:error] [pid 60074:tid 60077] [client 194.5.82.62:59911] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/network/colors/"] [unique_id "ad5eaetqnEmNU9vpHCnU2QAAAME"]
[Tue Apr 14 23:34:01.338205 2026] [:error] [pid 22177:tid 22188] [client 194.5.82.55:31995] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "ad5eaYTVeJSXHDIlEDul4wAAAQk"]
[Tue Apr 14 23:34:03.211502 2026] [:error] [pid 59986:tid 60026] [client 194.5.82.90:45019] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/html-api/"] [unique_id "ad5ea56axKeW6bX4H7fIWwAAAEY"]
[Tue Apr 14 23:34:03.394461 2026] [:error] [pid 59986:tid 60027] [client 194.5.82.59:43709] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-bindings/system_core.php"] [unique_id "ad5ea56axKeW6bX4H7fIXQAAAEc"]
[Tue Apr 14 23:34:03.582156 2026] [:error] [pid 3778:tid 3794] [client 194.5.82.95:30025] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/news-portal/user-install.php"] [unique_id "ad5eaxx5DfpNmYF_PaERjAAAAU4"]
[Tue Apr 14 23:34:03.766670 2026] [:error] [pid 22177:tid 22191] [client 194.5.82.72:24883] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "ad5ea4TVeJSXHDIlEDul6QAAAQw"]
[Tue Apr 14 23:34:03.955684 2026] [:error] [pid 60074:tid 60097] [client 194.5.82.85:34357] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/fonts/"] [unique_id "ad5ea-tqnEmNU9vpHCnU4wAAANU"]
[Tue Apr 14 23:34:04.136178 2026] [:error] [pid 3778:tid 3784] [client 194.5.82.74:22863] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-domain.php"] [unique_id "ad5ebBx5DfpNmYF_PaERjQAAAUQ"]
[Tue Apr 14 23:34:04.315290 2026] [:error] [pid 59986:tid 60029] [client 194.5.82.102:53389] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/chosen.php"] [unique_id "ad5ebJ6axKeW6bX4H7fIaQAAAEk"]
[Tue Apr 14 23:34:04.497860 2026] [:error] [pid 3810:tid 3834] [client 194.5.82.59:52823] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/chosen.php"] [unique_id "ad5ebMqc5XaYZhFXVGfhPwAAAZU"]
[Tue Apr 14 23:34:04.678526 2026] [:error] [pid 3810:tid 3816] [client 194.5.82.78:64735] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/Iitespeed-cache/classwithtostring.php"] [unique_id "ad5ebMqc5XaYZhFXVGfhQQAAAYM"]
[Tue Apr 14 23:34:04.864910 2026] [:error] [pid 59987:tid 60049] [client 194.5.82.91:63405] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/plugins/admin.php"] [unique_id "ad5ebFWpk-Tfi6_vLKpYYQAAAII"]
[Tue Apr 14 23:34:05.062961 2026] [:error] [pid 3778:tid 3785] [client 194.5.82.81:27413] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-load.php"] [unique_id "ad5ebRx5DfpNmYF_PaERkAAAAUU"]
[Tue Apr 14 23:34:05.243544 2026] [:error] [pid 3778:tid 3792] [client 194.5.82.96:56523] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/namespaced/customize/"] [unique_id "ad5ebRx5DfpNmYF_PaERkgAAAUw"]
[Tue Apr 14 23:34:05.424724 2026] [:error] [pid 3778:tid 3798] [client 194.5.82.72:24023] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentytwo/parts/"] [unique_id "ad5ebRx5DfpNmYF_PaERlQAAAVI"]
[Tue Apr 14 23:34:05.608730 2026] [:error] [pid 59986:tid 60036] [client 194.5.82.87:41217] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/"] [unique_id "ad5ebZ6axKeW6bX4H7fIdAAAAFA"]
[Tue Apr 14 23:34:05.795456 2026] [:error] [pid 3778:tid 3799] [client 194.5.82.88:20371] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/query-title/"] [unique_id "ad5ebRx5DfpNmYF_PaERmgAAAVM"]
[Tue Apr 14 23:34:05.975860 2026] [:error] [pid 59986:tid 60031] [client 194.5.82.76:20697] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/revslider/temp/update_extract/revslider.php"] [unique_id "ad5ebZ6axKeW6bX4H7fIeQAAAEs"]
[Tue Apr 14 23:34:06.156775 2026] [:error] [pid 59986:tid 60039] [client 194.5.82.83:23823] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/pretty-link/js/build/wp-cron.php"] [unique_id "ad5ebp6axKeW6bX4H7fIfQAAAFM"]
[Tue Apr 14 23:34:06.339188 2026] [:error] [pid 59986:tid 60038] [client 194.5.82.80:58341] [client 194.5.82.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/wp-conflg.php"] [unique_id "ad5ebp6axKeW6bX4H7fIggAAAFI"]
[Tue Apr 14 23:34:06.519812 2026] [:error] [pid 22177:tid 22193] [client 194.5.82.72:57481] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/astra/inc/builder/type/base/dynamic-css/button/"] [unique_id "ad5eboTVeJSXHDIlEDul7QAAAQ4"]
[Tue Apr 14 23:34:06.699491 2026] [:error] [pid 3778:tid 3797] [client 194.5.82.101:56001] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/crop/about.php"] [unique_id "ad5ebhx5DfpNmYF_PaERngAAAVE"]
[Tue Apr 14 23:34:06.882848 2026] [:error] [pid 59986:tid 60031] [client 194.5.82.167:51035] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "ad5ebp6axKeW6bX4H7fIiAAAAEs"]
[Tue Apr 14 23:34:07.063132 2026] [:error] [pid 59986:tid 60041] [client 194.5.82.74:64495] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/woocommerce/includes/import/about.php"] [unique_id "ad5eb56axKeW6bX4H7fIigAAAFU"]
[Tue Apr 14 23:34:07.250771 2026] [:error] [pid 60074:tid 60083] [client 194.5.82.100:47093] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/author-template-object.php"] [unique_id "ad5eb-tqnEmNU9vpHCnU_wAAAMc"]
[Tue Apr 14 23:34:07.434004 2026] [:error] [pid 59986:tid 60029] [client 194.5.82.88:33813] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/error.php"] [unique_id "ad5eb56axKeW6bX4H7fIjgAAAEk"]
[Tue Apr 14 23:34:07.615354 2026] [:error] [pid 59986:tid 60025] [client 194.5.82.93:32995] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/text.php"] [unique_id "ad5eb56axKeW6bX4H7fIkQAAAEU"]
[Tue Apr 14 23:34:07.797497 2026] [:error] [pid 59987:tid 60070] [client 194.5.82.104:62977] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/tag-cloud/"] [unique_id "ad5eb1Wpk-Tfi6_vLKpYbAAAAJc"]
[Tue Apr 14 23:34:07.977425 2026] [:error] [pid 3778:tid 3794] [client 194.5.82.62:47959] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "ad5ebxx5DfpNmYF_PaERogAAAU4"]
[Tue Apr 14 23:34:08.157109 2026] [:error] [pid 59985:tid 60017] [client 194.5.82.59:34571] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/lock.php"] [unique_id "ad5ecOgHaxkvLE6V1kl9MgAAABg"]
[Tue Apr 14 23:34:08.342798 2026] [:error] [pid 22177:tid 22180] [client 194.5.82.60:28671] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/zz.php"] [unique_id "ad5ecITVeJSXHDIlEDul8wAAAQE"]
[Tue Apr 14 23:34:08.530086 2026] [:error] [pid 3810:tid 3823] [client 194.5.82.90:48265] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/maintenance.php"] [unique_id "ad5ecMqc5XaYZhFXVGfhRwAAAYo"]
[Tue Apr 14 23:34:08.709421 2026] [:error] [pid 59986:tid 60034] [client 194.5.82.88:31335] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/file.php"] [unique_id "ad5ecJ6axKeW6bX4H7fImAAAAE4"]
[Tue Apr 14 23:34:08.891677 2026] [:error] [pid 22177:tid 22182] [client 194.5.82.64:20911] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/admin-header.php"] [unique_id "ad5ecITVeJSXHDIlEDul9QAAAQM"]
[Tue Apr 14 23:34:09.076041 2026] [:error] [pid 22177:tid 22203] [client 194.5.82.94:26943] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/rip.php"] [unique_id "ad5ecYTVeJSXHDIlEDul-AAAARg"]
[Tue Apr 14 23:34:09.255969 2026] [:error] [pid 59986:tid 60020] [client 194.5.82.72:51629] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/wp-signin.php"] [unique_id "ad5ecZ6axKeW6bX4H7fInQAAAEA"]
[Tue Apr 14 23:34:09.435711 2026] [:error] [pid 22177:tid 22193] [client 194.5.82.95:62481] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/wp-mail.phpp"] [unique_id "ad5ecYTVeJSXHDIlEDul-wAAAQ4"]
[Tue Apr 14 23:34:09.615279 2026] [:error] [pid 22177:tid 22179] [client 194.5.82.66:63779] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-blog-header.php"] [unique_id "ad5ecYTVeJSXHDIlEDul_gAAAQA"]
[Tue Apr 14 23:34:09.795720 2026] [:error] [pid 59986:tid 60032] [client 194.5.82.98:44305] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/upload/"] [unique_id "ad5ecZ6axKeW6bX4H7fInwAAAEw"]
[Tue Apr 14 23:34:09.975207 2026] [:error] [pid 59987:tid 60066] [client 194.5.82.81:22409] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/widgets-form-blocks-interface.php"] [unique_id "ad5ecVWpk-Tfi6_vLKpYbgAAAJM"]
[Tue Apr 14 23:34:10.153918 2026] [:error] [pid 3778:tid 3791] [client 194.5.82.57:27695] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/nextpage/wp-cron.php"] [unique_id "ad5echx5DfpNmYF_PaERpgAAAUs"]
[Tue Apr 14 23:34:10.335213 2026] [:error] [pid 3810:tid 3833] [client 194.5.82.98:64065] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/database.php"] [unique_id "ad5ecsqc5XaYZhFXVGfhTQAAAZQ"]
[Tue Apr 14 23:34:10.514670 2026] [:error] [pid 59987:tid 60051] [client 194.5.82.85:50235] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/chosen.php"] [unique_id "ad5eclWpk-Tfi6_vLKpYcQAAAIQ"]
[Tue Apr 14 23:34:10.695853 2026] [:error] [pid 59985:tid 59999] [client 194.5.82.89:58385] [client 194.5.82.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "ad5ecugHaxkvLE6V1kl9OQAAAAY"]
[Tue Apr 14 23:34:10.877812 2026] [:error] [pid 59986:tid 60034] [client 194.5.82.74:34811] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/login.php"] [unique_id "ad5ecp6axKeW6bX4H7fIowAAAE4"]
[Tue Apr 14 23:34:11.058548 2026] [:error] [pid 59986:tid 60028] [client 194.5.82.98:49737] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/Text/about.php"] [unique_id "ad5ec56axKeW6bX4H7fIpAAAAEg"]
[Tue Apr 14 23:34:11.238968 2026] [:error] [pid 22177:tid 22196] [client 194.5.82.65:39073] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/js/about.php"] [unique_id "ad5ec4TVeJSXHDIlEDumAwAAARE"]
[Tue Apr 14 23:34:11.418945 2026] [:error] [pid 59985:tid 60017] [client 194.5.82.54:44593] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/config.php"] [unique_id "ad5ec-gHaxkvLE6V1kl9PgAAABg"]
[Tue Apr 14 23:34:11.599332 2026] [:error] [pid 3810:tid 3815] [client 194.5.82.92:47329] [client 194.5.82.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/system_core.php"] [unique_id "ad5ec8qc5XaYZhFXVGfhTwAAAYI"]
[Tue Apr 14 23:34:11.786494 2026] [:error] [pid 3810:tid 3826] [client 194.5.82.77:29999] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/backup.php"] [unique_id "ad5ec8qc5XaYZhFXVGfhUQAAAY0"]
[Tue Apr 14 23:34:11.967847 2026] [:error] [pid 59986:tid 60033] [client 194.5.82.85:45455] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/panel.php"] [unique_id "ad5ec56axKeW6bX4H7fIpgAAAE0"]
[Tue Apr 14 23:34:12.147381 2026] [:error] [pid 60074:tid 60095] [client 194.5.82.88:60863] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/login.php"] [unique_id "ad5edOtqnEmNU9vpHCnVDAAAANM"]
[Tue Apr 14 23:34:12.333156 2026] [:error] [pid 59986:tid 60025] [client 194.5.82.90:35163] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ad5edJ6axKeW6bX4H7fIqgAAAEU"]
[Tue Apr 14 23:34:12.513663 2026] [:error] [pid 59986:tid 60042] [client 194.5.82.85:45639] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/config.php"] [unique_id "ad5edJ6axKeW6bX4H7fIrgAAAFY"]
[Tue Apr 14 23:34:12.693951 2026] [:error] [pid 59986:tid 60033] [client 194.5.82.88:63363] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/plugins/about.php"] [unique_id "ad5edJ6axKeW6bX4H7fIsQAAAE0"]
[Tue Apr 14 23:34:12.874047 2026] [:error] [pid 60074:tid 60100] [client 194.5.82.104:21453] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/network/about.php"] [unique_id "ad5edOtqnEmNU9vpHCnVEgAAANg"]
[Tue Apr 14 23:34:13.054993 2026] [:error] [pid 3810:tid 3833] [client 194.5.82.94:20493] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/upload.php"] [unique_id "ad5edcqc5XaYZhFXVGfhVwAAAZQ"]
[Tue Apr 14 23:34:13.236293 2026] [:error] [pid 3810:tid 3827] [client 194.5.82.103:45643] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/srtdgd.php"] [unique_id "ad5edcqc5XaYZhFXVGfhWwAAAY4"]
[Tue Apr 14 23:34:13.415804 2026] [:error] [pid 3810:tid 3835] [client 194.5.82.91:36117] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/advanc.php"] [unique_id "ad5edcqc5XaYZhFXVGfhXgAAAZY"]
[Tue Apr 14 23:34:13.595327 2026] [:error] [pid 3778:tid 3784] [client 194.5.82.72:31597] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/uploads/config.php"] [unique_id "ad5edRx5DfpNmYF_PaERrgAAAUQ"]
[Tue Apr 14 23:34:13.774664 2026] [:error] [pid 59986:tid 60040] [client 194.5.82.102:45441] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/home.php"] [unique_id "ad5edZ6axKeW6bX4H7fItgAAAFQ"]
[Tue Apr 14 23:34:13.987645 2026] [:error] [pid 59986:tid 60044] [client 194.5.82.98:45947] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/edit-tags-session.php"] [unique_id "ad5edZ6axKeW6bX4H7fIuAAAAFg"]
[Tue Apr 14 23:34:14.167976 2026] [:error] [pid 59986:tid 60023] [client 194.5.82.85:37229] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/js_composer_theme/include/classes/vendors/plugins/login.php"] [unique_id "ad5edp6axKeW6bX4H7fIuwAAAEM"]
[Tue Apr 14 23:34:14.347816 2026] [:error] [pid 59986:tid 60020] [client 194.5.82.69:61695] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-file-manager/lib/php/plugins/api.php"] [unique_id "ad5edp6axKeW6bX4H7fIwgAAAEA"]
[Tue Apr 14 23:34:14.527082 2026] [:error] [pid 59986:tid 60024] [client 194.5.82.63:47969] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-mail.php"] [unique_id "ad5edp6axKeW6bX4H7fIxQAAAEQ"]
[Tue Apr 14 23:34:14.714394 2026] [:error] [pid 59987:tid 60049] [client 194.5.82.58:23065] [client 194.5.82.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/jetpack/extensions/plugins/load.php"] [unique_id "ad5edlWpk-Tfi6_vLKpYeAAAAII"]
[Tue Apr 14 23:34:14.895582 2026] [:error] [pid 59985:tid 60011] [client 194.5.82.57:38437] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/loginpress/css/themes/wp-cron.php"] [unique_id "ad5edugHaxkvLE6V1kl9RAAAABI"]
[Tue Apr 14 23:34:15.076325 2026] [:error] [pid 60074:tid 60078] [client 194.5.82.91:38541] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/fileorganizer/manager/php/plugins/wp-load.php"] [unique_id "ad5ed-tqnEmNU9vpHCnVGAAAAMI"]
[Tue Apr 14 23:34:15.256434 2026] [:error] [pid 3778:tid 3799] [client 194.5.82.88:58503] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/jupiter/assets/js/plugins/wp-signup.php"] [unique_id "ad5edxx5DfpNmYF_PaERrwAAAVM"]
[Tue Apr 14 23:34:15.436437 2026] [:error] [pid 22177:tid 22195] [client 194.5.82.55:26709] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/xmlrpc.php"] [unique_id "ad5ed4TVeJSXHDIlEDumCAAAARA"]
[Tue Apr 14 23:34:15.616289 2026] [:error] [pid 60074:tid 60089] [client 194.5.82.103:56725] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/options.php"] [unique_id "ad5ed-tqnEmNU9vpHCnVHAAAAM0"]
[Tue Apr 14 23:34:15.797982 2026] [:error] [pid 59985:tid 60005] [client 194.5.82.62:31467] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/module.php"] [unique_id "ad5ed-gHaxkvLE6V1kl9SQAAAAw"]
[Tue Apr 14 23:34:15.980732 2026] [:error] [pid 59986:tid 60043] [client 194.5.82.167:24253] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/xy.php"] [unique_id "ad5ed56axKeW6bX4H7fIygAAAFc"]
[Tue Apr 14 23:34:16.160461 2026] [:error] [pid 3810:tid 3825] [client 194.5.82.102:58607] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/xy.php"] [unique_id "ad5eeMqc5XaYZhFXVGfhZQAAAYw"]
[Tue Apr 14 23:34:16.350339 2026] [:error] [pid 3810:tid 3819] [client 194.5.82.66:33831] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/footer-class.php"] [unique_id "ad5eeMqc5XaYZhFXVGfhaAAAAYY"]
[Tue Apr 14 23:34:16.530607 2026] [:error] [pid 3810:tid 3814] [client 194.5.82.81:49475] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/master-blog/content-none-new-compiler.php"] [unique_id "ad5eeMqc5XaYZhFXVGfhagAAAYE"]
[Tue Apr 14 23:34:16.730334 2026] [:error] [pid 22177:tid 22185] [client 194.5.82.71:46347] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wordpress-seo/wp-seo-trigger.php"] [unique_id "ad5eeITVeJSXHDIlEDumCwAAAQY"]
[Tue Apr 14 23:34:16.909617 2026] [:error] [pid 22177:tid 22190] [client 194.5.82.90:38747] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/contact-form-7/admin/css/styles-rtl.php"] [unique_id "ad5eeITVeJSXHDIlEDumDQAAAQs"]
[Tue Apr 14 23:34:17.091110 2026] [:error] [pid 59985:tid 60016] [client 194.5.82.71:33731] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentyfifteen/content-search.bar.php"] [unique_id "ad5eeegHaxkvLE6V1kl9TAAAABc"]
[Tue Apr 14 23:34:17.271930 2026] [:error] [pid 60074:tid 60095] [client 194.5.82.85:22957] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentyfourteen/inc/widgets-core.php"] [unique_id "ad5eeetqnEmNU9vpHCnVJQAAANM"]
[Tue Apr 14 23:34:17.507999 2026] [:error] [pid 59987:tid 60069] [client 194.5.82.69:51475] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/mediaelement/wp-mediaelement.php"] [unique_id "ad5eeVWpk-Tfi6_vLKpYhgAAAJY"]
[Tue Apr 14 23:34:17.687780 2026] [:error] [pid 59985:tid 60010] [client 194.5.82.94:62089] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/thickbox/class-menushelp.php"] [unique_id "ad5eeegHaxkvLE6V1kl9TQAAABE"]
[Tue Apr 14 23:34:17.869386 2026] [:error] [pid 59985:tid 60015] [client 194.5.82.167:52361] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/feed-data.php"] [unique_id "ad5eeegHaxkvLE6V1kl9TwAAABY"]
[Tue Apr 14 23:34:18.050152 2026] [:error] [pid 59985:tid 60007] [client 194.5.82.91:57383] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/header.item.php"] [unique_id "ad5eeugHaxkvLE6V1kl9UgAAAA4"]
[Tue Apr 14 23:34:18.232476 2026] [:error] [pid 59985:tid 60001] [client 194.5.82.104:29345] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/capabilities-json.php"] [unique_id "ad5eeugHaxkvLE6V1kl9VAAAAAg"]
[Tue Apr 14 23:34:18.412378 2026] [:error] [pid 59985:tid 60006] [client 194.5.82.62:31529] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/module.audio.ogg-data.php"] [unique_id "ad5eeugHaxkvLE6V1kl9VgAAAA0"]
[Tue Apr 14 23:34:18.592108 2026] [:error] [pid 3810:tid 3824] [client 194.5.82.78:36701] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-wp-widget-calendar-js.php"] [unique_id "ad5eesqc5XaYZhFXVGfhcgAAAYs"]
[Tue Apr 14 23:34:18.771722 2026] [:error] [pid 59986:tid 60026] [client 194.5.82.76:56639] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyone/assets/"] [unique_id "ad5eep6axKeW6bX4H7fIzQAAAEY"]
[Tue Apr 14 23:34:18.953188 2026] [:error] [pid 22177:tid 22179] [client 194.5.82.82:25471] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/footnotes/"] [unique_id "ad5eeoTVeJSXHDIlEDumFAAAAQA"]
[Tue Apr 14 23:34:19.134023 2026] [:error] [pid 3778:tid 3796] [client 194.5.82.66:44323] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/lib.php"] [unique_id "ad5eexx5DfpNmYF_PaERsgAAAVA"]
[Tue Apr 14 23:34:19.333770 2026] [:error] [pid 3778:tid 3783] [client 194.5.82.66:60281] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/Utility/"] [unique_id "ad5eexx5DfpNmYF_PaERtgAAAUM"]
[Tue Apr 14 23:34:19.519252 2026] [:error] [pid 60074:tid 60098] [client 194.5.82.93:24497] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/config.php"] [unique_id "ad5ee-tqnEmNU9vpHCnVLgAAANY"]
[Tue Apr 14 23:34:19.704189 2026] [:error] [pid 59987:tid 60066] [client 194.5.82.62:57949] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/config.php"] [unique_id "ad5ee1Wpk-Tfi6_vLKpYiQAAAJM"]
[Tue Apr 14 23:34:19.884482 2026] [:error] [pid 59985:tid 60002] [client 194.5.82.83:39007] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/settings.php"] [unique_id "ad5ee-gHaxkvLE6V1kl9WwAAAAk"]
[Tue Apr 14 23:34:20.066726 2026] [:error] [pid 3778:tid 3794] [client 194.5.82.103:22605] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/wp-load.php"] [unique_id "ad5efBx5DfpNmYF_PaERuwAAAU4"]
[Tue Apr 14 23:34:20.246753 2026] [:error] [pid 60074:tid 60077] [client 194.5.82.82:49423] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/media/config.php"] [unique_id "ad5efOtqnEmNU9vpHCnVOAAAAME"]
[Tue Apr 14 23:34:20.427311 2026] [:error] [pid 59987:tid 60052] [client 194.5.82.72:20179] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ad5efFWpk-Tfi6_vLKpYjAAAAIU"]
[Tue Apr 14 23:34:20.616927 2026] [:error] [pid 22177:tid 22200] [client 194.5.82.96:58363] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/smilies/"] [unique_id "ad5efITVeJSXHDIlEDumFwAAARU"]
[Tue Apr 14 23:34:20.801045 2026] [:error] [pid 59986:tid 60022] [client 194.5.82.55:28381] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/Base.php"] [unique_id "ad5efJ6axKeW6bX4H7fI1QAAAEI"]
[Tue Apr 14 23:34:20.983906 2026] [:error] [pid 59986:tid 60025] [client 194.5.82.63:25085] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/Cap.php"] [unique_id "ad5efJ6axKeW6bX4H7fI2QAAAEU"]
[Tue Apr 14 23:34:21.164564 2026] [:error] [pid 59986:tid 60038] [client 194.5.82.99:35173] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/theme-compat/config.php"] [unique_id "ad5efZ6axKeW6bX4H7fI3QAAAFI"]
[Tue Apr 14 23:34:21.345204 2026] [:error] [pid 59986:tid 60043] [client 194.5.82.84:27043] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/config.php"] [unique_id "ad5efZ6axKeW6bX4H7fI4QAAAFc"]
[Tue Apr 14 23:34:21.528332 2026] [:error] [pid 59986:tid 60025] [client 194.5.82.56:20619] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/config.php"] [unique_id "ad5efZ6axKeW6bX4H7fI5gAAAEU"]
[Tue Apr 14 23:34:21.707816 2026] [:error] [pid 59986:tid 60038] [client 194.5.82.92:43605] [client 194.5.82.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp-config.php"] [unique_id "ad5efZ6axKeW6bX4H7fI6QAAAFI"]
[Tue Apr 14 23:34:21.887907 2026] [:error] [pid 59986:tid 60022] [client 194.5.82.76:50707] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/config.php"] [unique_id "ad5efZ6axKeW6bX4H7fI8QAAAEI"]
[Tue Apr 14 23:34:22.073320 2026] [:error] [pid 59985:tid 59995] [client 194.5.82.60:41611] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/config.php"] [unique_id "ad5efugHaxkvLE6V1kl9XwAAAAI"]
[Tue Apr 14 23:34:22.255036 2026] [:error] [pid 59985:tid 60014] [client 194.5.82.103:64093] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/wp-load.php"] [unique_id "ad5efugHaxkvLE6V1kl9YQAAABU"]
[Tue Apr 14 23:34:22.437380 2026] [:error] [pid 59987:tid 60062] [client 194.5.82.96:62799] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/imgareaselect/config.php"] [unique_id "ad5eflWpk-Tfi6_vLKpYjgAAAI8"]
[Tue Apr 14 23:34:22.618156 2026] [:error] [pid 22177:tid 22184] [client 194.5.82.54:24079] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/login.php"] [unique_id "ad5efoTVeJSXHDIlEDumGQAAAQU"]
[Tue Apr 14 23:34:22.798020 2026] [:error] [pid 59985:tid 60017] [client 194.5.82.70:50959] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/config.php"] [unique_id "ad5efugHaxkvLE6V1kl9YwAAABg"]
[Tue Apr 14 23:34:22.979440 2026] [:error] [pid 59985:tid 60008] [client 194.5.82.71:40953] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jcrop/config.php"] [unique_id "ad5efugHaxkvLE6V1kl9ZgAAAA8"]
[Tue Apr 14 23:34:23.162593 2026] [:error] [pid 22177:tid 22190] [client 194.5.82.73:47103] [client 194.5.82.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/wp-config.php"] [unique_id "ad5ef4TVeJSXHDIlEDumGwAAAQs"]
[Tue Apr 14 23:34:23.350977 2026] [:error] [pid 22177:tid 22183] [client 194.5.82.86:22209] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/app.php"] [unique_id "ad5ef4TVeJSXHDIlEDumHQAAAQQ"]
[Tue Apr 14 23:34:23.536786 2026] [:error] [pid 60074:tid 60096] [client 194.5.82.96:29903] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/config.php"] [unique_id "ad5ef-tqnEmNU9vpHCnVRQAAANQ"]
[Tue Apr 14 23:34:23.718125 2026] [:error] [pid 60074:tid 60099] [client 194.5.82.86:56987] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/footer.php"] [unique_id "ad5ef-tqnEmNU9vpHCnVSQAAANc"]
[Tue Apr 14 23:34:23.903640 2026] [:error] [pid 60074:tid 60082] [client 194.5.82.90:62407] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/search/config.php"] [unique_id "ad5ef-tqnEmNU9vpHCnVTgAAAMY"]
[Tue Apr 14 23:34:24.084878 2026] [:error] [pid 22177:tid 22179] [client 194.5.82.57:61543] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/endpoints/config.php"] [unique_id "ad5egITVeJSXHDIlEDumIAAAAQA"]
[Tue Apr 14 23:34:24.265046 2026] [:error] [pid 60074:tid 60079] [client 194.5.82.102:58897] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/login.php"] [unique_id "ad5egOtqnEmNU9vpHCnVUQAAAMM"]
[Tue Apr 14 23:34:24.447334 2026] [:error] [pid 22177:tid 22182] [client 194.5.82.59:42469] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/random_compat/config.php"] [unique_id "ad5egITVeJSXHDIlEDumJwAAAQM"]
[Tue Apr 14 23:34:24.629324 2026] [:error] [pid 3778:tid 3786] [client 194.5.82.59:54191] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/init.php"] [unique_id "ad5egBx5DfpNmYF_PaERwAAAAUY"]
[Tue Apr 14 23:34:24.813037 2026] [:error] [pid 59986:tid 60029] [client 194.5.82.70:34549] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/config.php"] [unique_id "ad5egJ6axKeW6bX4H7fI9wAAAEk"]
[Tue Apr 14 23:34:24.997369 2026] [:error] [pid 59986:tid 60036] [client 194.5.82.86:29905] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-config-backup.php"] [unique_id "ad5egJ6axKeW6bX4H7fI-gAAAFA"]
[Tue Apr 14 23:34:25.177934 2026] [:error] [pid 59986:tid 60044] [client 194.5.82.99:28907] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/backup-migration/config.php"] [unique_id "ad5egZ6axKeW6bX4H7fI_gAAAFg"]
[Tue Apr 14 23:34:25.357793 2026] [:error] [pid 59986:tid 60038] [client 194.5.82.89:61257] [client 194.5.82.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/redux/"] [unique_id "ad5egZ6axKeW6bX4H7fJBQAAAFI"]
[Tue Apr 14 23:34:25.537951 2026] [:error] [pid 3778:tid 3793] [client 194.5.82.65:60067] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/themes/config.php"] [unique_id "ad5egRx5DfpNmYF_PaERwwAAAU0"]
[Tue Apr 14 23:34:25.734024 2026] [:error] [pid 3778:tid 3804] [client 194.5.82.82:63839] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/config.php"] [unique_id "ad5egRx5DfpNmYF_PaERxgAAAVg"]
[Tue Apr 14 23:34:25.913630 2026] [:error] [pid 3778:tid 3800] [client 194.5.82.74:60859] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/pwnd/bypass.php"] [unique_id "ad5egRx5DfpNmYF_PaERxwAAAVQ"]
[Tue Apr 14 23:34:26.099772 2026] [:error] [pid 59986:tid 60027] [client 194.5.82.101:60281] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/class.php"] [unique_id "ad5egp6axKeW6bX4H7fJCQAAAEc"]
[Tue Apr 14 23:34:26.286581 2026] [:error] [pid 60074:tid 60085] [client 194.5.82.63:53471] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/config.php"] [unique_id "ad5egutqnEmNU9vpHCnVWwAAAMk"]
[Tue Apr 14 23:34:26.466552 2026] [:error] [pid 60074:tid 60080] [client 194.5.82.69:29779] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/login.php"] [unique_id "ad5egutqnEmNU9vpHCnVXgAAAMQ"]
[Tue Apr 14 23:34:26.648599 2026] [:error] [pid 59986:tid 60044] [client 194.5.82.87:60779] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/config.php"] [unique_id "ad5egp6axKeW6bX4H7fJCwAAAFg"]
[Tue Apr 14 23:34:26.831317 2026] [:error] [pid 60074:tid 60096] [client 194.5.82.59:61655] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/config.php"] [unique_id "ad5egutqnEmNU9vpHCnVZAAAANQ"]
[Tue Apr 14 23:34:27.013319 2026] [:error] [pid 22177:tid 22185] [client 194.5.82.68:43367] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/system.php"] [unique_id "ad5eg4TVeJSXHDIlEDumKQAAAQY"]
[Tue Apr 14 23:34:27.193169 2026] [:error] [pid 59987:tid 60050] [client 194.5.82.94:23487] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentynineteen/sass/site/"] [unique_id "ad5eg1Wpk-Tfi6_vLKpYkgAAAIM"]
[Tue Apr 14 23:34:27.375086 2026] [:error] [pid 22177:tid 22203] [client 194.5.82.86:52617] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwenty/assets/js/"] [unique_id "ad5eg4TVeJSXHDIlEDumKgAAARg"]
[Tue Apr 14 23:34:27.557715 2026] [:error] [pid 59985:tid 60003] [client 194.5.82.65:25571] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/"] [unique_id "ad5eg-gHaxkvLE6V1kl9cAAAAAo"]
[Tue Apr 14 23:34:29.165154 2026] [:error] [pid 3778:tid 3784] [client 194.5.82.55:37277] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/edit-tags.php"] [unique_id "ad5ehRx5DfpNmYF_PaER1AAAAUQ"]
[Tue Apr 14 23:34:29.344969 2026] [:error] [pid 59987:tid 60057] [client 194.5.82.73:43787] [client 194.5.82.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/root.php"] [unique_id "ad5ehVWpk-Tfi6_vLKpYmAAAAIo"]
[Tue Apr 14 23:34:29.525979 2026] [:error] [pid 59985:tid 60002] [client 194.5.82.60:34583] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/webix.php"] [unique_id "ad5ehegHaxkvLE6V1kl9dwAAAAk"]
[Tue Apr 14 23:34:29.707279 2026] [:error] [pid 59987:tid 60058] [client 194.5.82.76:20871] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/ms-files.php"] [unique_id "ad5ehVWpk-Tfi6_vLKpYmQAAAIs"]
[Tue Apr 14 23:34:29.887191 2026] [:error] [pid 3810:tid 3818] [client 194.5.82.73:34375] [client 194.5.82.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/about.php"] [unique_id "ad5ehcqc5XaYZhFXVGfhkQAAAYU"]
[Tue Apr 14 23:34:30.071558 2026] [:error] [pid 3778:tid 3797] [client 194.5.82.83:40031] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/edit.php"] [unique_id "ad5ehhx5DfpNmYF_PaER2gAAAVE"]
[Tue Apr 14 23:34:30.252011 2026] [:error] [pid 22177:tid 22181] [client 194.5.82.99:39329] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "ad5ehoTVeJSXHDIlEDumLwAAAQI"]
[Tue Apr 14 23:34:30.432264 2026] [:error] [pid 59987:tid 60050] [client 194.5.82.104:26235] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "ad5ehlWpk-Tfi6_vLKpYnwAAAIM"]
[Tue Apr 14 23:34:30.623211 2026] [:error] [pid 59987:tid 60064] [client 194.5.82.81:39213] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/wp-mail.php"] [unique_id "ad5ehlWpk-Tfi6_vLKpYoQAAAJE"]
[Tue Apr 14 23:34:30.807879 2026] [:error] [pid 60074:tid 60093] [client 194.5.82.100:46433] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "ad5ehutqnEmNU9vpHCnVdwAAANE"]
[Tue Apr 14 23:34:31.019009 2026] [:error] [pid 3810:tid 3813] [client 194.5.82.69:43501] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-multilang/configs/plugins/users.php"] [unique_id "ad5eh8qc5XaYZhFXVGfhlwAAAYA"]
[Tue Apr 14 23:34:31.199707 2026] [:error] [pid 59986:tid 60027] [client 194.5.82.67:33805] [client 194.5.82.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/upgrade-temp-backup/plugins/maintenance.php"] [unique_id "ad5eh56axKeW6bX4H7fJDwAAAEc"]
[Tue Apr 14 23:34:31.379883 2026] [:error] [pid 59986:tid 60042] [client 194.5.82.67:56869] [client 194.5.82.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/aboutc.php"] [unique_id "ad5eh56axKeW6bX4H7fJEwAAAFY"]
[Tue Apr 14 23:34:31.562740 2026] [:error] [pid 60074:tid 60084] [client 194.5.82.74:38559] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/columns/"] [unique_id "ad5eh-tqnEmNU9vpHCnVeQAAAMg"]
[Tue Apr 14 23:34:31.741644 2026] [:error] [pid 3778:tid 3795] [client 194.5.82.72:57773] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/widget-group/"] [unique_id "ad5ehxx5DfpNmYF_PaER5gAAAU8"]
[Tue Apr 14 23:34:31.920649 2026] [:error] [pid 59987:tid 60063] [client 194.5.82.78:41213] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/news-portal/fm.php"] [unique_id "ad5eh1Wpk-Tfi6_vLKpYpAAAAJA"]
[Tue Apr 14 23:34:32.101428 2026] [:error] [pid 59987:tid 60070] [client 194.5.82.168:28723] [client 194.5.82.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/koiy.php"] [unique_id "ad5eiFWpk-Tfi6_vLKpYpgAAAJc"]
[Tue Apr 14 23:34:32.285252 2026] [:error] [pid 3778:tid 3781] [client 194.5.82.85:31853] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/Nxploited/class-payment.php"] [unique_id "ad5eiBx5DfpNmYF_PaER6QAAAUE"]
[Tue Apr 14 23:34:32.467011 2026] [:error] [pid 59987:tid 60066] [client 194.5.82.96:25599] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/plugin/"] [unique_id "ad5eiFWpk-Tfi6_vLKpYqwAAAJM"]
[Tue Apr 14 23:34:32.646935 2026] [:error] [pid 59985:tid 59993] [client 194.5.82.97:45063] [client 194.5.82.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/first.php"] [unique_id "ad5eiOgHaxkvLE6V1kl9gQAAAAA"]
[Tue Apr 14 23:34:34.377087 2026] [:error] [pid 3810:tid 3824] [client 194.5.82.70:50423] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/bk/database.php"] [unique_id "ad5eisqc5XaYZhFXVGfhrwAAAYs"]
[Tue Apr 14 23:34:34.558097 2026] [:error] [pid 3810:tid 3835] [client 194.5.82.63:55037] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/configRIV/about.php"] [unique_id "ad5eisqc5XaYZhFXVGfhswAAAZY"]
[Tue Apr 14 23:34:34.737590 2026] [:error] [pid 3810:tid 3826] [client 194.5.82.58:37297] [client 194.5.82.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/home.php"] [unique_id "ad5eisqc5XaYZhFXVGfhtwAAAY0"]
[Tue Apr 14 23:34:34.916506 2026] [:error] [pid 3810:tid 3825] [client 194.5.82.95:39173] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/well-known/about.php"] [unique_id "ad5eisqc5XaYZhFXVGfhvQAAAYw"]
[Tue Apr 14 23:34:35.096600 2026] [:error] [pid 3810:tid 3819] [client 194.5.82.60:50729] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/home.php"] [unique_id "ad5ei8qc5XaYZhFXVGfhwAAAAYY"]
[Tue Apr 14 23:34:35.306119 2026] [:error] [pid 59987:tid 60052] [client 194.5.82.167:52549] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/upload.php"] [unique_id "ad5ei1Wpk-Tfi6_vLKpYrgAAAIU"]
[Tue Apr 14 23:34:35.487134 2026] [:error] [pid 3810:tid 3828] [client 194.5.82.78:29987] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/about.php"] [unique_id "ad5ei8qc5XaYZhFXVGfhxgAAAY8"]
[Tue Apr 14 23:34:35.668326 2026] [:error] [pid 3810:tid 3824] [client 194.5.82.80:30153] [client 194.5.82.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/updraftplus/system_core.php"] [unique_id "ad5ei8qc5XaYZhFXVGfhyAAAAYs"]
[Tue Apr 14 23:34:35.851983 2026] [:error] [pid 3810:tid 3831] [client 194.5.82.87:37117] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/xc.php"] [unique_id "ad5ei8qc5XaYZhFXVGfhygAAAZI"]
[Tue Apr 14 23:34:36.031706 2026] [:error] [pid 59987:tid 60063] [client 194.5.82.91:32477] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/well-known/acme-challenge/about.php"] [unique_id "ad5ejFWpk-Tfi6_vLKpYsQAAAJA"]
[Tue Apr 14 23:34:36.213318 2026] [:error] [pid 59987:tid 60071] [client 194.5.82.76:51329] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/well-known/about.php"] [unique_id "ad5ejFWpk-Tfi6_vLKpYtAAAAJg"]
[Tue Apr 14 23:34:36.444433 2026] [:error] [pid 3810:tid 3837] [client 194.5.82.62:63069] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/x123.php"] [unique_id "ad5ejMqc5XaYZhFXVGfh0QAAAZg"]
[Tue Apr 14 23:34:36.625653 2026] [:error] [pid 59987:tid 60069] [client 194.5.82.78:28129] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/database/database.php"] [unique_id "ad5ejFWpk-Tfi6_vLKpYtgAAAJY"]
[Tue Apr 14 23:34:36.805697 2026] [:error] [pid 60074:tid 60098] [client 194.5.82.101:57683] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/vx.php"] [unique_id "ad5ejOtqnEmNU9vpHCnViAAAANY"]
[Tue Apr 14 23:34:36.986549 2026] [:error] [pid 3810:tid 3824] [client 194.5.82.83:43687] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/adminfuns.php"] [unique_id "ad5ejMqc5XaYZhFXVGfh1wAAAYs"]
[Tue Apr 14 23:34:37.167750 2026] [:error] [pid 60074:tid 60079] [client 194.5.82.59:59529] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/content.php"] [unique_id "ad5ejetqnEmNU9vpHCnVigAAAMM"]
[Tue Apr 14 23:34:37.353985 2026] [:error] [pid 59985:tid 59993] [client 194.5.82.91:60925] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ws63.php"] [unique_id "ad5ejegHaxkvLE6V1kl9iAAAAAA"]
[Tue Apr 14 23:34:37.537448 2026] [:error] [pid 59987:tid 60054] [client 194.5.82.82:41189] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includesxc/js/imgareaselect/zo.php"] [unique_id "ad5ejVWpk-Tfi6_vLKpYuQAAAIc"]
[Tue Apr 14 23:34:37.717363 2026] [:error] [pid 60074:tid 60085] [client 194.5.82.66:63465] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/astra/inc/builder/type/header/above-header/assets/js/"] [unique_id "ad5ejetqnEmNU9vpHCnVjQAAAMk"]
[Tue Apr 14 23:34:37.897092 2026] [:error] [pid 60074:tid 60099] [client 194.5.82.99:60089] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/astra/assets/css/"] [unique_id "ad5ejetqnEmNU9vpHCnVkAAAANc"]
[Tue Apr 14 23:34:38.080091 2026] [:error] [pid 59985:tid 60012] [client 194.5.82.91:55307] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/light/wp-admin.php"] [unique_id "ad5ejugHaxkvLE6V1kl9iwAAABM"]
[Tue Apr 14 23:34:38.260629 2026] [:error] [pid 3810:tid 3816] [client 194.5.82.67:47731] [client 194.5.82.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/modern/test2.php"] [unique_id "ad5ejsqc5XaYZhFXVGfh3gAAAYM"]
[Tue Apr 14 23:34:38.440910 2026] [:error] [pid 59986:tid 60043] [client 194.5.82.82:41075] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp2epub/css/"] [unique_id "ad5ejp6axKeW6bX4H7fJIQAAAFc"]
[Tue Apr 14 23:34:38.621495 2026] [:error] [pid 59986:tid 60021] [client 194.5.82.55:27387] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins_old1/insert-headers-and-footers/"] [unique_id "ad5ejp6axKeW6bX4H7fJJAAAAEE"]
[Tue Apr 14 23:34:38.803124 2026] [:error] [pid 3810:tid 3824] [client 194.5.82.72:64089] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sc.php"] [unique_id "ad5ejsqc5XaYZhFXVGfh5AAAAYs"]
[Tue Apr 14 23:34:38.984723 2026] [:error] [pid 60074:tid 60083] [client 194.5.82.86:24381] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/widgets/wp-conflg.php"] [unique_id "ad5ejutqnEmNU9vpHCnVlAAAAMc"]
[Tue Apr 14 23:34:39.166772 2026] [:error] [pid 59985:tid 60011] [client 194.5.82.82:40697] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/users.php"] [unique_id "ad5ej-gHaxkvLE6V1kl9jQAAABI"]
[Tue Apr 14 23:34:39.351779 2026] [:error] [pid 3810:tid 3823] [client 194.5.82.70:55611] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-at.php"] [unique_id "ad5ej8qc5XaYZhFXVGfh6gAAAYo"]
[Tue Apr 14 23:34:39.533361 2026] [:error] [pid 59987:tid 60060] [client 194.5.82.84:28859] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/library/222.php"] [unique_id "ad5ej1Wpk-Tfi6_vLKpYvgAAAI0"]
[Tue Apr 14 23:34:39.714524 2026] [:error] [pid 60074:tid 60092] [client 194.5.82.168:38599] [client 194.5.82.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/222.php"] [unique_id "ad5ej-tqnEmNU9vpHCnVlgAAANA"]
[Tue Apr 14 23:34:39.896803 2026] [:error] [pid 3810:tid 3814] [client 194.5.82.74:28687] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-supports/100.php"] [unique_id "ad5ej8qc5XaYZhFXVGfh7wAAAYE"]
[Tue Apr 14 23:34:40.076313 2026] [:error] [pid 3810:tid 3836] [client 194.5.82.60:45525] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/blue/dx.php"] [unique_id "ad5ekMqc5XaYZhFXVGfh8gAAAZc"]
[Tue Apr 14 23:34:40.256096 2026] [:error] [pid 59987:tid 60067] [client 194.5.82.78:38149] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/src/xth/"] [unique_id "ad5ekFWpk-Tfi6_vLKpYxAAAAJQ"]
[Tue Apr 14 23:34:40.436613 2026] [:error] [pid 59987:tid 60056] [client 194.5.82.70:37853] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/sunrise/modules/docs/dist/resources/qnl/admin.php"] [unique_id "ad5ekFWpk-Tfi6_vLKpYxgAAAIk"]
[Tue Apr 14 23:34:40.617054 2026] [:error] [pid 3778:tid 3781] [client 194.5.82.54:63929] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-supports/includes/src/content/ixp/"] [unique_id "ad5ekBx5DfpNmYF_PaER7wAAAUE"]
[Tue Apr 14 23:34:40.797128 2026] [:error] [pid 59987:tid 60050] [client 194.5.82.82:64773] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/src/js/includes/pwm/admin.php"] [unique_id "ad5ekFWpk-Tfi6_vLKpYyAAAAIM"]
[Tue Apr 14 23:34:40.979497 2026] [:error] [pid 60074:tid 60100] [client 194.5.82.104:63599] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyfour/assets/"] [unique_id "ad5ekOtqnEmNU9vpHCnVnwAAANg"]
[Tue Apr 14 23:34:41.160169 2026] [:error] [pid 3810:tid 3829] [client 194.5.82.82:30271] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/Divi/core/code-snippets/post/type/"] [unique_id "ad5ekcqc5XaYZhFXVGfh9QAAAZA"]
[Tue Apr 14 23:34:41.339663 2026] [:error] [pid 59985:tid 59997] [client 194.5.82.58:55831] [client 194.5.82.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/Divi/epanel/build/"] [unique_id "ad5ekegHaxkvLE6V1kl9jwAAAAQ"]
[Tue Apr 14 23:34:41.522811 2026] [:error] [pid 59985:tid 60016] [client 194.5.82.70:26145] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/skins/lightgray/"] [unique_id "ad5ekegHaxkvLE6V1kl9lAAAABc"]
[Tue Apr 14 23:34:41.702908 2026] [:error] [pid 59987:tid 60055] [client 194.5.82.81:21309] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/file-mancvgertdxz.php"] [unique_id "ad5ekVWpk-Tfi6_vLKpYzAAAAIg"]
[Tue Apr 14 23:34:41.884017 2026] [:error] [pid 60074:tid 60092] [client 194.5.82.63:23601] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/scanner3.php"] [unique_id "ad5eketqnEmNU9vpHCnVpgAAANA"]
[Tue Apr 14 23:34:42.066794 2026] [:error] [pid 3810:tid 3827] [client 194.5.82.58:46929] [client 194.5.82.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php"] [unique_id "ad5eksqc5XaYZhFXVGfh-wAAAY4"]
[Tue Apr 14 23:34:42.246422 2026] [:error] [pid 60074:tid 60095] [client 194.5.82.71:64507] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/fukasawa/inc/classes/403x.php"] [unique_id "ad5ekutqnEmNU9vpHCnVpwAAANM"]
[Tue Apr 14 23:34:42.426947 2026] [:error] [pid 3778:tid 3801] [client 194.5.82.89:44173] [client 194.5.82.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/chosen.php"] [unique_id "ad5ekhx5DfpNmYF_PaER9wAAAVU"]
[Tue Apr 14 23:34:42.609584 2026] [:error] [pid 22177:tid 22198] [client 194.5.82.59:45571] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "ad5ekoTVeJSXHDIlEDumOAAAARM"]
[Tue Apr 14 23:34:42.789369 2026] [:error] [pid 22177:tid 22188] [client 194.5.82.54:26265] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/blue/"] [unique_id "ad5ekoTVeJSXHDIlEDumOgAAAQk"]
[Tue Apr 14 23:34:42.969476 2026] [:error] [pid 22177:tid 22180] [client 194.5.82.100:29137] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/blue/IXR/"] [unique_id "ad5ekoTVeJSXHDIlEDumOwAAAQE"]
[Tue Apr 14 23:34:43.152054 2026] [:error] [pid 3810:tid 3815] [client 194.5.82.62:37631] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/network/"] [unique_id "ad5ek8qc5XaYZhFXVGfh_gAAAYI"]
[Tue Apr 14 23:34:43.333107 2026] [:error] [pid 3810:tid 3832] [client 194.5.82.68:33225] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/network/ID3/"] [unique_id "ad5ek8qc5XaYZhFXVGfh_wAAAZM"]
[Tue Apr 14 23:34:43.553764 2026] [:error] [pid 3778:tid 3799] [client 194.5.82.91:64469] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/interactivity-api/certificates/"] [unique_id "ad5ekxx5DfpNmYF_PaER-gAAAVM"]
[Tue Apr 14 23:34:43.734022 2026] [:error] [pid 59986:tid 60023] [client 194.5.82.97:51249] [client 194.5.82.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-bindings/maint/"] [unique_id "ad5ek56axKeW6bX4H7fJLQAAAEM"]
[Tue Apr 14 23:34:43.915341 2026] [:error] [pid 59986:tid 60022] [client 194.5.82.70:39831] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/widgets/"] [unique_id "ad5ek56axKeW6bX4H7fJMAAAAEI"]
[Tue Apr 14 23:34:44.097382 2026] [:error] [pid 59986:tid 60044] [client 194.5.82.61:56801] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/interactivity-api/"] [unique_id "ad5elJ6axKeW6bX4H7fJNAAAAFg"]
[Tue Apr 14 23:34:44.280585 2026] [:error] [pid 59987:tid 60053] [client 194.5.82.85:61655] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/tmp-old/plugins-old-old/"] [unique_id "ad5elFWpk-Tfi6_vLKpY0gAAAIY"]
[Tue Apr 14 23:34:44.461426 2026] [:error] [pid 59986:tid 60020] [client 194.5.82.100:21551] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/elementor/lndex.php"] [unique_id "ad5elJ6axKeW6bX4H7fJOAAAAEA"]
[Tue Apr 14 23:34:44.643579 2026] [:error] [pid 59986:tid 60029] [client 194.5.82.73:20641] [client 194.5.82.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins.nulled/metform/user/"] [unique_id "ad5elJ6axKeW6bX4H7fJOQAAAEk"]
[Tue Apr 14 23:34:44.824043 2026] [:error] [pid 59986:tid 60022] [client 194.5.82.68:62773] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/sidebar-schema.php"] [unique_id "ad5elJ6axKeW6bX4H7fJPgAAAEI"]
[Tue Apr 14 23:34:45.006493 2026] [:error] [pid 3810:tid 3825] [client 194.5.82.78:34165] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/interactivity-api/class-wp-interactivity-api-directives-processor-loop.php"] [unique_id "ad5elcqc5XaYZhFXVGfiAwAAAYw"]
[Tue Apr 14 23:34:45.187012 2026] [:error] [pid 3778:tid 3792] [client 194.5.82.98:58167] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/module.audio.flac-restful.php"] [unique_id "ad5elRx5DfpNmYF_PaER_gAAAUw"]
[Tue Apr 14 23:34:45.370289 2026] [:error] [pid 3810:tid 3833] [client 194.5.82.63:29601] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/link-template-edit.php"] [unique_id "ad5elcqc5XaYZhFXVGfiBAAAAZQ"]
[Tue Apr 14 23:34:45.551903 2026] [:error] [pid 3810:tid 3830] [client 194.5.82.88:43469] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/class-wp-customize-new-menu-section-schema.php"] [unique_id "ad5elcqc5XaYZhFXVGfiBQAAAZE"]
[Tue Apr 14 23:34:45.732482 2026] [:error] [pid 3810:tid 3823] [client 194.5.82.81:44113] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-theme-json-resolver-sql.php"] [unique_id "ad5elcqc5XaYZhFXVGfiBwAAAYo"]
[Tue Apr 14 23:34:45.917289 2026] [:error] [pid 3810:tid 3816] [client 194.5.82.63:56441] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/taxonomy-compiler.php"] [unique_id "ad5elcqc5XaYZhFXVGfiCgAAAYM"]
[Tue Apr 14 23:34:46.098339 2026] [:error] [pid 3778:tid 3790] [client 194.5.82.86:57681] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/robots-template-client.php"] [unique_id "ad5elhx5DfpNmYF_PaESAAAAAUo"]
[Tue Apr 14 23:34:46.285028 2026] [:error] [pid 59985:tid 59995] [client 194.5.82.90:34297] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-variable.php"] [unique_id "ad5elugHaxkvLE6V1kl9mgAAAAI"]
[Tue Apr 14 23:34:46.464330 2026] [:error] [pid 22177:tid 22189] [client 194.5.82.59:26793] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-customize-section-less.php"] [unique_id "ad5eloTVeJSXHDIlEDumPAAAAQo"]
[Tue Apr 14 23:34:46.644143 2026] [:error] [pid 3810:tid 3827] [client 194.5.82.85:26447] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comments-less.php"] [unique_id "ad5elsqc5XaYZhFXVGfiEQAAAY4"]
[Tue Apr 14 23:34:46.823913 2026] [:error] [pid 60074:tid 60095] [client 194.5.82.65:38397] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wpdb-query.php"] [unique_id "ad5elutqnEmNU9vpHCnVsQAAANM"]
[Tue Apr 14 23:34:47.008913 2026] [:error] [pid 59986:tid 60041] [client 194.5.82.86:46791] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-restful.php"] [unique_id "ad5el56axKeW6bX4H7fJRgAAAFU"]
[Tue Apr 14 23:34:47.190690 2026] [:error] [pid 3810:tid 3819] [client 194.5.82.84:20389] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/menu-sql.php"] [unique_id "ad5el8qc5XaYZhFXVGfiFQAAAYY"]
[Tue Apr 14 23:34:47.371968 2026] [:error] [pid 60074:tid 60082] [client 194.5.82.81:55553] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/network/index-request.php"] [unique_id "ad5el-tqnEmNU9vpHCnVswAAAMY"]
[Tue Apr 14 23:34:47.555332 2026] [:error] [pid 59987:tid 60063] [client 194.5.82.101:30391] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/themes-security.php"] [unique_id "ad5el1Wpk-Tfi6_vLKpY1QAAAJA"]
[Tue Apr 14 23:34:47.741632 2026] [:error] [pid 60074:tid 60088] [client 194.5.82.90:38393] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/includes/network-url.php"] [unique_id "ad5el-tqnEmNU9vpHCnVtgAAAMw"]
[Tue Apr 14 23:34:47.923587 2026] [:error] [pid 59986:tid 60030] [client 194.5.82.82:42863] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/wp-config-backup.php"] [unique_id "ad5el56axKeW6bX4H7fJSgAAAEo"]
[Tue Apr 14 23:34:48.109506 2026] [:error] [pid 59986:tid 60044] [client 194.5.82.67:60747] [client 194.5.82.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/app.php"] [unique_id "ad5emJ6axKeW6bX4H7fJTAAAAFg"]
[Tue Apr 14 23:34:48.290621 2026] [:error] [pid 59986:tid 60040] [client 194.5.82.83:40843] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentythree/"] [unique_id "ad5emJ6axKeW6bX4H7fJUAAAAFQ"]
[Tue Apr 14 23:34:48.473278 2026] [:error] [pid 60074:tid 60098] [client 194.5.82.66:64741] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyfive/"] [unique_id "ad5emOtqnEmNU9vpHCnVuwAAANY"]
[Tue Apr 14 23:34:48.653145 2026] [:error] [pid 3810:tid 3825] [client 194.5.82.82:20781] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/network/config.php"] [unique_id "ad5emMqc5XaYZhFXVGfiGQAAAYw"]
[Tue Apr 14 23:34:48.833036 2026] [:error] [pid 3810:tid 3824] [client 194.5.82.94:45269] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "ad5emMqc5XaYZhFXVGfiHAAAAYs"]
[Tue Apr 14 23:34:49.013963 2026] [:error] [pid 59986:tid 60038] [client 194.5.82.63:37835] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/wp-config-backup.php"] [unique_id "ad5emZ6axKeW6bX4H7fJUwAAAFI"]
[Tue Apr 14 23:34:49.193599 2026] [:error] [pid 60074:tid 60095] [client 194.5.82.89:64419] [client 194.5.82.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-supports/"] [unique_id "ad5emetqnEmNU9vpHCnVvwAAANM"]
[Tue Apr 14 23:34:49.374311 2026] [:error] [pid 3810:tid 3823] [client 194.5.82.72:23535] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "ad5emcqc5XaYZhFXVGfiHgAAAYo"]
[Tue Apr 14 23:34:49.556280 2026] [:error] [pid 3810:tid 3815] [client 194.5.82.67:33709] [client 194.5.82.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wordpress-seo/css/dist/admin-global-350-rtl.php"] [unique_id "ad5emcqc5XaYZhFXVGfiIAAAAYI"]
[Tue Apr 14 23:34:49.735560 2026] [:error] [pid 22177:tid 22202] [client 194.5.82.84:52889] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/block-directory/222.php"] [unique_id "ad5emYTVeJSXHDIlEDumRAAAARc"]
[Tue Apr 14 23:34:49.914990 2026] [:error] [pid 59985:tid 59999] [client 194.5.82.88:32145] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ad5emegHaxkvLE6V1kl9oAAAAAY"]
[Wed Apr 15 00:22:52.687534 2026] [proxy_fcgi:error] [pid 59985:tid 60012] [client 62.141.44.236:44178] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 00:48:47.766926 2026] [proxy_fcgi:error] [pid 62432:tid 62457] [client 23.234.82.152:55595] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 00:48:48.813616 2026] [ssl:error] [pid 62296:tid 62349] [client 23.234.82.152:55759] AH02032: Hostname southerncrosscentre.org.au provided via SNI and hostname southerncrosscentre.au provided via HTTP have no compatible SSL setup, referer: http://southerncrosscentre.au/
[Wed Apr 15 00:53:35.893346 2026] [proxy_fcgi:error] [pid 17734:tid 17744] [client 180.214.239.10:56148] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 01:25:58.262803 2026] [proxy_fcgi:error] [pid 62297:tid 62369] [client 66.249.79.225:41820] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 01:53:26.472566 2026] [proxy_fcgi:error] [pid 62297:tid 62378] [client 85.204.70.114:46722] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 04:19:43.798309 2026] [:error] [pid 4066:tid 4128] [client 216.81.248.211:34404] [client 216.81.248.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ad6hX4C2YXfSPsC9O_BLdQAAAFg"]
[Wed Apr 15 13:49:22.187851 2026] [:error] [pid 11384:tid 11432] [client 216.73.163.157:31327] [client 216.73.163.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.157, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad8m4nOhpt4MrQIXF7BdwAAAAEo"]
[Wed Apr 15 13:49:22.513527 2026] [proxy_fcgi:error] [pid 11384:tid 11432] [client 216.73.163.157:31327] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 13:49:23.264415 2026] [proxy_fcgi:error] [pid 11384:tid 11435] [client 216.73.163.157:31327] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 13:49:25.300850 2026] [proxy_fcgi:error] [pid 11383:tid 11402] [client 216.73.163.146:52549] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 15:13:53.739024 2026] [:error] [pid 12433:tid 12451] [client 216.73.163.143:63849] [client 216.73.163.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.143, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad86sbwxDHWF005pP_6VtQAAARA"]
[Wed Apr 15 15:13:53.740443 2026] [:error] [pid 12433:tid 12440] [client 216.73.163.117:50225] [client 216.73.163.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.117, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad86sbwxDHWF005pP_6VtgAAAQU"]
[Wed Apr 15 15:13:54.086786 2026] [proxy_fcgi:error] [pid 12433:tid 12440] [client 216.73.163.117:50225] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 15:13:54.377327 2026] [proxy_fcgi:error] [pid 12433:tid 12451] [client 216.73.163.143:63849] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 15:23:15.593960 2026] [:error] [pid 11384:tid 11438] [client 216.73.163.130:63423] [client 216.73.163.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.130, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad8843Ohpt4MrQIXF7CDfgAAAFA"]
[Wed Apr 15 15:23:15.593960 2026] [:error] [pid 11384:tid 11442] [client 216.73.163.135:30519] [client 216.73.163.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.135, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad8843Ohpt4MrQIXF7CDfwAAAFQ"]
[Wed Apr 15 15:23:15.932272 2026] [proxy_fcgi:error] [pid 11384:tid 11438] [client 216.73.163.130:63423] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 15:23:16.218043 2026] [proxy_fcgi:error] [pid 11384:tid 11442] [client 216.73.163.135:30519] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 15:32:23.454174 2026] [:error] [pid 11385:tid 11455] [client 216.73.163.129:40803] [client 216.73.163.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.129, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad8_Bx_mZoXMMCiUoKU26gAAAMY"]
[Wed Apr 15 15:32:23.454210 2026] [:error] [pid 11385:tid 11461] [client 216.73.163.145:49585] [client 216.73.163.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.145, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad8_Bx_mZoXMMCiUoKU26QAAAMw"]
[Wed Apr 15 15:32:25.128083 2026] [proxy_fcgi:error] [pid 11385:tid 11455] [client 216.73.163.129:40803] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 15:32:25.128984 2026] [proxy_fcgi:error] [pid 11385:tid 11461] [client 216.73.163.145:49585] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 15:41:31.736643 2026] [:error] [pid 11384:tid 11437] [client 216.73.163.121:25457] [client 216.73.163.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.121, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9BK3Ohpt4MrQIXF7CJywAAAE8"]
[Wed Apr 15 15:41:31.751492 2026] [:error] [pid 12433:tid 12441] [client 216.73.163.119:60335] [client 216.73.163.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.119, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9BK7wxDHWF005pP_6kzgAAAQY"]
[Wed Apr 15 15:41:32.104044 2026] [proxy_fcgi:error] [pid 12433:tid 12441] [client 216.73.163.119:60335] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 15:41:32.111530 2026] [proxy_fcgi:error] [pid 11384:tid 11437] [client 216.73.163.121:25457] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 15:50:38.560586 2026] [:error] [pid 12396:tid 12409] [client 216.73.163.150:56221] [client 216.73.163.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.150, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9DTsCQWGYUWgxc5kjw4gAAAIs"]
[Wed Apr 15 15:50:38.568032 2026] [:error] [pid 11383:tid 11406] [client 216.73.163.135:35499] [client 216.73.163.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.135, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9DTjOMRk2pAgm2-j7FUQAAAAs"]
[Wed Apr 15 15:50:38.909672 2026] [proxy_fcgi:error] [pid 12396:tid 12409] [client 216.73.163.150:56221] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 15:50:39.078259 2026] [proxy_fcgi:error] [pid 11383:tid 11406] [client 216.73.163.135:35499] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 15:59:36.340845 2026] [:error] [pid 12396:tid 12413] [client 216.73.163.137:55025] [client 216.73.163.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.137, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9FaMCQWGYUWgxc5kjytwAAAI8"]
[Wed Apr 15 15:59:36.341490 2026] [:error] [pid 11384:tid 11440] [client 216.73.163.119:21159] [client 216.73.163.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.119, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9FaHOhpt4MrQIXF7CQcQAAAFI"]
[Wed Apr 15 15:59:36.686161 2026] [proxy_fcgi:error] [pid 11384:tid 11440] [client 216.73.163.119:21159] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 15:59:36.690251 2026] [proxy_fcgi:error] [pid 12396:tid 12413] [client 216.73.163.137:55025] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 16:08:42.249825 2026] [:error] [pid 12433:tid 12453] [client 216.73.163.143:36583] [client 216.73.163.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.143, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9HirwxDHWF005pP_6xMAAAARI"]
[Wed Apr 15 16:08:42.249856 2026] [:error] [pid 12433:tid 12456] [client 45.146.54.136:20599] [client 45.146.54.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.136, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9HirwxDHWF005pP_6xLwAAARU"]
[Wed Apr 15 16:08:43.140518 2026] [proxy_fcgi:error] [pid 12433:tid 12453] [client 216.73.163.143:36583] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 16:08:43.163962 2026] [proxy_fcgi:error] [pid 12433:tid 12456] [client 45.146.54.136:20599] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 16:17:54.503885 2026] [:error] [pid 11385:tid 11465] [client 45.146.54.134:43993] [client 45.146.54.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.134, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9Jsh_mZoXMMCiUoKVDGQAAANA"]
[Wed Apr 15 16:17:54.504216 2026] [:error] [pid 11385:tid 11458] [client 45.146.54.131:46637] [client 45.146.54.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.131, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9Jsh_mZoXMMCiUoKVDGgAAAMk"]
[Wed Apr 15 16:17:54.795144 2026] [proxy_fcgi:error] [pid 11385:tid 11458] [client 45.146.54.131:46637] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 16:17:55.076217 2026] [proxy_fcgi:error] [pid 11385:tid 11465] [client 45.146.54.134:43993] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 16:27:03.312609 2026] [:error] [pid 11475:tid 11497] [client 216.73.163.137:52869] [client 216.73.163.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.137, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9L157upE98bj816HPRUgAAAVQ"]
[Wed Apr 15 16:27:03.312639 2026] [:error] [pid 11475:tid 11492] [client 216.73.163.140:60817] [client 216.73.163.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.140, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9L157upE98bj816HPRUQAAAU8"]
[Wed Apr 15 16:27:03.668212 2026] [proxy_fcgi:error] [pid 11475:tid 11497] [client 216.73.163.137:52869] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 16:27:03.668430 2026] [proxy_fcgi:error] [pid 11475:tid 11492] [client 216.73.163.140:60817] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 16:36:11.374090 2026] [:error] [pid 11384:tid 11433] [client 216.73.163.160:30319] [client 216.73.163.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.160, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9N-3Ohpt4MrQIXF7CacAAAAEs"]
[Wed Apr 15 16:36:11.374090 2026] [:error] [pid 12433:tid 12458] [client 216.73.163.130:43831] [client 216.73.163.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.130, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9N-7wxDHWF005pP_64oQAAARc"]
[Wed Apr 15 16:36:11.725717 2026] [proxy_fcgi:error] [pid 12433:tid 12458] [client 216.73.163.130:43831] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 16:36:12.014726 2026] [proxy_fcgi:error] [pid 11384:tid 11433] [client 216.73.163.160:30319] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 16:45:25.059377 2026] [:error] [pid 11475:tid 11497] [client 45.146.54.138:31823] [client 45.146.54.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.138, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9QJZ7upE98bj816HPZQgAAAVQ"]
[Wed Apr 15 16:45:25.059564 2026] [:error] [pid 11475:tid 11500] [client 216.73.163.132:53199] [client 216.73.163.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.132, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9QJZ7upE98bj816HPZQQAAAVc"]
[Wed Apr 15 16:45:25.405139 2026] [proxy_fcgi:error] [pid 11475:tid 11500] [client 216.73.163.132:53199] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 16:45:25.583989 2026] [proxy_fcgi:error] [pid 11475:tid 11497] [client 45.146.54.138:31823] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 16:54:40.041083 2026] [:error] [pid 11383:tid 11407] [client 216.73.163.136:29213] [client 216.73.163.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.136, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9SUDOMRk2pAgm2-j7VNgAAAAw"]
[Wed Apr 15 16:54:40.041423 2026] [:error] [pid 11383:tid 11400] [client 216.73.163.158:24145] [client 216.73.163.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.158, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9SUDOMRk2pAgm2-j7VNwAAAAU"]
[Wed Apr 15 16:54:40.392623 2026] [proxy_fcgi:error] [pid 11383:tid 11400] [client 216.73.163.158:24145] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 16:54:40.392808 2026] [proxy_fcgi:error] [pid 11383:tid 11407] [client 216.73.163.136:29213] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 17:04:00.349037 2026] [:error] [pid 11385:tid 11446] [client 45.146.54.138:28301] [client 45.146.54.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.138, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9UgB_mZoXMMCiUoKVLiAAAAMA"]
[Wed Apr 15 17:04:00.349041 2026] [:error] [pid 12433:tid 12448] [client 216.73.163.141:54927] [client 216.73.163.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.141, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9UgLwxDHWF005pP_6-MAAAAQ0"]
[Wed Apr 15 17:04:01.317464 2026] [proxy_fcgi:error] [pid 11385:tid 11446] [client 45.146.54.138:28301] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 17:04:01.336826 2026] [proxy_fcgi:error] [pid 12433:tid 12448] [client 216.73.163.141:54927] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 17:13:19.823657 2026] [:error] [pid 11385:tid 11469] [client 45.146.54.138:64251] [client 45.146.54.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.138, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9Wrx_mZoXMMCiUoKVMigAAANQ"]
[Wed Apr 15 17:13:19.823660 2026] [:error] [pid 11383:tid 11416] [client 216.73.163.121:47471] [client 216.73.163.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.121, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9WrzOMRk2pAgm2-j7a2wAAABU"]
[Wed Apr 15 17:13:20.177540 2026] [proxy_fcgi:error] [pid 11385:tid 11469] [client 45.146.54.138:64251] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 17:13:20.485509 2026] [proxy_fcgi:error] [pid 11383:tid 11416] [client 216.73.163.121:47471] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 17:22:53.031762 2026] [:error] [pid 11475:tid 11479] [client 216.73.163.122:29299] [client 216.73.163.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.122, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9Y7Z7upE98bj816HPpLgAAAUI"]
[Wed Apr 15 17:22:53.057141 2026] [:error] [pid 11475:tid 11497] [client 45.146.54.137:47625] [client 45.146.54.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.137, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9Y7Z7upE98bj816HPpLwAAAVQ"]
[Wed Apr 15 17:22:53.377746 2026] [proxy_fcgi:error] [pid 11475:tid 11479] [client 216.73.163.122:29299] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 17:22:53.378188 2026] [proxy_fcgi:error] [pid 11475:tid 11497] [client 45.146.54.137:47625] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 17:32:18.917291 2026] [:error] [pid 11384:tid 11430] [client 216.73.163.118:58481] [client 216.73.163.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.118, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9bInOhpt4MrQIXF7CjGAAAAEg"]
[Wed Apr 15 17:32:18.917915 2026] [:error] [pid 11475:tid 11488] [client 45.146.54.136:39169] [client 45.146.54.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.136, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9bIp7upE98bj816HPuHwAAAUs"]
[Wed Apr 15 17:32:19.303049 2026] [proxy_fcgi:error] [pid 11475:tid 11488] [client 45.146.54.136:39169] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 17:32:19.603295 2026] [proxy_fcgi:error] [pid 11384:tid 11430] [client 216.73.163.118:58481] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 17:41:42.289746 2026] [:error] [pid 12433:tid 12442] [client 216.73.163.143:50655] [client 216.73.163.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.143, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9dVrwxDHWF005pP_7FhQAAAQc"]
[Wed Apr 15 17:41:42.289902 2026] [:error] [pid 65412:tid 65417] [client 45.146.54.133:41277] [client 45.146.54.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.133, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9dVvEYT61VHfhVE5f2hwAAAYM"]
[Wed Apr 15 17:41:42.643689 2026] [proxy_fcgi:error] [pid 12433:tid 12442] [client 216.73.163.143:50655] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 17:41:42.835500 2026] [proxy_fcgi:error] [pid 65412:tid 65417] [client 45.146.54.133:41277] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 17:51:12.303964 2026] [:error] [pid 11384:tid 11449] [client 216.73.163.143:63407] [client 216.73.163.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.143, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9fkHOhpt4MrQIXF7CmcAAAAFc"]
[Wed Apr 15 17:51:12.304181 2026] [:error] [pid 11384:tid 11439] [client 45.131.194.122:62525] [client 45.131.194.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.122, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9fkHOhpt4MrQIXF7CmcQAAAFE"]
[Wed Apr 15 17:51:12.581216 2026] [proxy_fcgi:error] [pid 11384:tid 11439] [client 45.131.194.122:62525] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 17:51:12.859161 2026] [proxy_fcgi:error] [pid 11384:tid 11449] [client 216.73.163.143:63407] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 18:04:06.971822 2026] [:error] [pid 11383:tid 11408] [client 216.73.163.136:32033] [client 216.73.163.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.136, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9iljOMRk2pAgm2-j7sNwAAAA0"]
[Wed Apr 15 18:04:06.972004 2026] [:error] [pid 11383:tid 11419] [client 216.73.163.141:42207] [client 216.73.163.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.141, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9iljOMRk2pAgm2-j7sNgAAABg"]
[Wed Apr 15 18:05:06.978315 2026] [proxy_fcgi:error] [pid 11383:tid 11408] (70007)The timeout specified has expired: [client 216.73.163.136:32033] AH01075: Error dispatching request to : (polling)
[Wed Apr 15 18:05:07.038494 2026] [proxy_fcgi:error] [pid 11383:tid 11419] (70007)The timeout specified has expired: [client 216.73.163.141:42207] AH01075: Error dispatching request to : (polling)
[Wed Apr 15 18:13:39.260143 2026] [:error] [pid 28906:tid 28951] [client 216.73.163.140:53705] [client 216.73.163.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.140, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9k01wfXAWrVIHeYzuHZAAAAE4"]
[Wed Apr 15 18:13:39.260425 2026] [:error] [pid 28907:tid 28983] [client 216.73.163.133:55029] [client 216.73.163.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.133, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9k0xMbq4Od23S648zi-AAAANM"]
[Wed Apr 15 18:13:39.329162 2026] [proxy_fcgi:error] [pid 28907:tid 28983] [client 216.73.163.133:55029] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 18:13:39.330411 2026] [proxy_fcgi:error] [pid 28906:tid 28951] [client 216.73.163.140:53705] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 18:23:15.544338 2026] [:error] [pid 30956:tid 30982] [client 45.146.54.136:35973] [client 45.146.54.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.136, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9nE0BGUpjaWntNYq1TOAAAABY"]
[Wed Apr 15 18:23:15.544776 2026] [:error] [pid 31053:tid 31075] [client 216.73.163.117:40349] [client 216.73.163.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.117, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9nExcEkLCmvF0fjDeMLwAAAJM"]
[Wed Apr 15 18:23:15.667882 2026] [proxy_fcgi:error] [pid 30956:tid 30982] [client 45.146.54.136:35973] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 18:23:15.669014 2026] [proxy_fcgi:error] [pid 31053:tid 31075] [client 216.73.163.117:40349] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 18:32:43.442295 2026] [:error] [pid 31053:tid 31078] [client 216.73.163.152:29363] [client 216.73.163.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.152, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9pSxcEkLCmvF0fjDeWhgAAAJY"]
[Wed Apr 15 18:32:43.442298 2026] [:error] [pid 31053:tid 31072] [client 216.73.163.137:47035] [client 216.73.163.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.137, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9pSxcEkLCmvF0fjDeWhwAAAJA"]
[Wed Apr 15 18:32:44.919309 2026] [proxy_fcgi:error] [pid 31053:tid 31078] [client 216.73.163.152:29363] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 18:32:44.983807 2026] [proxy_fcgi:error] [pid 31053:tid 31072] [client 216.73.163.137:47035] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 18:42:19.940859 2026] [:error] [pid 37370:tid 37376] [client 216.73.163.154:26557] [client 216.73.163.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.154, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9ri3g-gnM2Ga0cGADwUgAAAQQ"]
[Wed Apr 15 18:42:19.947770 2026] [:error] [pid 37370:tid 37387] [client 45.146.54.138:21533] [client 45.146.54.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.138, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9ri3g-gnM2Ga0cGADwUwAAAQ8"]
[Wed Apr 15 18:42:20.063216 2026] [proxy_fcgi:error] [pid 37370:tid 37376] [client 216.73.163.154:26557] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 18:42:20.063591 2026] [proxy_fcgi:error] [pid 37370:tid 37387] [client 45.146.54.138:21533] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 18:51:55.876629 2026] [:error] [pid 37370:tid 37388] [client 216.73.163.129:29385] [client 216.73.163.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.129, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9ty3g-gnM2Ga0cGAD1NQAAARA"]
[Wed Apr 15 18:51:55.876662 2026] [:error] [pid 30958:tid 31023] [client 216.73.163.157:50243] [client 216.73.163.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.157, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9ty8eG3wSKTO7NWFGFOwAAAMc"]
[Wed Apr 15 18:51:56.027786 2026] [proxy_fcgi:error] [pid 30958:tid 31023] [client 216.73.163.157:50243] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 18:51:56.104607 2026] [proxy_fcgi:error] [pid 37370:tid 37388] [client 216.73.163.129:29385] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 19:01:35.253518 2026] [:error] [pid 37370:tid 37380] [client 216.73.163.156:20423] [client 216.73.163.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.156, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9wD3g-gnM2Ga0cGAD7EgAAAQg"]
[Wed Apr 15 19:01:35.254198 2026] [:error] [pid 30957:tid 31009] [client 216.73.163.122:46839] [client 216.73.163.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.122, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9wD35gwVEVXHfVSiprKQAAAFQ"]
[Wed Apr 15 19:01:35.328080 2026] [proxy_fcgi:error] [pid 37370:tid 37380] [client 216.73.163.156:20423] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 19:01:35.394065 2026] [proxy_fcgi:error] [pid 30957:tid 31009] [client 216.73.163.122:46839] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 19:11:08.462621 2026] [:error] [pid 37370:tid 37396] [client 216.73.163.153:62665] [client 216.73.163.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.153, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9yTHg-gnM2Ga0cGAAABAAAARg"]
[Wed Apr 15 19:11:08.462704 2026] [:error] [pid 30958:tid 31022] [client 216.73.163.121:50413] [client 216.73.163.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.121, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9yTMeG3wSKTO7NWFGKngAAAMY"]
[Wed Apr 15 19:11:08.617063 2026] [proxy_fcgi:error] [pid 37370:tid 37396] [client 216.73.163.153:62665] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 19:11:08.900415 2026] [proxy_fcgi:error] [pid 30958:tid 31022] [client 216.73.163.121:50413] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 19:20:41.326351 2026] [:error] [pid 37370:tid 37382] [client 216.73.163.151:43541] [client 216.73.163.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.151, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad90iXg-gnM2Ga0cGAAHuwAAAQo"]
[Wed Apr 15 19:20:41.326651 2026] [:error] [pid 37370:tid 37376] [client 216.73.163.116:49821] [client 216.73.163.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.116, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad90iXg-gnM2Ga0cGAAHvAAAAQQ"]
[Wed Apr 15 19:20:41.453557 2026] [proxy_fcgi:error] [pid 37370:tid 37382] [client 216.73.163.151:43541] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 19:20:41.511777 2026] [proxy_fcgi:error] [pid 37370:tid 37376] [client 216.73.163.116:49821] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 19:30:23.075777 2026] [:error] [pid 30956:tid 30973] [client 216.73.163.136:64927] [client 216.73.163.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.136, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad92z0BGUpjaWntNYq1juQAAAA0"]
[Wed Apr 15 19:30:23.076930 2026] [:error] [pid 30958:tid 31030] [client 216.73.163.149:24151] [client 216.73.163.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.149, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad92z8eG3wSKTO7NWFGQhQAAAM4"]
[Wed Apr 15 19:30:23.218332 2026] [proxy_fcgi:error] [pid 30958:tid 31030] [client 216.73.163.149:24151] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 19:30:23.291541 2026] [proxy_fcgi:error] [pid 30956:tid 30973] [client 216.73.163.136:64927] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 19:39:59.609879 2026] [:error] [pid 30958:tid 31019] [client 216.73.163.149:23759] [client 216.73.163.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.149, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad95D8eG3wSKTO7NWFGTQQAAAMM"]
[Wed Apr 15 19:39:59.611508 2026] [:error] [pid 30958:tid 31033] [client 216.73.163.119:33971] [client 216.73.163.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.119, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad95D8eG3wSKTO7NWFGTQgAAANE"]
[Wed Apr 15 19:39:59.741514 2026] [proxy_fcgi:error] [pid 30958:tid 31033] [client 216.73.163.119:33971] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 19:39:59.741567 2026] [proxy_fcgi:error] [pid 30958:tid 31019] [client 216.73.163.149:23759] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 19:49:45.010672 2026] [:error] [pid 30956:tid 30960] [client 216.73.163.121:27111] [client 216.73.163.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.121, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad97WUBGUpjaWntNYq1n0wAAAAA"]
[Wed Apr 15 19:49:45.011168 2026] [:error] [pid 37370:tid 37380] [client 216.73.163.149:62711] [client 216.73.163.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.149, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad97WXg-gnM2Ga0cGAAcBgAAAQg"]
[Wed Apr 15 19:49:45.344592 2026] [proxy_fcgi:error] [pid 30956:tid 30960] [client 216.73.163.121:27111] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 19:49:45.816687 2026] [proxy_fcgi:error] [pid 37370:tid 37380] [client 216.73.163.149:62711] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 19:59:21.605155 2026] [:error] [pid 31053:tid 31069] [client 216.73.163.158:21729] [client 216.73.163.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.158, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad99mRcEkLCmvF0fjDe-lwAAAI0"]
[Wed Apr 15 19:59:21.605342 2026] [:error] [pid 31053:tid 31066] [client 216.73.163.150:60161] [client 216.73.163.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.150, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad99mRcEkLCmvF0fjDe-mAAAAIo"]
[Wed Apr 15 19:59:21.736666 2026] [proxy_fcgi:error] [pid 31053:tid 31069] [client 216.73.163.158:21729] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 19:59:21.811445 2026] [proxy_fcgi:error] [pid 31053:tid 31066] [client 216.73.163.150:60161] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 20:09:23.134829 2026] [:error] [pid 30957:tid 31010] [client 45.131.194.122:38361] [client 45.131.194.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.122, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9_835gwVEVXHfVSip9pAAAAFU"]
[Wed Apr 15 20:09:23.137268 2026] [:error] [pid 30958:tid 31017] [client 216.73.163.152:45585] [client 216.73.163.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.152, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad9_88eG3wSKTO7NWFGdaQAAAME"]
[Wed Apr 15 20:09:23.232101 2026] [proxy_fcgi:error] [pid 30957:tid 31010] [client 45.131.194.122:38361] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 20:09:23.233857 2026] [proxy_fcgi:error] [pid 30958:tid 31017] [client 216.73.163.152:45585] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 20:19:08.831538 2026] [:error] [pid 30957:tid 30990] [client 216.73.163.154:38287] [client 216.73.163.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.154, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad-CPH5gwVEVXHfVSiqANQAAAEE"]
[Wed Apr 15 20:19:08.833305 2026] [:error] [pid 31053:tid 31060] [client 216.73.163.139:59721] [client 216.73.163.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.139, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad-CPBcEkLCmvF0fjDfIcQAAAIQ"]
[Wed Apr 15 20:19:08.977849 2026] [proxy_fcgi:error] [pid 30957:tid 30990] [client 216.73.163.154:38287] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 20:19:08.977868 2026] [proxy_fcgi:error] [pid 31053:tid 31060] [client 216.73.163.139:59721] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 20:28:49.718354 2026] [:error] [pid 30957:tid 30999] [client 216.73.163.149:41153] [client 216.73.163.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.149, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad-EgX5gwVEVXHfVSiqDIAAAAEo"]
[Wed Apr 15 20:28:49.719660 2026] [:error] [pid 31053:tid 31067] [client 216.73.163.129:48897] [client 216.73.163.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.129, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad-EgRcEkLCmvF0fjDfNlQAAAIs"]
[Wed Apr 15 20:28:49.849701 2026] [proxy_fcgi:error] [pid 31053:tid 31067] [client 216.73.163.129:48897] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 20:28:49.851332 2026] [proxy_fcgi:error] [pid 30957:tid 30999] [client 216.73.163.149:41153] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:33.387749 2026] [proxy_fcgi:error] [pid 31053:tid 31077] [client 158.158.105.128:14362] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:34.503823 2026] [proxy_fcgi:error] [pid 31053:tid 31068] [client 158.158.105.128:14358] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:37.018903 2026] [proxy_fcgi:error] [pid 31053:tid 31058] [client 158.158.105.128:15806] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:37.699045 2026] [proxy_fcgi:error] [pid 31053:tid 31061] [client 158.158.105.128:10821] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:38.444113 2026] [proxy_fcgi:error] [pid 31053:tid 31074] [client 158.158.105.128:12893] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:39.140411 2026] [proxy_fcgi:error] [pid 30958:tid 31029] [client 158.158.105.128:14364] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:40.201251 2026] [proxy_fcgi:error] [pid 30958:tid 31030] [client 158.158.105.128:10876] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:41.129451 2026] [proxy_fcgi:error] [pid 23913:tid 23935] [client 158.158.105.128:18006] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:42.287019 2026] [proxy_fcgi:error] [pid 30957:tid 31011] [client 158.158.105.128:9157] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:43.534199 2026] [:error] [pid 31053:tid 31070] [client 158.158.105.128:16074] [client 158.158.105.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ad-fMxcEkLCmvF0fjDcm3gAAAI4"]
[Wed Apr 15 22:22:44.437896 2026] [proxy_fcgi:error] [pid 37370:tid 37391] [client 158.158.105.128:18026] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:45.470781 2026] [proxy_fcgi:error] [pid 37370:tid 37383] [client 158.158.105.128:14330] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:46.297966 2026] [proxy_fcgi:error] [pid 31053:tid 31058] [client 158.158.105.128:8784] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:47.410419 2026] [proxy_fcgi:error] [pid 30957:tid 30990] [client 158.158.105.128:13457] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:48.409105 2026] [proxy_fcgi:error] [pid 30957:tid 31004] [client 158.158.105.128:13132] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:49.294423 2026] [proxy_fcgi:error] [pid 31053:tid 31064] [client 158.158.105.128:15242] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:50.247871 2026] [proxy_fcgi:error] [pid 30956:tid 30980] [client 158.158.105.128:12923] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:50.892606 2026] [proxy_fcgi:error] [pid 30956:tid 30967] [client 158.158.105.128:13145] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:51.570279 2026] [proxy_fcgi:error] [pid 31053:tid 31070] [client 158.158.105.128:10488] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:53.338342 2026] [proxy_fcgi:error] [pid 30957:tid 30990] [client 158.158.105.128:8819] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:54.661116 2026] [proxy_fcgi:error] [pid 23913:tid 23919] [client 158.158.105.128:10026] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:56.188744 2026] [proxy_fcgi:error] [pid 23913:tid 23938] [client 158.158.105.128:8856] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:58.015657 2026] [proxy_fcgi:error] [pid 31053:tid 31066] [client 158.158.105.128:8842] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:22:59.850525 2026] [proxy_fcgi:error] [pid 37370:tid 37386] [client 158.158.105.128:8878] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:23:01.068345 2026] [proxy_fcgi:error] [pid 37370:tid 37379] [client 158.158.105.128:11875] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:23:02.068372 2026] [proxy_fcgi:error] [pid 37370:tid 37374] [client 158.158.105.128:7832] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:23:03.055544 2026] [:error] [pid 30957:tid 30995] [client 158.158.105.128:7861] [client 158.158.105.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/tiny.php"] [unique_id "ad-fR35gwVEVXHfVSiqz8AAAAEY"]
[Wed Apr 15 22:23:04.474634 2026] [proxy_fcgi:error] [pid 30958:tid 31018] [client 158.158.105.128:7857] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:23:05.541554 2026] [proxy_fcgi:error] [pid 37370:tid 37395] [client 158.158.105.128:11710] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:23:06.672830 2026] [proxy_fcgi:error] [pid 31053:tid 31069] [client 158.158.105.128:14517] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:23:09.211483 2026] [proxy_fcgi:error] [pid 23913:tid 23921] [client 158.158.105.128:8847] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:23:10.736022 2026] [proxy_fcgi:error] [pid 37370:tid 37380] [client 158.158.105.128:46070] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:23:15.159707 2026] [proxy_fcgi:error] [pid 30958:tid 31034] [client 158.158.105.128:13821] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:23:16.117617 2026] [proxy_fcgi:error] [pid 30958:tid 31029] [client 158.158.105.128:10142] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:23:17.263155 2026] [proxy_fcgi:error] [pid 31053:tid 31063] [client 158.158.105.128:13279] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:23:18.270070 2026] [proxy_fcgi:error] [pid 31053:tid 31073] [client 158.158.105.128:11873] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:23:19.178529 2026] [proxy_fcgi:error] [pid 30956:tid 30962] [client 158.158.105.128:16008] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:23:20.448176 2026] [:error] [pid 30958:tid 31038] [client 158.158.105.128:10116] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/roksad1.php"] [unique_id "ad-fWMeG3wSKTO7NWFHcBQAAANY"]
[Wed Apr 15 22:23:21.043949 2026] [:error] [pid 31053:tid 31072] [client 158.158.105.128:14944] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/roksad1.php"] [unique_id "ad-fWRcEkLCmvF0fjDcnOAAAAJA"]
[Wed Apr 15 22:23:22.216339 2026] [:error] [pid 31053:tid 31080] [client 158.158.105.128:9513] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/roksad1.php"] [unique_id "ad-fWhcEkLCmvF0fjDcnPAAAAJg"]
[Wed Apr 15 22:23:23.023268 2026] [:error] [pid 30958:tid 31036] [client 158.158.105.128:16055] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/roksad1.php"] [unique_id "ad-fW8eG3wSKTO7NWFHcBwAAANQ"]
[Wed Apr 15 22:23:23.649933 2026] [:error] [pid 31053:tid 31062] [client 158.158.105.128:16862] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wmore1.php"] [unique_id "ad-fWxcEkLCmvF0fjDcnRAAAAIY"]
[Wed Apr 15 22:23:24.317161 2026] [:error] [pid 37370:tid 37396] [client 158.158.105.128:16134] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wmore1.php"] [unique_id "ad-fXHg-gnM2Ga0cGACT4QAAARg"]
[Wed Apr 15 22:23:25.141765 2026] [:error] [pid 30957:tid 30991] [client 158.158.105.128:16023] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wmore1.php"] [unique_id "ad-fXX5gwVEVXHfVSiqz-QAAAEI"]
[Wed Apr 15 22:23:25.746779 2026] [:error] [pid 30958:tid 31029] [client 158.158.105.128:2382] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wmore1.php"] [unique_id "ad-fXceG3wSKTO7NWFHcCgAAAM0"]
[Wed Apr 15 22:23:26.613913 2026] [:error] [pid 31053:tid 31078] [client 158.158.105.128:8345] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/adminfuns.php"] [unique_id "ad-fXhcEkLCmvF0fjDcnUQAAAJY"]
[Wed Apr 15 22:23:27.408935 2026] [:error] [pid 23913:tid 23917] [client 158.158.105.128:14020] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/adminfuns.php"] [unique_id "ad-fX1UaK3MLdSaLOyjCpwAAAUI"]
[Wed Apr 15 22:23:28.071545 2026] [:error] [pid 31053:tid 31059] [client 158.158.105.128:7214] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/adminfuns.php"] [unique_id "ad-fYBcEkLCmvF0fjDcnWgAAAIM"]
[Wed Apr 15 22:23:30.152717 2026] [:error] [pid 31053:tid 31060] [client 158.158.105.128:8348] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/adminfuns.php"] [unique_id "ad-fYhcEkLCmvF0fjDcnYgAAAIQ"]
[Wed Apr 15 22:23:31.882097 2026] [:error] [pid 30956:tid 30971] [client 158.158.105.128:2404] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "ad-fY0BGUpjaWntNYq2aGQAAAAs"]
[Wed Apr 15 22:23:33.582702 2026] [:error] [pid 30956:tid 30984] [client 158.158.105.128:2399] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "ad-fZUBGUpjaWntNYq2aHQAAABg"]
[Wed Apr 15 22:23:34.721354 2026] [:error] [pid 23913:tid 23935] [client 158.158.105.128:8356] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "ad-fZlUaK3MLdSaLOyjCsgAAAVQ"]
[Wed Apr 15 22:23:35.689228 2026] [:error] [pid 37370:tid 37382] [client 158.158.105.128:16026] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "ad-fZ3g-gnM2Ga0cGACT-AAAAQo"]
[Wed Apr 15 22:23:36.762269 2026] [:error] [pid 30958:tid 31017] [client 158.158.105.128:7584] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/dass.php"] [unique_id "ad-faMeG3wSKTO7NWFHcMQAAAME"]
[Wed Apr 15 22:23:38.476916 2026] [:error] [pid 31053:tid 31061] [client 158.158.105.128:9487] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/dass.php"] [unique_id "ad-fahcEkLCmvF0fjDcndQAAAIU"]
[Wed Apr 15 22:23:40.717775 2026] [:error] [pid 30957:tid 30996] [client 158.158.105.128:9477] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/dass.php"] [unique_id "ad-fbH5gwVEVXHfVSiq0BwAAAEc"]
[Wed Apr 15 22:23:41.827636 2026] [:error] [pid 23913:tid 23938] [client 158.158.105.128:12566] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/dass.php"] [unique_id "ad-fbVUaK3MLdSaLOyjCvAAAAVc"]
[Wed Apr 15 22:23:42.658392 2026] [:error] [pid 31053:tid 31079] [client 158.158.105.128:2949] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/db.php"] [unique_id "ad-fbhcEkLCmvF0fjDcnggAAAJc"]
[Wed Apr 15 22:23:43.968689 2026] [:error] [pid 31053:tid 31078] [client 158.158.105.128:2387] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/db.php"] [unique_id "ad-fbxcEkLCmvF0fjDcnhQAAAJY"]
[Wed Apr 15 22:23:44.923546 2026] [:error] [pid 31053:tid 31056] [client 158.158.105.128:8527] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/db.php"] [unique_id "ad-fcBcEkLCmvF0fjDcnjgAAAIA"]
[Wed Apr 15 22:23:46.493580 2026] [:error] [pid 31053:tid 31077] [client 158.158.105.128:14764] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/db.php"] [unique_id "ad-fchcEkLCmvF0fjDcnmwAAAJU"]
[Wed Apr 15 22:23:47.054819 2026] [:error] [pid 23913:tid 23930] [client 158.158.105.128:9776] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/less.php"] [unique_id "ad-fc1UaK3MLdSaLOyjCxgAAAU8"]
[Wed Apr 15 22:23:48.123075 2026] [:error] [pid 30958:tid 31028] [client 158.158.105.128:9148] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/less.php"] [unique_id "ad-fdMeG3wSKTO7NWFHcYQAAAMw"]
[Wed Apr 15 22:23:48.874954 2026] [:error] [pid 30957:tid 31012] [client 158.158.105.128:16927] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/less.php"] [unique_id "ad-fdH5gwVEVXHfVSiq0FAAAAFc"]
[Wed Apr 15 22:23:50.178191 2026] [:error] [pid 37370:tid 37396] [client 158.158.105.128:7599] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/less.php"] [unique_id "ad-fdng-gnM2Ga0cGACUCAAAARg"]
[Wed Apr 15 22:23:51.059959 2026] [:error] [pid 30958:tid 31034] [client 158.158.105.128:18500] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws86.php"] [unique_id "ad-fd8eG3wSKTO7NWFHcbgAAANI"]
[Wed Apr 15 22:23:51.965868 2026] [:error] [pid 31053:tid 31067] [client 158.158.105.128:2993] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws86.php"] [unique_id "ad-fdxcEkLCmvF0fjDcnrwAAAIs"]
[Wed Apr 15 22:23:52.759609 2026] [:error] [pid 30956:tid 30966] [client 158.158.105.128:18535] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws86.php"] [unique_id "ad-feEBGUpjaWntNYq2aKwAAAAY"]
[Wed Apr 15 22:23:53.391605 2026] [:error] [pid 31053:tid 31064] [client 158.158.105.128:18555] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws86.php"] [unique_id "ad-feRcEkLCmvF0fjDcntQAAAIg"]
[Wed Apr 15 22:23:54.282691 2026] [:error] [pid 30958:tid 31020] [client 158.158.105.128:55289] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/maxro.php"] [unique_id "ad-feseG3wSKTO7NWFHcgwAAAMQ"]
[Wed Apr 15 22:23:54.885898 2026] [:error] [pid 37370:tid 37374] [client 158.158.105.128:12554] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/maxro.php"] [unique_id "ad-feng-gnM2Ga0cGACUDQAAAQI"]
[Wed Apr 15 22:23:55.869855 2026] [:error] [pid 31053:tid 31067] [client 158.158.105.128:17058] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/maxro.php"] [unique_id "ad-fexcEkLCmvF0fjDcntwAAAIs"]
[Wed Apr 15 22:23:57.262154 2026] [:error] [pid 31053:tid 31066] [client 158.158.105.128:17068] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/maxro.php"] [unique_id "ad-ffRcEkLCmvF0fjDcnvwAAAIo"]
[Wed Apr 15 22:23:58.354094 2026] [:error] [pid 31053:tid 31057] [client 158.158.105.128:2970] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "ad-ffhcEkLCmvF0fjDcnxwAAAIE"]
[Wed Apr 15 22:23:59.417561 2026] [:error] [pid 30957:tid 30991] [client 158.158.105.128:16954] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "ad-ff35gwVEVXHfVSiq0KAAAAEI"]
[Wed Apr 15 22:24:04.133395 2026] [:error] [pid 37370:tid 37386] [client 158.158.105.128:14632] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "ad-fhHg-gnM2Ga0cGACUHwAAAQ4"]
[Wed Apr 15 22:24:05.171997 2026] [:error] [pid 30958:tid 31028] [client 158.158.105.128:16617] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "ad-fhceG3wSKTO7NWFHcnAAAAMw"]
[Wed Apr 15 22:24:06.022061 2026] [:error] [pid 30956:tid 30974] [client 158.158.105.128:12651] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad-fhkBGUpjaWntNYq2aPwAAAA4"]
[Wed Apr 15 22:24:06.778929 2026] [:error] [pid 30957:tid 31001] [client 158.158.105.128:7970] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad-fhn5gwVEVXHfVSiq0NgAAAEw"]
[Wed Apr 15 22:24:07.556953 2026] [:error] [pid 30957:tid 30992] [client 158.158.105.128:9022] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad-fh35gwVEVXHfVSiq0OgAAAEM"]
[Wed Apr 15 22:24:08.440949 2026] [:error] [pid 37370:tid 37387] [client 158.158.105.128:15985] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad-fiHg-gnM2Ga0cGACULAAAAQ8"]
[Wed Apr 15 22:24:09.657951 2026] [:error] [pid 30958:tid 31031] [client 158.158.105.128:16578] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bdktk.php"] [unique_id "ad-ficeG3wSKTO7NWFHcowAAAM8"]
[Wed Apr 15 22:24:10.681342 2026] [:error] [pid 30958:tid 31028] [client 158.158.105.128:9139] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bdktk.php"] [unique_id "ad-fiseG3wSKTO7NWFHcqgAAAMw"]
[Wed Apr 15 22:24:11.605805 2026] [:error] [pid 30958:tid 31017] [client 158.158.105.128:15947] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bdktk.php"] [unique_id "ad-fi8eG3wSKTO7NWFHcrgAAAME"]
[Wed Apr 15 22:24:12.457650 2026] [:error] [pid 30956:tid 30978] [client 158.158.105.128:10781] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bdktk.php"] [unique_id "ad-fjEBGUpjaWntNYq2aRAAAABI"]
[Wed Apr 15 22:24:13.269911 2026] [:error] [pid 30956:tid 30961] [client 158.158.105.128:12756] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/v5.php"] [unique_id "ad-fjUBGUpjaWntNYq2aRQAAAAE"]
[Wed Apr 15 22:24:13.877033 2026] [:error] [pid 30957:tid 30994] [client 158.158.105.128:9780] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/v5.php"] [unique_id "ad-fjX5gwVEVXHfVSiq0RQAAAEU"]
[Wed Apr 15 22:24:14.828195 2026] [:error] [pid 37370:tid 37372] [client 158.158.105.128:12764] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/v5.php"] [unique_id "ad-fjng-gnM2Ga0cGACUPgAAAQA"]
[Wed Apr 15 22:24:15.792924 2026] [:error] [pid 30956:tid 30963] [client 158.158.105.128:19362] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/v5.php"] [unique_id "ad-fj0BGUpjaWntNYq2aSwAAAAM"]
[Wed Apr 15 22:24:16.653432 2026] [:error] [pid 30956:tid 30976] [client 158.158.105.128:14713] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws85.php"] [unique_id "ad-fkEBGUpjaWntNYq2aTgAAABA"]
[Wed Apr 15 22:24:17.523958 2026] [:error] [pid 30957:tid 31011] [client 158.158.105.128:10533] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws85.php"] [unique_id "ad-fkX5gwVEVXHfVSiq0SQAAAFY"]
[Wed Apr 15 22:24:18.514537 2026] [:error] [pid 30958:tid 31037] [client 158.158.105.128:16582] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws85.php"] [unique_id "ad-fkseG3wSKTO7NWFHctwAAANU"]
[Wed Apr 15 22:24:19.573581 2026] [proxy_fcgi:error] [pid 31053:tid 31074] [client 158.158.105.128:2722] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:24:20.722834 2026] [proxy_fcgi:error] [pid 31053:tid 31079] [client 158.158.105.128:17288] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:24:21.511928 2026] [proxy_fcgi:error] [pid 37370:tid 37389] [client 158.158.105.128:16599] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:24:23.264084 2026] [proxy_fcgi:error] [pid 23913:tid 23928] [client 158.158.105.128:11393] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:24:24.742630 2026] [proxy_fcgi:error] [pid 30957:tid 31002] [client 158.158.105.128:14714] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:24:26.028091 2026] [proxy_fcgi:error] [pid 23913:tid 23927] [client 158.158.105.128:10755] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:24:27.250592 2026] [proxy_fcgi:error] [pid 30956:tid 30967] [client 158.158.105.128:9033] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:24:28.333316 2026] [proxy_fcgi:error] [pid 30958:tid 31027] [client 158.158.105.128:2659] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:24:29.298973 2026] [proxy_fcgi:error] [pid 37370:tid 37373] [client 158.158.105.128:17356] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:24:31.114624 2026] [proxy_fcgi:error] [pid 37370:tid 37388] [client 158.158.105.128:13709] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:24:32.726719 2026] [:error] [pid 30957:tid 30998] [client 158.158.105.128:2679] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gz.php"] [unique_id "ad-foH5gwVEVXHfVSiq0hAAAAEk"]
[Wed Apr 15 22:24:34.131738 2026] [:error] [pid 23913:tid 23920] [client 158.158.105.128:10254] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gz.php"] [unique_id "ad-folUaK3MLdSaLOyjDGAAAAUU"]
[Wed Apr 15 22:24:35.102835 2026] [:error] [pid 37370:tid 37387] [client 158.158.105.128:7323] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gz.php"] [unique_id "ad-fo3g-gnM2Ga0cGACUWQAAAQ8"]
[Wed Apr 15 22:24:35.845424 2026] [:error] [pid 37370:tid 37390] [client 158.158.105.128:14096] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gz.php"] [unique_id "ad-fo3g-gnM2Ga0cGACUWwAAARI"]
[Wed Apr 15 22:24:38.086188 2026] [:error] [pid 30956:tid 30967] [client 158.158.105.128:13894] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gelio1.php"] [unique_id "ad-fpkBGUpjaWntNYq2aYQAAAAc"]
[Wed Apr 15 22:24:38.939377 2026] [:error] [pid 37370:tid 37378] [client 158.158.105.128:2644] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gelio1.php"] [unique_id "ad-fpng-gnM2Ga0cGACUZAAAAQY"]
[Wed Apr 15 22:24:39.740895 2026] [:error] [pid 37370:tid 37394] [client 158.158.105.128:11094] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gelio1.php"] [unique_id "ad-fp3g-gnM2Ga0cGACUZgAAARY"]
[Wed Apr 15 22:24:40.535714 2026] [:error] [pid 30958:tid 31036] [client 158.158.105.128:2484] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/gelio1.php"] [unique_id "ad-fqMeG3wSKTO7NWFHc0AAAANQ"]
[Wed Apr 15 22:24:41.074731 2026] [:error] [pid 37370:tid 37372] [client 158.158.105.128:18392] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/areak1.php"] [unique_id "ad-fqXg-gnM2Ga0cGACUbQAAAQA"]
[Wed Apr 15 22:24:41.673644 2026] [:error] [pid 37370:tid 37380] [client 158.158.105.128:14107] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/areak1.php"] [unique_id "ad-fqXg-gnM2Ga0cGACUcAAAAQg"]
[Wed Apr 15 22:24:42.336346 2026] [:error] [pid 37370:tid 37384] [client 158.158.105.128:19630] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/areak1.php"] [unique_id "ad-fqng-gnM2Ga0cGACUdQAAAQw"]
[Wed Apr 15 22:24:42.967644 2026] [:error] [pid 31053:tid 31077] [client 158.158.105.128:18868] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/areak1.php"] [unique_id "ad-fqhcEkLCmvF0fjDcoJwAAAJU"]
[Wed Apr 15 22:24:43.772621 2026] [:error] [pid 31053:tid 31078] [client 158.158.105.128:18427] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/qqa.php"] [unique_id "ad-fqxcEkLCmvF0fjDcoLgAAAJY"]
[Wed Apr 15 22:24:44.688006 2026] [:error] [pid 30958:tid 31032] [client 158.158.105.128:19597] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/qqa.php"] [unique_id "ad-frMeG3wSKTO7NWFHc1gAAANA"]
[Wed Apr 15 22:24:45.397668 2026] [:error] [pid 30958:tid 31036] [client 158.158.105.128:17975] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/qqa.php"] [unique_id "ad-frceG3wSKTO7NWFHc2QAAANQ"]
[Wed Apr 15 22:24:46.472863 2026] [:error] [pid 31053:tid 31067] [client 158.158.105.128:13948] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/qqa.php"] [unique_id "ad-frhcEkLCmvF0fjDcoNAAAAIs"]
[Wed Apr 15 22:24:47.143970 2026] [:error] [pid 30957:tid 30997] [client 158.158.105.128:13947] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/dx.php"] [unique_id "ad-fr35gwVEVXHfVSiq0vwAAAEg"]
[Wed Apr 15 22:24:48.144188 2026] [:error] [pid 37370:tid 37385] [client 158.158.105.128:8165] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/dx.php"] [unique_id "ad-fsHg-gnM2Ga0cGACUhgAAAQ0"]
[Wed Apr 15 22:24:48.898279 2026] [:error] [pid 37370:tid 37378] [client 158.158.105.128:19621] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/dx.php"] [unique_id "ad-fsHg-gnM2Ga0cGACUhwAAAQY"]
[Wed Apr 15 22:24:49.691465 2026] [:error] [pid 31053:tid 31065] [client 158.158.105.128:2655] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/dx.php"] [unique_id "ad-fsRcEkLCmvF0fjDcoOgAAAIk"]
[Wed Apr 15 22:24:50.342172 2026] [:error] [pid 23913:tid 23933] [client 158.158.105.128:7899] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ga.php"] [unique_id "ad-fslUaK3MLdSaLOyjDHAAAAVI"]
[Wed Apr 15 22:24:51.297812 2026] [:error] [pid 23913:tid 23928] [client 158.158.105.128:10295] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ga.php"] [unique_id "ad-fs1UaK3MLdSaLOyjDHwAAAU0"]
[Wed Apr 15 22:24:51.923347 2026] [:error] [pid 30958:tid 31023] [client 158.158.105.128:8130] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ga.php"] [unique_id "ad-fs8eG3wSKTO7NWFHc3QAAAMc"]
[Wed Apr 15 22:24:52.543961 2026] [:error] [pid 30958:tid 31027] [client 158.158.105.128:17942] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ga.php"] [unique_id "ad-ftMeG3wSKTO7NWFHc4AAAAMs"]
[Wed Apr 15 22:24:53.115391 2026] [:error] [pid 31053:tid 31076] [client 158.158.105.128:14402] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xozx.php"] [unique_id "ad-ftRcEkLCmvF0fjDcoRAAAAJQ"]
[Wed Apr 15 22:24:54.130074 2026] [:error] [pid 30956:tid 30976] [client 158.158.105.128:17621] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xozx.php"] [unique_id "ad-ftkBGUpjaWntNYq2afQAAABA"]
[Wed Apr 15 22:24:54.709161 2026] [:error] [pid 31053:tid 31070] [client 158.158.105.128:14441] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xozx.php"] [unique_id "ad-fthcEkLCmvF0fjDcoTQAAAI4"]
[Wed Apr 15 22:24:55.494681 2026] [:error] [pid 30956:tid 30972] [client 158.158.105.128:12463] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xozx.php"] [unique_id "ad-ft0BGUpjaWntNYq2ahgAAAAw"]
[Wed Apr 15 22:24:56.203370 2026] [:error] [pid 30957:tid 31009] [client 158.158.105.128:14454] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/1100.php"] [unique_id "ad-fuH5gwVEVXHfVSiq02wAAAFQ"]
[Wed Apr 15 22:24:57.026695 2026] [:error] [pid 31053:tid 31076] [client 158.158.105.128:17602] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/1100.php"] [unique_id "ad-fuRcEkLCmvF0fjDcoVQAAAJQ"]
[Wed Apr 15 22:24:57.550864 2026] [:error] [pid 30957:tid 31006] [client 158.158.105.128:13932] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/1100.php"] [unique_id "ad-fuX5gwVEVXHfVSiq03AAAAFE"]
[Wed Apr 15 22:24:58.351204 2026] [:error] [pid 31053:tid 31074] [client 158.158.105.128:7353] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/1100.php"] [unique_id "ad-fuhcEkLCmvF0fjDcoWgAAAJI"]
[Wed Apr 15 22:24:58.954381 2026] [:error] [pid 31053:tid 31068] [client 158.158.105.128:8185] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/press.php"] [unique_id "ad-fuhcEkLCmvF0fjDcoXgAAAIw"]
[Wed Apr 15 22:24:59.863525 2026] [:error] [pid 31053:tid 31079] [client 158.158.105.128:12472] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/press.php"] [unique_id "ad-fuxcEkLCmvF0fjDcoYgAAAJc"]
[Wed Apr 15 22:25:00.707832 2026] [:error] [pid 23913:tid 23927] [client 158.158.105.128:15705] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/press.php"] [unique_id "ad-fvFUaK3MLdSaLOyjDMgAAAUw"]
[Wed Apr 15 22:25:01.442959 2026] [:error] [pid 23913:tid 23917] [client 158.158.105.128:2938] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/press.php"] [unique_id "ad-fvVUaK3MLdSaLOyjDNgAAAUI"]
[Wed Apr 15 22:25:02.080372 2026] [:error] [pid 30957:tid 31008] [client 158.158.105.128:7901] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/f35.php"] [unique_id "ad-fvn5gwVEVXHfVSiq04QAAAFM"]
[Wed Apr 15 22:25:02.714852 2026] [:error] [pid 30956:tid 30984] [client 158.158.105.128:19619] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/f35.php"] [unique_id "ad-fvkBGUpjaWntNYq2aqgAAABg"]
[Wed Apr 15 22:25:03.377057 2026] [:error] [pid 30956:tid 30981] [client 158.158.105.128:17967] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/f35.php"] [unique_id "ad-fv0BGUpjaWntNYq2arAAAABU"]
[Wed Apr 15 22:25:04.093558 2026] [:error] [pid 31053:tid 31070] [client 158.158.105.128:2918] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/f35.php"] [unique_id "ad-fwBcEkLCmvF0fjDcobQAAAI4"]
[Wed Apr 15 22:25:04.670472 2026] [:error] [pid 23913:tid 23925] [client 158.158.105.128:15729] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-kz.php"] [unique_id "ad-fwFUaK3MLdSaLOyjDPQAAAUo"]
[Wed Apr 15 22:25:05.663626 2026] [:error] [pid 37370:tid 37395] [client 158.158.105.128:2460] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-kz.php"] [unique_id "ad-fwXg-gnM2Ga0cGACU8AAAARc"]
[Wed Apr 15 22:25:06.189996 2026] [:error] [pid 31053:tid 31080] [client 158.158.105.128:2943] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-kz.php"] [unique_id "ad-fwhcEkLCmvF0fjDcocwAAAJg"]
[Wed Apr 15 22:25:07.278133 2026] [:error] [pid 30958:tid 31029] [client 158.158.105.128:17850] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-kz.php"] [unique_id "ad-fw8eG3wSKTO7NWFHc8AAAAM0"]
[Wed Apr 15 22:25:08.007232 2026] [:error] [pid 30957:tid 31000] [client 158.158.105.128:17625] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-lo.php"] [unique_id "ad-fxH5gwVEVXHfVSiq05QAAAEs"]
[Wed Apr 15 22:25:08.849376 2026] [:error] [pid 31053:tid 31073] [client 158.158.105.128:7327] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-lo.php"] [unique_id "ad-fxBcEkLCmvF0fjDcodgAAAJE"]
[Wed Apr 15 22:25:09.795872 2026] [:error] [pid 23913:tid 23937] [client 158.158.105.128:17933] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-lo.php"] [unique_id "ad-fxVUaK3MLdSaLOyjDRAAAAVY"]
[Wed Apr 15 22:25:10.685636 2026] [:error] [pid 23913:tid 23915] [client 158.158.105.128:13520] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-lo.php"] [unique_id "ad-fxlUaK3MLdSaLOyjDTAAAAUA"]
[Wed Apr 15 22:25:11.364785 2026] [:error] [pid 31053:tid 31056] [client 158.158.105.128:7889] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/fone1.php"] [unique_id "ad-fxxcEkLCmvF0fjDcogQAAAIA"]
[Wed Apr 15 22:25:12.062766 2026] [:error] [pid 31053:tid 31074] [client 158.158.105.128:18812] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/fone1.php"] [unique_id "ad-fyBcEkLCmvF0fjDcohAAAAJI"]
[Wed Apr 15 22:25:12.628753 2026] [:error] [pid 31053:tid 31076] [client 158.158.105.128:17616] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/fone1.php"] [unique_id "ad-fyBcEkLCmvF0fjDcoiQAAAJQ"]
[Wed Apr 15 22:25:13.268319 2026] [:error] [pid 37370:tid 37395] [client 158.158.105.128:17954] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/fone1.php"] [unique_id "ad-fyXg-gnM2Ga0cGACU_AAAARc"]
[Wed Apr 15 22:25:13.767300 2026] [:error] [pid 23913:tid 23915] [client 158.158.105.128:13543] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/Ipv6.php"] [unique_id "ad-fyVUaK3MLdSaLOyjDVQAAAUA"]
[Wed Apr 15 22:25:14.293334 2026] [:error] [pid 37370:tid 37381] [client 158.158.105.128:12445] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/Ipv6.php"] [unique_id "ad-fyng-gnM2Ga0cGACU_gAAAQk"]
[Wed Apr 15 22:25:14.885072 2026] [:error] [pid 37370:tid 37372] [client 158.158.105.128:18842] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/Ipv6.php"] [unique_id "ad-fyng-gnM2Ga0cGACVAAAAAQA"]
[Wed Apr 15 22:25:15.401339 2026] [:error] [pid 37370:tid 37396] [client 158.158.105.128:7315] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/Ipv6.php"] [unique_id "ad-fy3g-gnM2Ga0cGACVAQAAARg"]
[Wed Apr 15 22:25:16.166175 2026] [:error] [pid 37370:tid 37376] [client 158.158.105.128:2437] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/file-gertdxz.php"] [unique_id "ad-fzHg-gnM2Ga0cGACVBgAAAQQ"]
[Wed Apr 15 22:25:17.052403 2026] [:error] [pid 37370:tid 37394] [client 158.158.105.128:14449] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/file-gertdxz.php"] [unique_id "ad-fzXg-gnM2Ga0cGACVCgAAARY"]
[Wed Apr 15 22:25:17.760841 2026] [:error] [pid 31053:tid 31079] [client 158.158.105.128:14418] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/file-gertdxz.php"] [unique_id "ad-fzRcEkLCmvF0fjDcopAAAAJc"]
[Wed Apr 15 22:25:18.559621 2026] [:error] [pid 37370:tid 37377] [client 158.158.105.128:12431] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/file-gertdxz.php"] [unique_id "ad-fzng-gnM2Ga0cGACVDAAAAQU"]
[Wed Apr 15 22:25:19.175092 2026] [:error] [pid 37370:tid 37389] [client 158.158.105.128:14424] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xper1.php"] [unique_id "ad-fz3g-gnM2Ga0cGACVDwAAARE"]
[Wed Apr 15 22:25:20.643057 2026] [:error] [pid 37370:tid 37378] [client 158.158.105.128:2921] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xper1.php"] [unique_id "ad-f0Hg-gnM2Ga0cGACVEQAAAQY"]
[Wed Apr 15 22:25:21.675286 2026] [:error] [pid 30958:tid 31025] [client 158.158.105.128:13878] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xper1.php"] [unique_id "ad-f0ceG3wSKTO7NWFHdBQAAAMk"]
[Wed Apr 15 22:25:22.336390 2026] [:error] [pid 30956:tid 30969] [client 158.158.105.128:15536] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xper1.php"] [unique_id "ad-f0kBGUpjaWntNYq2atQAAAAk"]
[Wed Apr 15 22:25:22.931707 2026] [:error] [pid 30956:tid 30965] [client 158.158.105.128:13883] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/yuzuru1.php"] [unique_id "ad-f0kBGUpjaWntNYq2atgAAAAU"]
[Wed Apr 15 22:25:23.473662 2026] [:error] [pid 23913:tid 23925] [client 158.158.105.128:15682] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/yuzuru1.php"] [unique_id "ad-f01UaK3MLdSaLOyjDZAAAAUo"]
[Wed Apr 15 22:25:23.994901 2026] [:error] [pid 30958:tid 31019] [client 158.158.105.128:2660] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/yuzuru1.php"] [unique_id "ad-f08eG3wSKTO7NWFHdEwAAAMM"]
[Wed Apr 15 22:25:24.776725 2026] [:error] [pid 30957:tid 30989] [client 158.158.105.128:13558] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/yuzuru1.php"] [unique_id "ad-f1H5gwVEVXHfVSiq0-QAAAEA"]
[Wed Apr 15 22:25:25.751601 2026] [:error] [pid 31053:tid 31069] [client 158.158.105.128:13874] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wglum1.php"] [unique_id "ad-f1RcEkLCmvF0fjDcowgAAAI0"]
[Wed Apr 15 22:25:26.662341 2026] [:error] [pid 23913:tid 23923] [client 158.158.105.128:17939] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wglum1.php"] [unique_id "ad-f1lUaK3MLdSaLOyjDaQAAAUg"]
[Wed Apr 15 22:25:27.380667 2026] [:error] [pid 30956:tid 30962] [client 158.158.105.128:18379] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wglum1.php"] [unique_id "ad-f10BGUpjaWntNYq2awgAAAAI"]
[Wed Apr 15 22:25:27.910909 2026] [:error] [pid 23913:tid 23930] [client 158.158.105.128:19633] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wglum1.php"] [unique_id "ad-f11UaK3MLdSaLOyjDbAAAAU8"]
[Wed Apr 15 22:25:28.462685 2026] [:error] [pid 37370:tid 37393] [client 158.158.105.128:17803] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/saorix1.php"] [unique_id "ad-f2Hg-gnM2Ga0cGACVFgAAARU"]
[Wed Apr 15 22:25:29.394024 2026] [:error] [pid 37370:tid 37389] [client 158.158.105.128:11414] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/saorix1.php"] [unique_id "ad-f2Xg-gnM2Ga0cGACVGwAAARE"]
[Wed Apr 15 22:25:30.001151 2026] [:error] [pid 30958:tid 31035] [client 158.158.105.128:18877] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/saorix1.php"] [unique_id "ad-f2ceG3wSKTO7NWFHdHgAAANM"]
[Wed Apr 15 22:25:30.609905 2026] [:error] [pid 30956:tid 30963] [client 158.158.105.128:17637] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/saorix1.php"] [unique_id "ad-f2kBGUpjaWntNYq2axwAAAAM"]
[Wed Apr 15 22:25:31.363264 2026] [proxy_fcgi:error] [pid 23913:tid 23935] [client 158.158.105.128:14459] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:25:32.031998 2026] [proxy_fcgi:error] [pid 30957:tid 30994] [client 158.158.105.128:17259] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:25:32.990651 2026] [proxy_fcgi:error] [pid 31053:tid 31064] [client 158.158.105.128:13507] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:25:33.559488 2026] [proxy_fcgi:error] [pid 31053:tid 31072] [client 158.158.105.128:19639] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:25:33.861688 2026] [proxy_fcgi:error] [pid 31053:tid 31070] [client 158.158.105.128:19639] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:25:34.522039 2026] [proxy_fcgi:error] [pid 31053:tid 31058] [client 158.158.105.128:13939] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:25:35.190270 2026] [proxy_fcgi:error] [pid 37370:tid 37392] [client 158.158.105.128:13877] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:25:35.773810 2026] [proxy_fcgi:error] [pid 30957:tid 31001] [client 158.158.105.128:10784] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:25:36.387487 2026] [proxy_fcgi:error] [pid 23913:tid 23921] [client 158.158.105.128:13915] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:25:37.166961 2026] [proxy_fcgi:error] [pid 37370:tid 37391] [client 158.158.105.128:17830] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:25:37.729892 2026] [proxy_fcgi:error] [pid 23913:tid 23931] [client 158.158.105.128:11150] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:25:38.448640 2026] [proxy_fcgi:error] [pid 23913:tid 23921] [client 158.158.105.128:2661] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:25:39.210457 2026] [:error] [pid 37370:tid 37379] [client 158.158.105.128:18409] [client 158.158.105.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/wincust.php"] [unique_id "ad-f43g-gnM2Ga0cGACVMQAAAQc"]
[Wed Apr 15 22:25:39.908714 2026] [proxy_fcgi:error] [pid 37370:tid 37394] [client 158.158.105.128:11127] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:25:40.586649 2026] [proxy_fcgi:error] [pid 30956:tid 30962] [client 158.158.105.128:7354] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:25:41.253767 2026] [proxy_fcgi:error] [pid 30958:tid 31020] [client 158.158.105.128:13830] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:25:41.927450 2026] [proxy_fcgi:error] [pid 30957:tid 31013] [client 158.158.105.128:11116] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 15 22:25:42.464040 2026] [:error] [pid 30958:tid 31028] [client 158.158.105.128:11131] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws61.php"] [unique_id "ad-f5seG3wSKTO7NWFHdMAAAAMw"]
[Wed Apr 15 22:25:43.066153 2026] [:error] [pid 37370:tid 37376] [client 158.158.105.128:11427] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws61.php"] [unique_id "ad-f53g-gnM2Ga0cGACVOgAAAQQ"]
[Wed Apr 15 22:25:43.743198 2026] [:error] [pid 37370:tid 37377] [client 158.158.105.128:11437] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws61.php"] [unique_id "ad-f53g-gnM2Ga0cGACVPAAAAQU"]
[Wed Apr 15 22:25:44.269036 2026] [:error] [pid 23913:tid 23922] [client 158.158.105.128:10542] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws61.php"] [unique_id "ad-f6FUaK3MLdSaLOyjDpwAAAUc"]
[Wed Apr 15 22:25:44.850921 2026] [:error] [pid 31053:tid 31067] [client 158.158.105.128:11436] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws66.php"] [unique_id "ad-f6BcEkLCmvF0fjDco5QAAAIs"]
[Wed Apr 15 22:25:45.617295 2026] [:error] [pid 37370:tid 37381] [client 158.158.105.128:10545] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws66.php"] [unique_id "ad-f6Xg-gnM2Ga0cGACVQwAAAQk"]
[Wed Apr 15 22:25:46.267285 2026] [:error] [pid 37370:tid 37376] [client 158.158.105.128:16375] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws66.php"] [unique_id "ad-f6ng-gnM2Ga0cGACVSAAAAQQ"]
[Wed Apr 15 22:25:46.798087 2026] [:error] [pid 31053:tid 31079] [client 158.158.105.128:10512] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws66.php"] [unique_id "ad-f6hcEkLCmvF0fjDco7wAAAJc"]
[Wed Apr 15 22:25:47.574326 2026] [:error] [pid 30956:tid 30981] [client 158.158.105.128:11385] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws80.php"] [unique_id "ad-f60BGUpjaWntNYq2a1wAAABU"]
[Wed Apr 15 22:25:48.387335 2026] [:error] [pid 30957:tid 31010] [client 158.158.105.128:14684] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws80.php"] [unique_id "ad-f7H5gwVEVXHfVSiq1EgAAAFU"]
[Wed Apr 15 22:25:48.999162 2026] [:error] [pid 30957:tid 30998] [client 158.158.105.128:11108] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws80.php"] [unique_id "ad-f7H5gwVEVXHfVSiq1FgAAAEk"]
[Wed Apr 15 22:25:49.769003 2026] [:error] [pid 30956:tid 30974] [client 158.158.105.128:14109] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws80.php"] [unique_id "ad-f7UBGUpjaWntNYq2a3gAAAA4"]
[Wed Apr 15 22:25:50.534717 2026] [:error] [pid 31053:tid 31067] [client 158.158.105.128:16372] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xynz.php"] [unique_id "ad-f7hcEkLCmvF0fjDco-QAAAIs"]
[Wed Apr 15 22:25:51.331950 2026] [:error] [pid 31053:tid 31074] [client 158.158.105.128:9038] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xynz.php"] [unique_id "ad-f7xcEkLCmvF0fjDco_AAAAJI"]
[Wed Apr 15 22:25:52.159625 2026] [:error] [pid 23913:tid 23929] [client 158.158.105.128:11366] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xynz.php"] [unique_id "ad-f8FUaK3MLdSaLOyjDrwAAAU4"]
[Wed Apr 15 22:25:52.871587 2026] [:error] [pid 30957:tid 31007] [client 158.158.105.128:16328] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/xynz.php"] [unique_id "ad-f8H5gwVEVXHfVSiq1IwAAAFI"]
[Wed Apr 15 22:25:53.383166 2026] [:error] [pid 30957:tid 31012] [client 158.158.105.128:14127] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-01ul.php"] [unique_id "ad-f8X5gwVEVXHfVSiq1JQAAAFc"]
[Wed Apr 15 22:25:54.552537 2026] [:error] [pid 23913:tid 23915] [client 158.158.105.128:17403] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-01ul.php"] [unique_id "ad-f8lUaK3MLdSaLOyjDtQAAAUA"]
[Wed Apr 15 22:25:55.420251 2026] [:error] [pid 30958:tid 31040] [client 158.158.105.128:7988] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-01ul.php"] [unique_id "ad-f88eG3wSKTO7NWFHdcQAAANg"]
[Wed Apr 15 22:25:56.548845 2026] [:error] [pid 30958:tid 31027] [client 158.158.105.128:2805] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-01ul.php"] [unique_id "ad-f9MeG3wSKTO7NWFHdeQAAAMs"]
[Wed Apr 15 22:25:57.372131 2026] [:error] [pid 30956:tid 30965] [client 158.158.105.128:9076] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/e7.php"] [unique_id "ad-f9UBGUpjaWntNYq2a4QAAAAU"]
[Wed Apr 15 22:25:58.866978 2026] [:error] [pid 30958:tid 31040] [client 158.158.105.128:17404] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/e7.php"] [unique_id "ad-f9seG3wSKTO7NWFHdfwAAANg"]
[Wed Apr 15 22:25:59.643450 2026] [:error] [pid 30956:tid 30983] [client 158.158.105.128:17323] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/e7.php"] [unique_id "ad-f90BGUpjaWntNYq2a5QAAABc"]
[Wed Apr 15 22:26:00.164174 2026] [:error] [pid 30957:tid 30994] [client 158.158.105.128:11425] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/e7.php"] [unique_id "ad-f-H5gwVEVXHfVSiq1JgAAAEU"]
[Wed Apr 15 22:26:00.812779 2026] [:error] [pid 31053:tid 31058] [client 158.158.105.128:11413] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/e3.php"] [unique_id "ad-f-BcEkLCmvF0fjDcpKgAAAII"]
[Wed Apr 15 22:26:01.352297 2026] [:error] [pid 37370:tid 37382] [client 158.158.105.128:19386] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/e3.php"] [unique_id "ad-f-Xg-gnM2Ga0cGACVWwAAAQo"]
[Wed Apr 15 22:26:01.886258 2026] [:error] [pid 31053:tid 31056] [client 158.158.105.128:13382] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/e3.php"] [unique_id "ad-f-RcEkLCmvF0fjDcpMgAAAIA"]
[Wed Apr 15 22:26:02.567537 2026] [:error] [pid 23913:tid 23923] [client 158.158.105.128:16338] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/e3.php"] [unique_id "ad-f-lUaK3MLdSaLOyjDvAAAAUg"]
[Wed Apr 15 22:26:03.279442 2026] [:error] [pid 31053:tid 31071] [client 158.158.105.128:19167] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/aevly.php"] [unique_id "ad-f-xcEkLCmvF0fjDcpPgAAAI8"]
[Wed Apr 15 22:26:04.074424 2026] [:error] [pid 31053:tid 31076] [client 158.158.105.128:10529] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/aevly.php"] [unique_id "ad-f_BcEkLCmvF0fjDcpQgAAAJQ"]
[Wed Apr 15 22:26:04.577168 2026] [:error] [pid 30958:tid 31025] [client 158.158.105.128:16378] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/aevly.php"] [unique_id "ad-f_MeG3wSKTO7NWFHdiwAAAMk"]
[Wed Apr 15 22:26:05.291483 2026] [:error] [pid 30958:tid 31036] [client 158.158.105.128:9040] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/aevly.php"] [unique_id "ad-f_ceG3wSKTO7NWFHdjgAAANQ"]
[Wed Apr 15 22:26:06.278790 2026] [:error] [pid 23913:tid 23937] [client 158.158.105.128:17788] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bthil.php"] [unique_id "ad-f_lUaK3MLdSaLOyjDvwAAAVY"]
[Wed Apr 15 22:26:06.947785 2026] [:error] [pid 37370:tid 37394] [client 158.158.105.128:16602] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bthil.php"] [unique_id "ad-f_ng-gnM2Ga0cGACVYAAAARY"]
[Wed Apr 15 22:26:07.571207 2026] [:error] [pid 23913:tid 23928] [client 158.158.105.128:8002] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bthil.php"] [unique_id "ad-f_1UaK3MLdSaLOyjDwQAAAU0"]
[Wed Apr 15 22:26:08.084901 2026] [:error] [pid 23913:tid 23924] [client 158.158.105.128:12785] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bthil.php"] [unique_id "ad-gAFUaK3MLdSaLOyjDxAAAAUk"]
[Wed Apr 15 22:26:08.663910 2026] [:error] [pid 23913:tid 23939] [client 158.158.105.128:17373] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-class.php"] [unique_id "ad-gAFUaK3MLdSaLOyjDyQAAAVg"]
[Wed Apr 15 22:26:09.363647 2026] [:error] [pid 31053:tid 31056] [client 158.158.105.128:14992] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-class.php"] [unique_id "ad-gARcEkLCmvF0fjDcpVgAAAIA"]
[Wed Apr 15 22:26:09.995462 2026] [:error] [pid 30957:tid 30994] [client 158.158.105.128:2735] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-class.php"] [unique_id "ad-gAX5gwVEVXHfVSiq1OAAAAEU"]
[Wed Apr 15 22:26:11.038053 2026] [:error] [pid 30956:tid 30974] [client 158.158.105.128:10557] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-class.php"] [unique_id "ad-gA0BGUpjaWntNYq2a6wAAAA4"]
[Wed Apr 15 22:26:11.571133 2026] [:error] [pid 30956:tid 30965] [client 158.158.105.128:19034] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/cilus.php"] [unique_id "ad-gA0BGUpjaWntNYq2a8gAAAAU"]
[Wed Apr 15 22:26:12.072102 2026] [:error] [pid 31053:tid 31068] [client 158.158.105.128:11376] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/cilus.php"] [unique_id "ad-gBBcEkLCmvF0fjDcpXgAAAIw"]
[Wed Apr 15 22:26:12.619392 2026] [:error] [pid 31053:tid 31064] [client 158.158.105.128:14659] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/cilus.php"] [unique_id "ad-gBBcEkLCmvF0fjDcpYAAAAIg"]
[Wed Apr 15 22:26:13.201877 2026] [:error] [pid 31053:tid 31062] [client 158.158.105.128:2530] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/cilus.php"] [unique_id "ad-gBRcEkLCmvF0fjDcpZgAAAIY"]
[Wed Apr 15 22:26:14.207679 2026] [:error] [pid 37370:tid 37373] [client 158.158.105.128:10527] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/d.php"] [unique_id "ad-gBng-gnM2Ga0cGACVZQAAAQE"]
[Wed Apr 15 22:26:14.844417 2026] [:error] [pid 31053:tid 31075] [client 158.158.105.128:11453] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/d.php"] [unique_id "ad-gBhcEkLCmvF0fjDcpdAAAAJM"]
[Wed Apr 15 22:26:15.655685 2026] [:error] [pid 37370:tid 37381] [client 158.158.105.128:10771] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/d.php"] [unique_id "ad-gB3g-gnM2Ga0cGACVZgAAAQk"]
[Wed Apr 15 22:26:16.459795 2026] [:error] [pid 37370:tid 37386] [client 158.158.105.128:17342] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/d.php"] [unique_id "ad-gCHg-gnM2Ga0cGACVbAAAAQ4"]
[Wed Apr 15 22:26:17.205956 2026] [:error] [pid 30958:tid 31037] [client 158.158.105.128:2506] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/error_log.php"] [unique_id "ad-gCceG3wSKTO7NWFHdlgAAANU"]
[Wed Apr 15 22:26:17.995674 2026] [:error] [pid 30958:tid 31039] [client 158.158.105.128:19342] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/error_log.php"] [unique_id "ad-gCceG3wSKTO7NWFHdmgAAANc"]
[Wed Apr 15 22:26:18.577114 2026] [:error] [pid 37370:tid 37384] [client 158.158.105.128:17740] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/error_log.php"] [unique_id "ad-gCng-gnM2Ga0cGACVdQAAAQw"]
[Wed Apr 15 22:26:19.277766 2026] [:error] [pid 23913:tid 23922] [client 158.158.105.128:12787] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/error_log.php"] [unique_id "ad-gC1UaK3MLdSaLOyjD1QAAAUc"]
[Wed Apr 15 22:26:20.066814 2026] [:error] [pid 23913:tid 23926] [client 158.158.105.128:10537] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/Ov-Simple1.php"] [unique_id "ad-gDFUaK3MLdSaLOyjD2AAAAUs"]
[Wed Apr 15 22:26:20.791184 2026] [:error] [pid 23913:tid 23935] [client 158.158.105.128:16329] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/Ov-Simple1.php"] [unique_id "ad-gDFUaK3MLdSaLOyjD3wAAAVQ"]
[Wed Apr 15 22:26:21.544897 2026] [:error] [pid 30957:tid 30995] [client 158.158.105.128:11384] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/Ov-Simple1.php"] [unique_id "ad-gDX5gwVEVXHfVSiq1PQAAAEY"]
[Wed Apr 15 22:26:22.064483 2026] [:error] [pid 30957:tid 31011] [client 158.158.105.128:10527] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/Ov-Simple1.php"] [unique_id "ad-gDn5gwVEVXHfVSiq1QQAAAFY"]
[Wed Apr 15 22:26:22.582285 2026] [:error] [pid 37370:tid 37376] [client 158.158.105.128:15967] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/curl.php"] [unique_id "ad-gDng-gnM2Ga0cGACVewAAAQQ"]
[Wed Apr 15 22:26:23.178879 2026] [:error] [pid 30956:tid 30965] [client 158.158.105.128:17368] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/curl.php"] [unique_id "ad-gD0BGUpjaWntNYq2bAQAAAAU"]
[Wed Apr 15 22:26:24.619518 2026] [:error] [pid 30957:tid 31008] [client 158.158.105.128:9781] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/curl.php"] [unique_id "ad-gEH5gwVEVXHfVSiq1RwAAAFM"]
[Wed Apr 15 22:26:25.564373 2026] [:error] [pid 23913:tid 23930] [client 158.158.105.128:19383] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/curl.php"] [unique_id "ad-gEVUaK3MLdSaLOyjD5wAAAU8"]
[Wed Apr 15 22:26:26.241027 2026] [:error] [pid 37370:tid 37386] [client 158.158.105.128:7963] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/sallu.php"] [unique_id "ad-gEng-gnM2Ga0cGACVgQAAAQ4"]
[Wed Apr 15 22:26:27.281834 2026] [:error] [pid 30957:tid 30990] [client 158.158.105.128:2813] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/sallu.php"] [unique_id "ad-gE35gwVEVXHfVSiq1UgAAAEE"]
[Wed Apr 15 22:26:28.141039 2026] [:error] [pid 30958:tid 31026] [client 158.158.105.128:12781] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/sallu.php"] [unique_id "ad-gFMeG3wSKTO7NWFHdrgAAAMo"]
[Wed Apr 15 22:26:28.911653 2026] [:error] [pid 37370:tid 37388] [client 158.158.105.128:2958] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/sallu.php"] [unique_id "ad-gFHg-gnM2Ga0cGACVjAAAARA"]
[Wed Apr 15 22:26:29.580787 2026] [:error] [pid 37370:tid 37395] [client 158.158.105.128:14624] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/f6.php"] [unique_id "ad-gFXg-gnM2Ga0cGACVjwAAARc"]
[Wed Apr 15 22:26:30.182082 2026] [:error] [pid 37370:tid 37392] [client 158.158.105.128:15955] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/f6.php"] [unique_id "ad-gFng-gnM2Ga0cGACVkAAAARQ"]
[Wed Apr 15 22:26:31.065840 2026] [:error] [pid 30956:tid 30967] [client 158.158.105.128:15938] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/f6.php"] [unique_id "ad-gF0BGUpjaWntNYq2bDAAAAAc"]
[Wed Apr 15 22:26:31.739057 2026] [:error] [pid 31053:tid 31080] [client 158.158.105.128:12664] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/f6.php"] [unique_id "ad-gFxcEkLCmvF0fjDcpggAAAJg"]
[Wed Apr 15 22:26:32.342752 2026] [:error] [pid 31053:tid 31072] [client 158.158.105.128:18501] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/edit.php"] [unique_id "ad-gGBcEkLCmvF0fjDcphwAAAJA"]
[Wed Apr 15 22:26:32.854074 2026] [:error] [pid 30956:tid 30968] [client 158.158.105.128:11290] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/edit.php"] [unique_id "ad-gGEBGUpjaWntNYq2bDgAAAAg"]
[Wed Apr 15 22:26:33.367644 2026] [:error] [pid 37370:tid 37374] [client 158.158.105.128:15186] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/edit.php"] [unique_id "ad-gGXg-gnM2Ga0cGACVmgAAAQI"]
[Wed Apr 15 22:26:33.967005 2026] [:error] [pid 30957:tid 30997] [client 158.158.105.128:9127] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/edit.php"] [unique_id "ad-gGX5gwVEVXHfVSiq1cgAAAEg"]
[Wed Apr 15 22:26:34.762081 2026] [:error] [pid 31053:tid 31079] [client 158.158.105.128:9094] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/aa.php"] [unique_id "ad-gGhcEkLCmvF0fjDcpjwAAAJc"]
[Wed Apr 15 22:26:35.315009 2026] [:error] [pid 30958:tid 31020] [client 158.158.105.128:10187] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/aa.php"] [unique_id "ad-gG8eG3wSKTO7NWFHdwAAAAMQ"]
[Wed Apr 15 22:26:36.010743 2026] [:error] [pid 30957:tid 31005] [client 158.158.105.128:19619] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/aa.php"] [unique_id "ad-gHH5gwVEVXHfVSiq1fwAAAFA"]
[Wed Apr 15 22:26:37.074442 2026] [:error] [pid 30957:tid 31010] [client 158.158.105.128:18553] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/aa.php"] [unique_id "ad-gHX5gwVEVXHfVSiq1hgAAAFU"]
[Wed Apr 15 22:26:37.952589 2026] [:error] [pid 31053:tid 31060] [client 158.158.105.128:10537] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/goods_260325043000.php"] [unique_id "ad-gHRcEkLCmvF0fjDcpkgAAAIQ"]
[Wed Apr 15 22:26:38.553484 2026] [:error] [pid 30958:tid 31019] [client 158.158.105.128:12577] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/goods_260325043000.php"] [unique_id "ad-gHseG3wSKTO7NWFHdxAAAAMM"]
[Wed Apr 15 22:27:08.422835 2026] [:error] [pid 31053:tid 31070] [client 158.158.105.128:15414] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/goods_260401065719.php"] [unique_id "ad-gPBcEkLCmvF0fjDcp1AAAAI4"]
[Wed Apr 15 22:27:09.895758 2026] [:error] [pid 30957:tid 30991] [client 158.158.105.128:2144] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/goods_260401065719.php"] [unique_id "ad-gPX5gwVEVXHfVSiq18AAAAEI"]
[Wed Apr 15 22:27:11.050749 2026] [:error] [pid 30958:tid 31026] [client 158.158.105.128:15378] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/goods_260401065719.php"] [unique_id "ad-gP8eG3wSKTO7NWFHeAgAAAMo"]
[Wed Apr 15 22:27:11.739361 2026] [:error] [pid 37370:tid 37396] [client 158.158.105.128:12070] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/goods_260401065719.php"] [unique_id "ad-gP3g-gnM2Ga0cGACVtwAAARg"]
[Wed Apr 15 23:25:41.785072 2026] [proxy_fcgi:error] [pid 31053:tid 31065] [client 66.249.79.225:49162] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:05:12.310075 2026] [:error] [pid 23913:tid 23919] [client 178.128.55.238:50860] [client 178.128.55.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.55.238, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad-3OFUaK3MLdSaLOyjr-wAAAUQ"]
[Thu Apr 16 00:05:12.399713 2026] [proxy_fcgi:error] [pid 23913:tid 23919] [client 178.128.55.238:50860] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:05:12.765804 2026] [:error] [pid 30957:tid 31009] [client 178.128.55.238:50880] [client 178.128.55.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.55.238, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ad-3OH5gwVEVXHfVSirLEAAAAFQ"]
[Thu Apr 16 00:05:12.843021 2026] [proxy_fcgi:error] [pid 30957:tid 31009] [client 178.128.55.238:50880] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:05:13.014295 2026] [proxy_fcgi:error] [pid 30957:tid 31007] [client 178.128.55.238:50880] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:05:13.464670 2026] [proxy_fcgi:error] [pid 30958:tid 31016] [client 178.128.55.238:50935] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:05:13.617260 2026] [proxy_fcgi:error] [pid 30958:tid 31033] [client 178.128.55.238:50935] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:11.462122 2026] [proxy_fcgi:error] [pid 23913:tid 23918] [client 146.190.63.48:36378] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:11.646600 2026] [proxy_fcgi:error] [pid 23913:tid 23915] [client 68.183.9.16:48382] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:12.373063 2026] [proxy_fcgi:error] [pid 23913:tid 23929] [client 146.190.63.48:36380] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:12.651778 2026] [proxy_fcgi:error] [pid 23913:tid 23922] [client 68.183.9.16:48396] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:13.185027 2026] [proxy_fcgi:error] [pid 31053:tid 31062] [client 146.190.63.48:36384] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:13.642748 2026] [proxy_fcgi:error] [pid 31053:tid 31059] [client 68.183.9.16:48398] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:14.228446 2026] [authz_core:error] [pid 23913:tid 23924] [client 146.190.63.48:36400] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Thu Apr 16 00:43:14.740846 2026] [authz_core:error] [pid 16664:tid 16723] [client 68.183.9.16:48410] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Thu Apr 16 00:43:16.171290 2026] [proxy_fcgi:error] [pid 23913:tid 23919] [client 146.190.63.48:36412] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:16.643903 2026] [proxy_fcgi:error] [pid 31053:tid 31063] [client 68.183.9.16:43300] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:17.166580 2026] [proxy_fcgi:error] [pid 31053:tid 31068] [client 146.190.63.48:36414] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:17.638734 2026] [proxy_fcgi:error] [pid 16664:tid 16721] [client 68.183.9.16:43310] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:18.162550 2026] [proxy_fcgi:error] [pid 23913:tid 23927] [client 146.190.63.48:36428] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:18.645945 2026] [proxy_fcgi:error] [pid 23913:tid 23919] [client 68.183.9.16:43326] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:18.743514 2026] [proxy_fcgi:error] [pid 31053:tid 31062] [client 146.190.63.48:36440] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:19.225045 2026] [proxy_fcgi:error] [pid 30957:tid 31007] [client 68.183.9.16:43334] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:19.681362 2026] [:error] [pid 23913:tid 23917] [client 146.190.63.48:36442] [client 146.190.63.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "ad_AJ1UaK3MLdSaLOygAtgAAAUI"]
[Thu Apr 16 00:43:20.151258 2026] [:error] [pid 16664:tid 16731] [client 68.183.9.16:43346] [client 68.183.9.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "ad_AKDdzt684awDJwRTP2QAAAYw"]
[Thu Apr 16 00:43:20.435570 2026] [proxy_fcgi:error] [pid 23913:tid 23919] [client 103.4.251.211:21798] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:20.958276 2026] [proxy_fcgi:error] [pid 23913:tid 23924] [client 103.196.9.172:29130] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:21.784163 2026] [proxy_fcgi:error] [pid 30956:tid 30976] [client 146.190.63.48:57798] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:22.229267 2026] [proxy_fcgi:error] [pid 23913:tid 23928] [client 68.183.9.16:43354] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:23.677833 2026] [:error] [pid 37370:tid 37391] [client 146.190.63.48:57804] [client 146.190.63.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ad_AK3g-gnM2Ga0cGAC9ewAAARM"]
[Thu Apr 16 00:43:24.148943 2026] [:error] [pid 16664:tid 16724] [client 68.183.9.16:43360] [client 68.183.9.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ad_ALDdzt684awDJwRTP3QAAAYU"]
[Thu Apr 16 00:43:24.741108 2026] [proxy_fcgi:error] [pid 16664:tid 16729] [client 146.190.63.48:57820] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:25.250777 2026] [proxy_fcgi:error] [pid 23913:tid 23920] [client 68.183.9.16:43364] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:25.312987 2026] [proxy_fcgi:error] [pid 23913:tid 23924] [client 146.190.63.48:57836] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:25.891252 2026] [proxy_fcgi:error] [pid 31053:tid 31057] [client 146.190.63.48:57838] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:26.461458 2026] [proxy_fcgi:error] [pid 30956:tid 30981] [client 146.190.63.48:57850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:27.031971 2026] [proxy_fcgi:error] [pid 31053:tid 31060] [client 146.190.63.48:57852] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:27.614812 2026] [proxy_fcgi:error] [pid 23913:tid 23924] [client 146.190.63.48:57866] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:28.608892 2026] [proxy_fcgi:error] [pid 30957:tid 31000] [client 146.190.63.48:57874] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:29.490830 2026] [proxy_fcgi:error] [pid 31053:tid 31075] [client 103.4.250.246:12098] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:30.612802 2026] [proxy_fcgi:error] [pid 16664:tid 16743] [client 146.190.63.48:36190] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:31.121874 2026] [:error] [pid 31053:tid 31073] [client 146.190.63.48:36202] [client 146.190.63.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ad_AMxcEkLCmvF0fjDd4QAAAAJE"]
[Thu Apr 16 00:43:32.181658 2026] [proxy_fcgi:error] [pid 30958:tid 31029] [client 146.190.63.48:36204] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:33.181733 2026] [proxy_fcgi:error] [pid 30958:tid 31039] [client 146.190.63.48:36206] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:34.181729 2026] [proxy_fcgi:error] [pid 31053:tid 31078] [client 146.190.63.48:36216] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:36.188683 2026] [proxy_fcgi:error] [pid 16664:tid 16721] [client 146.190.63.48:36228] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:37.199911 2026] [proxy_fcgi:error] [pid 30958:tid 31026] [client 146.190.63.48:36238] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:38.192578 2026] [proxy_fcgi:error] [pid 30956:tid 30971] [client 146.190.63.48:36240] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:39.194777 2026] [proxy_fcgi:error] [pid 31053:tid 31064] [client 146.190.63.48:36248] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:40.190024 2026] [proxy_fcgi:error] [pid 37370:tid 37376] [client 146.190.63.48:45086] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:41.189940 2026] [proxy_fcgi:error] [pid 16664:tid 16728] [client 146.190.63.48:45090] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:42.209849 2026] [proxy_fcgi:error] [pid 37370:tid 37380] [client 146.190.63.48:45092] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:43.197127 2026] [proxy_fcgi:error] [pid 30956:tid 30976] [client 146.190.63.48:45104] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:44.185722 2026] [proxy_fcgi:error] [pid 30957:tid 31003] [client 146.190.63.48:45120] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:45.210251 2026] [proxy_fcgi:error] [pid 37370:tid 37392] [client 146.190.63.48:45130] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:46.123753 2026] [:error] [pid 23913:tid 23915] [client 146.190.63.48:45132] [client 146.190.63.48] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "ad_AQlUaK3MLdSaLOygA9gAAAUA"]
[Thu Apr 16 00:43:47.190844 2026] [proxy_fcgi:error] [pid 30958:tid 31040] [client 146.190.63.48:45142] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:48.196435 2026] [proxy_fcgi:error] [pid 16664:tid 16724] [client 146.190.63.48:45158] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:49.203838 2026] [proxy_fcgi:error] [pid 37370:tid 37379] [client 146.190.63.48:45170] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:50.235166 2026] [proxy_fcgi:error] [pid 31053:tid 31079] [client 146.190.63.48:46192] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:51.225829 2026] [proxy_fcgi:error] [pid 30958:tid 31034] [client 146.190.63.48:46200] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 00:43:57.293222 2026] [proxy_fcgi:error] [pid 30957:tid 30992] [client 135.136.19.87:35106] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au
[Thu Apr 16 00:44:15.826449 2026] [proxy_fcgi:error] [pid 31053:tid 31060] [client 135.136.19.87:47928] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://www.southerncrosscentre.au
[Thu Apr 16 01:05:52.131328 2026] [proxy_fcgi:error] [pid 23913:tid 23921] [client 137.184.70.146:51324] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 01:15:39.640463 2026] [proxy_fcgi:error] [pid 37370:tid 37380] [client 91.231.89.39:42475] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 01:18:06.863565 2026] [proxy_fcgi:error] [pid 16664:tid 16734] [client 91.231.89.101:58469] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 01:19:18.533107 2026] [proxy_fcgi:error] [pid 31053:tid 31059] [client 91.231.89.98:48303] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 01:19:55.850912 2026] [proxy_fcgi:error] [pid 37167:tid 37178] [client 91.231.89.121:35043] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 01:20:01.393159 2026] [proxy_fcgi:error] [pid 37167:tid 37186] [client 91.231.89.122:44351] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 01:20:33.233767 2026] [proxy_fcgi:error] [pid 37167:tid 37178] [client 91.231.89.18:41687] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 01:21:06.275769 2026] [proxy_fcgi:error] [pid 37370:tid 37386] [client 91.231.89.99:52667] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 01:47:20.593355 2026] [proxy_fcgi:error] [pid 912:tid 981] [client 104.164.126.205:40436] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 01:47:20.771430 2026] [proxy_fcgi:error] [pid 912:tid 980] [client 103.196.9.24:17326] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 01:47:32.520819 2026] [proxy_fcgi:error] [pid 791:tid 842] [client 104.164.173.134:6788] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 02:12:44.353699 2026] [proxy_fcgi:error] [pid 792:tid 895] [client 119.252.192.249:61416] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 02:24:59.780866 2026] [proxy_fcgi:error] [pid 34542:tid 34553] [client 103.4.251.227:56810] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 02:25:12.249961 2026] [proxy_fcgi:error] [pid 34542:tid 34560] [client 107.172.195.39:23924] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 02:36:36.500292 2026] [proxy_fcgi:error] [pid 34542:tid 34556] [client 103.4.251.13:22572] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 02:36:37.405351 2026] [proxy_fcgi:error] [pid 912:tid 969] [client 103.4.251.29:54852] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 02:36:50.020830 2026] [proxy_fcgi:error] [pid 54814:tid 54825] [client 104.252.191.151:54764] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 02:43:08.885152 2026] [:error] [pid 54814:tid 54837] [client 91.200.101.138:50957] [client 91.200.101.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/graphql"] [unique_id "ad_cPDrHu_-tAAe-BOW9WQAAAZE"]
[Thu Apr 16 02:48:05.321550 2026] [proxy_fcgi:error] [pid 34542:tid 34554] [client 173.239.201.141:36434] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 02:48:05.695709 2026] [proxy_fcgi:error] [pid 34542:tid 34562] [client 173.239.201.141:36434] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 02:48:06.514004 2026] [proxy_fcgi:error] [pid 790:tid 807] [client 146.70.65.15:51674] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 02:48:16.348596 2026] [proxy_fcgi:error] [pid 912:tid 972] [client 154.47.29.230:53036] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 02:48:16.701601 2026] [proxy_fcgi:error] [pid 912:tid 980] [client 154.47.29.230:53036] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 02:48:17.543377 2026] [proxy_fcgi:error] [pid 20548:tid 20557] [client 173.239.201.131:51470] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 02:48:17.848827 2026] [proxy_fcgi:error] [pid 912:tid 977] [client 212.112.19.70:56930] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 03:14:19.852762 2026] [proxy_fcgi:error] [pid 912:tid 989] [client 205.169.39.7:24532] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 03:38:51.390306 2026] [proxy_fcgi:error] [pid 53810:tid 53873] [client 195.164.49.144:54256] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 03:58:34.669515 2026] [:error] [pid 57538:tid 57615] [client 20.25.153.53:63109] [client 20.25.153.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ad_t6suMaiEF5SVR2Bfv7QAAAI0"]
[Thu Apr 16 04:03:08.080384 2026] [:error] [pid 57536:tid 57560] [client 48.214.55.34:23299] [client 48.214.55.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ad_u_CQU4faGja6jpDthBwAAAAw"], referer: https://www.google.com/
[Thu Apr 16 04:03:33.134498 2026] [:error] [pid 57536:tid 57562] [client 172.174.188.181:59990] [client 172.174.188.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ad_vFSQU4faGja6jpDthHAAAAA4"], referer: https://news.ycombinator.com/
[Thu Apr 16 04:03:54.251526 2026] [:error] [pid 57538:tid 57617] [client 64.236.200.114:60686] [client 64.236.200.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ad_vKsuMaiEF5SVR2Bfy3AAAAI8"]
[Thu Apr 16 04:04:54.635208 2026] [:error] [pid 57537:tid 57582] [client 64.236.201.55:42678] [client 64.236.201.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ad_vZlVQRS8nm73ENAkLLgAAAEc"], referer: https://twitter.com/
[Thu Apr 16 04:04:56.808918 2026] [:error] [pid 57538:tid 57618] [client 64.236.133.129:60928] [client 64.236.133.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ad_vaMuMaiEF5SVR2BfzWQAAAJA"], referer: https://www.notion.so/
[Thu Apr 16 04:06:15.469380 2026] [:error] [pid 57538:tid 57612] [client 52.162.9.246:40811] [client 52.162.9.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ad_vt8uMaiEF5SVR2Bfz8gAAAIo"]
[Thu Apr 16 04:53:30.931758 2026] [:error] [pid 57536:tid 57553] [client 172.215.217.194:33830] [client 172.215.217.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ad_6yiQU4faGja6jpDtuvwAAAAU"]
[Thu Apr 16 04:59:47.286873 2026] [proxy_fcgi:error] [pid 57537:tid 57589] [client 74.7.230.55:39748] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 04:59:48.164939 2026] [proxy_fcgi:error] [pid 29603:tid 29605] [client 74.7.242.43:50678] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 05:00:19.808960 2026] [proxy_fcgi:error] [pid 57536:tid 57570] [client 74.7.244.23:56728] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 05:00:24.597299 2026] [proxy_fcgi:error] [pid 29603:tid 29620] [client 74.7.241.30:40408] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 05:11:42.261200 2026] [:error] [pid 29603:tid 29610] [client 34.106.1.243:43296] [client 34.106.1.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ad__DlfGOR6fpTWUAzqY3wAAAQU"]
[Thu Apr 16 05:18:02.588621 2026] [proxy_fcgi:error] [pid 57639:tid 57667] [client 45.13.225.78:51680] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:09:54.543854 2026] [proxy_fcgi:error] [pid 49094:tid 49112] [client 20.43.56.9:23289] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:09:55.085130 2026] [proxy_fcgi:error] [pid 49094:tid 49110] [client 20.43.56.9:14907] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:09:55.659580 2026] [proxy_fcgi:error] [pid 49094:tid 49102] [client 20.43.56.9:27036] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:09:56.214985 2026] [proxy_fcgi:error] [pid 57538:tid 57613] [client 20.43.56.9:36878] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:09:56.787495 2026] [proxy_fcgi:error] [pid 57639:tid 57648] [client 20.43.56.9:23277] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:09:57.370695 2026] [proxy_fcgi:error] [pid 57639:tid 57669] [client 20.43.56.9:18476] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:09:57.957012 2026] [proxy_fcgi:error] [pid 57639:tid 57658] [client 20.43.56.9:28393] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:09:59.033948 2026] [proxy_fcgi:error] [pid 57536:tid 57568] [client 20.43.56.9:27599] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:01.708736 2026] [proxy_fcgi:error] [pid 57639:tid 57647] [client 20.43.56.9:28393] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:02.250993 2026] [proxy_fcgi:error] [pid 57536:tid 57556] [client 20.43.56.9:27614] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:02.561933 2026] [proxy_fcgi:error] [pid 57536:tid 57570] [client 20.43.56.9:27614] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:03.107603 2026] [proxy_fcgi:error] [pid 49094:tid 49110] [client 20.43.56.9:38130] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:03.675668 2026] [proxy_fcgi:error] [pid 49094:tid 49117] [client 20.43.56.9:13825] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:04.230542 2026] [proxy_fcgi:error] [pid 49094:tid 49115] [client 20.43.56.9:27032] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:04.777358 2026] [proxy_fcgi:error] [pid 29603:tid 29605] [client 20.43.56.9:11229] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:05.359337 2026] [proxy_fcgi:error] [pid 29603:tid 29617] [client 20.43.56.9:9622] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:06.061176 2026] [proxy_fcgi:error] [pid 29603:tid 29614] [client 20.43.56.9:44349] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:06.602677 2026] [proxy_fcgi:error] [pid 49094:tid 49099] [client 20.43.56.9:11221] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:07.169376 2026] [proxy_fcgi:error] [pid 57537:tid 57594] [client 20.43.56.9:27634] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:07.752327 2026] [proxy_fcgi:error] [pid 49094:tid 49114] [client 20.43.56.9:44340] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:41.750861 2026] [proxy_fcgi:error] [pid 57538:tid 57626] [client 20.43.56.9:39372] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:42.953976 2026] [proxy_fcgi:error] [pid 49094:tid 49109] [client 20.43.56.9:31948] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:43.782444 2026] [proxy_fcgi:error] [pid 29603:tid 29618] [client 20.43.56.9:31958] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:44.529122 2026] [proxy_fcgi:error] [pid 57536:tid 57548] [client 20.43.56.9:33723] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:45.182372 2026] [proxy_fcgi:error] [pid 29603:tid 29616] [client 20.43.56.9:39404] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:45.878699 2026] [proxy_fcgi:error] [pid 57537:tid 57581] [client 20.43.56.9:32621] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:46.434822 2026] [proxy_fcgi:error] [pid 49094:tid 49102] [client 20.43.56.9:32626] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:46.987034 2026] [proxy_fcgi:error] [pid 57536:tid 57559] [client 20.43.56.9:52905] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:47.548040 2026] [proxy_fcgi:error] [pid 57538:tid 57622] [client 20.43.56.9:45067] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:48.120334 2026] [proxy_fcgi:error] [pid 57639:tid 57661] [client 20.43.56.9:9616] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:49.138318 2026] [proxy_fcgi:error] [pid 49094:tid 49113] [client 20.43.56.9:1171] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:49.692120 2026] [proxy_fcgi:error] [pid 29603:tid 29617] [client 20.43.56.9:57885] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:50.250549 2026] [proxy_fcgi:error] [pid 49094:tid 49116] [client 20.43.56.9:9985] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:50.799333 2026] [proxy_fcgi:error] [pid 29603:tid 29611] [client 20.43.56.9:12763] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:51.653703 2026] [proxy_fcgi:error] [pid 57536:tid 57565] [client 20.43.56.9:39399] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:52.234915 2026] [proxy_fcgi:error] [pid 49094:tid 49120] [client 20.43.56.9:34468] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:52.546154 2026] [proxy_fcgi:error] [pid 49094:tid 49101] [client 20.43.56.9:34468] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:53.271333 2026] [proxy_fcgi:error] [pid 57639:tid 57649] [client 20.43.56.9:36272] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:53.899991 2026] [proxy_fcgi:error] [pid 49094:tid 49108] [client 20.43.56.9:12794] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:54.472829 2026] [proxy_fcgi:error] [pid 29603:tid 29622] [client 20.43.56.9:12769] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:55.023053 2026] [proxy_fcgi:error] [pid 57538:tid 57619] [client 20.43.56.9:15321] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:55.827198 2026] [proxy_fcgi:error] [pid 49094:tid 49104] [client 20.43.56.9:10030] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:56.494437 2026] [proxy_fcgi:error] [pid 57538:tid 57620] [client 20.43.56.9:52903] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:57.597064 2026] [proxy_fcgi:error] [pid 49094:tid 49103] [client 20.43.56.9:52870] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:58.217287 2026] [proxy_fcgi:error] [pid 49094:tid 49109] [client 20.43.56.9:10428] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:58.770729 2026] [proxy_fcgi:error] [pid 57537:tid 57597] [client 20.43.56.9:33164] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:59.345085 2026] [proxy_fcgi:error] [pid 49094:tid 49098] [client 20.43.56.9:59352] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:10:59.921747 2026] [proxy_fcgi:error] [pid 57538:tid 57622] [client 20.43.56.9:45064] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:00.494062 2026] [proxy_fcgi:error] [pid 49094:tid 49120] [client 20.43.56.9:36279] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:01.153430 2026] [proxy_fcgi:error] [pid 29603:tid 29614] [client 20.43.56.9:45095] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:01.711823 2026] [proxy_fcgi:error] [pid 49094:tid 49102] [client 20.43.56.9:1155] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:02.286705 2026] [proxy_fcgi:error] [pid 57639:tid 57665] [client 20.43.56.9:59388] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:02.830140 2026] [proxy_fcgi:error] [pid 29603:tid 29613] [client 20.43.56.9:1153] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:03.417768 2026] [proxy_fcgi:error] [pid 57538:tid 57611] [client 20.43.56.9:59328] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:04.523686 2026] [proxy_fcgi:error] [pid 57538:tid 57612] [client 20.43.56.9:59363] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:05.983389 2026] [proxy_fcgi:error] [pid 57538:tid 57619] [client 20.43.56.9:59328] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:07.434821 2026] [proxy_fcgi:error] [pid 57639:tid 57667] [client 20.43.56.9:10422] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:08.205027 2026] [proxy_fcgi:error] [pid 57536:tid 57566] [client 20.43.56.9:33697] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:08.741784 2026] [proxy_fcgi:error] [pid 57639:tid 57664] [client 20.43.56.9:36266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:09.358291 2026] [proxy_fcgi:error] [pid 57639:tid 57657] [client 20.43.56.9:11158] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:10.134322 2026] [proxy_fcgi:error] [pid 57538:tid 57610] [client 20.43.56.9:10034] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:10.755937 2026] [proxy_fcgi:error] [pid 29603:tid 29626] [client 20.43.56.9:39381] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:11.332300 2026] [proxy_fcgi:error] [pid 49094:tid 49096] [client 20.43.56.9:56305] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:11.978175 2026] [proxy_fcgi:error] [pid 29603:tid 29610] [client 20.43.56.9:10042] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:12.672322 2026] [proxy_fcgi:error] [pid 29603:tid 29609] [client 20.43.56.9:39409] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:13.316865 2026] [proxy_fcgi:error] [pid 29603:tid 29626] [client 20.43.56.9:57919] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:13.875764 2026] [proxy_fcgi:error] [pid 57639:tid 57662] [client 20.43.56.9:43482] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:14.415799 2026] [proxy_fcgi:error] [pid 57639:tid 57658] [client 20.43.56.9:11150] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:15.042801 2026] [proxy_fcgi:error] [pid 57639:tid 57659] [client 20.43.56.9:11157] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:15.709861 2026] [proxy_fcgi:error] [pid 57536:tid 57556] [client 20.43.56.9:45085] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:16.307385 2026] [proxy_fcgi:error] [pid 57538:tid 57615] [client 20.43.56.9:10385] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:16.869749 2026] [proxy_fcgi:error] [pid 29603:tid 29611] [client 20.43.56.9:57916] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:17.404431 2026] [proxy_fcgi:error] [pid 57639:tid 57646] [client 20.43.56.9:11182] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:17.947435 2026] [proxy_fcgi:error] [pid 57639:tid 57649] [client 20.43.56.9:52902] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:18.484612 2026] [proxy_fcgi:error] [pid 57537:tid 57597] [client 20.43.56.9:59386] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:19.047104 2026] [proxy_fcgi:error] [pid 57538:tid 57621] [client 20.43.56.9:33215] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:19.588404 2026] [proxy_fcgi:error] [pid 57538:tid 57617] [client 20.43.56.9:36253] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:20.136901 2026] [proxy_fcgi:error] [pid 57538:tid 57613] [client 20.43.56.9:43515] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:20.718750 2026] [proxy_fcgi:error] [pid 57538:tid 57608] [client 20.43.56.9:59354] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:21.282663 2026] [proxy_fcgi:error] [pid 29603:tid 29619] [client 20.43.56.9:33172] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:21.822978 2026] [proxy_fcgi:error] [pid 29603:tid 29621] [client 20.43.56.9:57918] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:22.521585 2026] [proxy_fcgi:error] [pid 57537:tid 57594] [client 20.43.56.9:15333] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:23.130847 2026] [proxy_fcgi:error] [pid 29603:tid 29628] [client 20.43.56.9:43500] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:23.851645 2026] [proxy_fcgi:error] [pid 29603:tid 29607] [client 20.43.56.9:34491] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:24.455961 2026] [proxy_fcgi:error] [pid 57538:tid 57615] [client 20.43.56.9:15298] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:25.056671 2026] [proxy_fcgi:error] [pid 29603:tid 29629] [client 20.43.56.9:9987] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:25.634623 2026] [proxy_fcgi:error] [pid 29603:tid 29608] [client 20.43.56.9:10429] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:11:26.214716 2026] [:error] [pid 49094:tid 49104] [client 20.43.56.9:33167] [client 20.43.56.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "aeANDjbDwvcXorHR_MyGegAAAUg"]
[Thu Apr 16 06:12:23.078313 2026] [proxy_fcgi:error] [pid 57538:tid 57616] [client 109.70.100.5:60718] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 06:48:16.057089 2026] [:error] [pid 49094:tid 49096] [client 172.183.132.67:12608] [client 172.183.132.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aeAVsDbDwvcXorHR_Myd3gAAAUA"]
[Thu Apr 16 07:01:14.138449 2026] [proxy_fcgi:error] [pid 29603:tid 29622] [client 195.226.194.95:53914] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 09:22:21.467792 2026] [:error] [pid 57639:tid 57658] [client 98.93.160.221:56380] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aeA5zaMCQoTw7TsxWukfKQAAAMw"]
[Thu Apr 16 09:47:48.511922 2026] [:error] [pid 57536:tid 57557] [client 129.159.56.14:45792] [client 129.159.56.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aeA_xCQU4faGja6jpDuiuAAAAAk"]
[Thu Apr 16 09:47:49.305065 2026] [proxy_fcgi:error] [pid 57639:tid 57662] [client 129.159.56.14:45810] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 12:46:09.273449 2026] [proxy_fcgi:error] [pid 57639:tid 57669] [client 141.98.255.138:34970] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 12:46:10.832759 2026] [proxy_fcgi:error] [pid 57536:tid 57567] [client 141.98.255.138:57984] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 14:11:05.561841 2026] [:error] [pid 7880:tid 7908] [client 98.93.160.221:53786] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aeB9eaaezm4fSGc0yUIyHQAAAZc"]
[Thu Apr 16 14:39:36.782703 2026] [proxy_fcgi:error] [pid 57536:tid 57559] [client 20.240.58.31:56821] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 14:39:37.339322 2026] [proxy_fcgi:error] [pid 7880:tid 7906] [client 20.240.58.31:56835] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 15:28:34.247279 2026] [proxy_fcgi:error] [pid 49094:tid 49118] [client 199.244.88.226:58040] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 16:31:03.300604 2026] [proxy_fcgi:error] [pid 29603:tid 29606] [client 74.7.230.55:56000] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 16:32:05.423298 2026] [proxy_fcgi:error] [pid 49094:tid 49112] [client 74.7.244.23:55994] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 17:17:31.896651 2026] [proxy_fcgi:error] [pid 29603:tid 29611] [client 52.70.174.24:43980] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 17:17:32.222741 2026] [proxy_fcgi:error] [pid 57536:tid 57550] [client 52.70.174.24:39498] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 17:17:53.552373 2026] [proxy_fcgi:error] [pid 57538:tid 57617] [client 216.73.216.52:58912] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 17:17:53.767687 2026] [:error] [pid 57538:tid 57625] [client 216.73.216.52:58912] [client 216.73.216.52] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||southerncrosscentre.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "southerncrosscentre.au"] [uri "/robots.txt"] [unique_id "aeCpQcuMaiEF5SVR2Ber8QAAAJc"]
[Thu Apr 16 17:17:53.833134 2026] [proxy_fcgi:error] [pid 57538:tid 57625] [client 216.73.216.52:58912] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 17:17:54.128002 2026] [proxy_fcgi:error] [pid 57538:tid 57612] [client 216.73.216.52:58912] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:32.147064 2026] [proxy_fcgi:error] [pid 7880:tid 7904] [client 138.68.144.227:53782] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:33.317494 2026] [proxy_fcgi:error] [pid 49094:tid 49098] [client 138.68.144.227:53788] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:34.124967 2026] [proxy_fcgi:error] [pid 57639:tid 57658] [client 138.68.144.227:52282] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:35.246867 2026] [authz_core:error] [pid 7880:tid 7892] [client 138.68.144.227:52288] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Thu Apr 16 18:42:37.141768 2026] [proxy_fcgi:error] [pid 57537:tid 57575] [client 138.68.144.227:52296] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:38.129862 2026] [proxy_fcgi:error] [pid 57639:tid 57668] [client 138.68.144.227:52302] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:39.120252 2026] [proxy_fcgi:error] [pid 57639:tid 57648] [client 138.68.144.227:52306] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:39.936942 2026] [proxy_fcgi:error] [pid 57639:tid 57646] [client 138.68.144.227:52312] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:40.873787 2026] [:error] [pid 57538:tid 57624] [client 138.68.144.227:52314] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aeC9IMuMaiEF5SVR2Be8wwAAAJY"]
[Thu Apr 16 18:42:42.981761 2026] [proxy_fcgi:error] [pid 57639:tid 57664] [client 138.68.144.227:52320] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:44.875970 2026] [:error] [pid 57537:tid 57583] [client 138.68.144.227:35146] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aeC9JFVQRS8nm73ENAmcewAAAEg"]
[Thu Apr 16 18:42:46.006661 2026] [proxy_fcgi:error] [pid 7880:tid 7909] [client 138.68.144.227:35150] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:46.814072 2026] [proxy_fcgi:error] [pid 57639:tid 57654] [client 138.68.144.227:35162] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:47.613073 2026] [proxy_fcgi:error] [pid 57536:tid 57562] [client 138.68.144.227:35174] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:48.408571 2026] [proxy_fcgi:error] [pid 29603:tid 29616] [client 138.68.144.227:35176] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:49.211659 2026] [proxy_fcgi:error] [pid 57639:tid 57659] [client 138.68.144.227:35180] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:50.021296 2026] [proxy_fcgi:error] [pid 57639:tid 57664] [client 138.68.144.227:35194] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:51.036609 2026] [proxy_fcgi:error] [pid 57639:tid 57646] [client 138.68.144.227:35202] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:53.026924 2026] [proxy_fcgi:error] [pid 57538:tid 57604] [client 138.68.144.227:35214] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:53.780317 2026] [:error] [pid 57537:tid 57584] [client 138.68.144.227:43608] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aeC9LVVQRS8nm73ENAmcggAAAEk"]
[Thu Apr 16 18:42:54.833270 2026] [proxy_fcgi:error] [pid 57537:tid 57591] [client 138.68.144.227:43624] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:55.846625 2026] [proxy_fcgi:error] [pid 7880:tid 7895] [client 138.68.144.227:43630] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:56.871540 2026] [proxy_fcgi:error] [pid 57639:tid 57655] [client 138.68.144.227:43646] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:58.839603 2026] [proxy_fcgi:error] [pid 57536:tid 57561] [client 138.68.144.227:43656] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:42:59.835085 2026] [proxy_fcgi:error] [pid 49094:tid 49097] [client 138.68.144.227:43668] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:43:00.849551 2026] [proxy_fcgi:error] [pid 57639:tid 57652] [client 138.68.144.227:43678] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:43:01.843111 2026] [proxy_fcgi:error] [pid 57639:tid 57663] [client 138.68.144.227:43686] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:43:02.859103 2026] [proxy_fcgi:error] [pid 57639:tid 57656] [client 138.68.144.227:43688] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:43:03.861655 2026] [proxy_fcgi:error] [pid 57639:tid 57650] [client 138.68.144.227:55568] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:43:04.857417 2026] [proxy_fcgi:error] [pid 57639:tid 57654] [client 138.68.144.227:55572] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:43:05.898827 2026] [proxy_fcgi:error] [pid 57538:tid 57616] [client 138.68.144.227:55588] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:43:06.851137 2026] [proxy_fcgi:error] [pid 49094:tid 49096] [client 138.68.144.227:55592] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:43:07.866387 2026] [proxy_fcgi:error] [pid 29603:tid 29621] [client 138.68.144.227:55606] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:43:08.785014 2026] [:error] [pid 57639:tid 57647] [client 138.68.144.227:55618] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "aeC9PKMCQoTw7TsxWukrzgAAAME"]
[Thu Apr 16 18:43:09.881066 2026] [proxy_fcgi:error] [pid 49094:tid 49107] [client 138.68.144.227:55630] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:43:10.860517 2026] [proxy_fcgi:error] [pid 29603:tid 29609] [client 138.68.144.227:55640] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:43:11.866077 2026] [proxy_fcgi:error] [pid 7880:tid 7908] [client 138.68.144.227:55644] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:43:12.900064 2026] [proxy_fcgi:error] [pid 29603:tid 29623] [client 138.68.144.227:55658] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 18:43:13.906394 2026] [proxy_fcgi:error] [pid 57639:tid 57659] [client 138.68.144.227:40882] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 20:48:42.126529 2026] [proxy_fcgi:error] [pid 49094:tid 49118] [client 138.246.253.24:41438] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 20:51:02.686479 2026] [:error] [pid 7880:tid 7907] [client 170.64.148.35:51214] [client 170.64.148.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.148.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aeDbNqaezm4fSGc0yUKfJQAAAZY"]
[Thu Apr 16 20:51:02.740707 2026] [proxy_fcgi:error] [pid 7880:tid 7907] [client 170.64.148.35:51214] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 20:51:02.813525 2026] [:error] [pid 49094:tid 49102] [client 170.64.148.35:51266] [client 170.64.148.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.148.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aeDbNjbDwvcXorHR_MzK6gAAAUY"]
[Thu Apr 16 20:51:02.877656 2026] [proxy_fcgi:error] [pid 49094:tid 49102] [client 170.64.148.35:51266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 20:51:03.002041 2026] [proxy_fcgi:error] [pid 49094:tid 49111] [client 170.64.148.35:51266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 20:51:03.148499 2026] [proxy_fcgi:error] [pid 49094:tid 49106] [client 170.64.148.35:51365] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 20:51:03.224738 2026] [proxy_fcgi:error] [pid 49094:tid 49107] [client 170.64.148.35:51365] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 21:13:21.840287 2026] [proxy_fcgi:error] [pid 57536:tid 57554] [client 66.249.79.238:57359] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:17:23.808278 2026] [proxy_fcgi:error] [pid 57639:tid 57660] [client 51.103.163.175:17660] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:17:32.683472 2026] [proxy_fcgi:error] [pid 57639:tid 57661] [client 51.103.163.175:11882] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:17:38.331705 2026] [proxy_fcgi:error] [pid 29603:tid 29616] [client 51.103.163.175:11868] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:17:40.583807 2026] [proxy_fcgi:error] [pid 57639:tid 57659] [client 51.103.163.175:12053] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:17:44.960992 2026] [proxy_fcgi:error] [pid 57639:tid 57661] [client 51.103.163.175:65282] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:17:52.753574 2026] [proxy_fcgi:error] [pid 57639:tid 57648] [client 51.103.163.175:12089] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:17:57.561025 2026] [proxy_fcgi:error] [pid 57536:tid 57566] [client 51.103.163.175:11903] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:18:02.764955 2026] [proxy_fcgi:error] [pid 57536:tid 57570] [client 51.103.163.175:11896] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:18:15.882064 2026] [proxy_fcgi:error] [pid 7880:tid 7909] [client 51.103.163.175:17612] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:18:19.555019 2026] [proxy_fcgi:error] [pid 57536:tid 57552] [client 51.103.163.175:12069] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:18:19.860681 2026] [proxy_fcgi:error] [pid 57536:tid 57572] [client 51.103.163.175:12069] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:18:21.289613 2026] [proxy_fcgi:error] [pid 7880:tid 7891] [client 51.103.163.175:12063] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:18:28.114543 2026] [proxy_fcgi:error] [pid 49094:tid 49103] [client 51.103.163.175:17663] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:18:33.266758 2026] [proxy_fcgi:error] [pid 57536:tid 57555] [client 51.103.163.175:12038] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:18:42.314195 2026] [proxy_fcgi:error] [pid 29603:tid 29618] [client 51.103.163.175:11908] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:18:45.279905 2026] [proxy_fcgi:error] [pid 57639:tid 57651] [client 51.103.163.175:11841] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:18:50.736777 2026] [proxy_fcgi:error] [pid 49094:tid 49096] [client 51.103.163.175:17657] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:18:54.114448 2026] [proxy_fcgi:error] [pid 57536:tid 57560] [client 51.103.163.175:12059] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:18:55.762524 2026] [proxy_fcgi:error] [pid 57538:tid 57603] [client 51.103.163.175:12056] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:19:07.829835 2026] [proxy_fcgi:error] [pid 57536:tid 57561] [client 51.103.163.175:11961] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:19:14.644372 2026] [proxy_fcgi:error] [pid 57538:tid 57623] [client 51.103.163.175:12072] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:19:18.302481 2026] [proxy_fcgi:error] [pid 57639:tid 57660] [client 51.103.163.175:17601] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:19:20.931082 2026] [proxy_fcgi:error] [pid 49094:tid 49113] [client 51.103.163.175:17662] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:19:24.063152 2026] [proxy_fcgi:error] [pid 57537:tid 57596] [client 51.103.163.175:11960] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:19:30.220153 2026] [proxy_fcgi:error] [pid 57639:tid 57660] [client 51.103.163.175:12036] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:19:33.841521 2026] [proxy_fcgi:error] [pid 29603:tid 29627] [client 51.103.163.175:12079] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:19:36.496610 2026] [proxy_fcgi:error] [pid 57538:tid 57604] [client 51.103.163.175:17616] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:19:41.440723 2026] [proxy_fcgi:error] [pid 57536:tid 57570] [client 51.103.163.175:12037] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:19:43.688126 2026] [proxy_fcgi:error] [pid 7880:tid 7909] [client 51.103.163.175:17625] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:19:53.695443 2026] [proxy_fcgi:error] [pid 49094:tid 49106] [client 51.103.163.175:12088] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:19:56.641187 2026] [proxy_fcgi:error] [pid 57639:tid 57669] [client 51.103.163.175:11909] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:20:00.893480 2026] [proxy_fcgi:error] [pid 57639:tid 57648] [client 51.103.163.175:11891] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:20:06.436203 2026] [proxy_fcgi:error] [pid 7880:tid 7889] [client 51.103.163.175:11935] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:20:09.387498 2026] [proxy_fcgi:error] [pid 57536:tid 57560] [client 51.103.163.175:11896] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:20:11.197188 2026] [proxy_fcgi:error] [pid 7880:tid 7908] [client 51.103.163.175:11946] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:20:21.838938 2026] [proxy_fcgi:error] [pid 7880:tid 7892] [client 51.103.163.175:17621] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:20:24.857487 2026] [proxy_fcgi:error] [pid 57538:tid 57606] [client 51.103.163.175:11962] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:20:25.162498 2026] [proxy_fcgi:error] [pid 57538:tid 57619] [client 51.103.163.175:11962] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:20:36.977499 2026] [proxy_fcgi:error] [pid 7880:tid 7902] [client 51.103.163.175:11911] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:20:40.370198 2026] [proxy_fcgi:error] [pid 49094:tid 49097] [client 51.103.163.175:11928] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:20:43.172712 2026] [proxy_fcgi:error] [pid 29603:tid 29609] [client 51.103.163.175:11915] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:20:45.487055 2026] [proxy_fcgi:error] [pid 49094:tid 49114] [client 51.103.163.175:12071] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:20:47.935101 2026] [proxy_fcgi:error] [pid 49094:tid 49097] [client 51.103.163.175:12074] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:21:07.166883 2026] [proxy_fcgi:error] [pid 57536:tid 57553] [client 51.103.163.175:11932] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:21:13.017419 2026] [proxy_fcgi:error] [pid 7880:tid 7885] [client 51.103.163.175:12083] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:21:31.559339 2026] [proxy_fcgi:error] [pid 7880:tid 7900] [client 51.103.163.175:11840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:21:38.992903 2026] [proxy_fcgi:error] [pid 49094:tid 49114] [client 51.103.163.175:65314] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:21:47.467202 2026] [proxy_fcgi:error] [pid 57639:tid 57658] [client 51.103.163.175:17654] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:21:52.811805 2026] [proxy_fcgi:error] [pid 57537:tid 57578] [client 51.103.163.175:11905] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:21:57.976825 2026] [proxy_fcgi:error] [pid 57639:tid 57670] [client 51.103.163.175:11897] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:22:03.113650 2026] [proxy_fcgi:error] [pid 57536:tid 57552] [client 51.103.163.175:12054] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:22:15.403608 2026] [proxy_fcgi:error] [pid 57639:tid 57658] [client 51.103.163.175:11858] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:22:24.108804 2026] [proxy_fcgi:error] [pid 57536:tid 57570] [client 51.103.163.175:11874] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:22:34.969192 2026] [proxy_fcgi:error] [pid 57639:tid 57655] [client 51.103.163.175:11843] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:22:47.148925 2026] [proxy_fcgi:error] [pid 57639:tid 57647] [client 51.103.163.175:11936] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:22:53.014278 2026] [proxy_fcgi:error] [pid 57639:tid 57667] [client 51.103.163.175:11917] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:23:06.379877 2026] [proxy_fcgi:error] [pid 57639:tid 57655] [client 51.103.163.175:11922] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:23:13.958052 2026] [proxy_fcgi:error] [pid 57639:tid 57665] [client 51.103.163.175:12055] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:23:20.722640 2026] [proxy_fcgi:error] [pid 49094:tid 49101] [client 51.103.163.175:65216] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:23:29.365478 2026] [proxy_fcgi:error] [pid 57537:tid 57598] [client 51.103.163.175:11939] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:23:33.605311 2026] [proxy_fcgi:error] [pid 49094:tid 49104] [client 51.103.163.175:17647] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:23:38.792566 2026] [proxy_fcgi:error] [pid 7880:tid 7896] [client 51.103.163.175:17612] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:23:43.959443 2026] [proxy_fcgi:error] [pid 57536:tid 57569] [client 51.103.163.175:17631] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:23:46.587669 2026] [proxy_fcgi:error] [pid 57639:tid 57663] [client 51.103.163.175:17644] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:23:47.814213 2026] [proxy_fcgi:error] [pid 49094:tid 49105] [client 51.103.163.175:11921] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:23:50.210801 2026] [proxy_fcgi:error] [pid 49094:tid 49117] [client 51.103.163.175:17604] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:23:56.452566 2026] [proxy_fcgi:error] [pid 57537:tid 57577] [client 51.103.163.175:11855] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:23:59.105593 2026] [proxy_fcgi:error] [pid 57537:tid 57594] [client 51.103.163.175:12065] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:24:00.162099 2026] [proxy_fcgi:error] [pid 49094:tid 49102] [client 51.103.163.175:12086] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:24:04.139791 2026] [proxy_fcgi:error] [pid 57639:tid 57651] [client 51.103.163.175:11872] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:24:05.415865 2026] [proxy_fcgi:error] [pid 49094:tid 49112] [client 51.103.163.175:12064] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:24:18.676880 2026] [proxy_fcgi:error] [pid 57639:tid 57662] [client 51.103.163.175:12085] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:24:24.941070 2026] [proxy_fcgi:error] [pid 57536:tid 57559] [client 51.103.163.175:11883] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:24:27.377304 2026] [proxy_fcgi:error] [pid 29603:tid 29608] [client 51.103.163.175:65326] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:24:30.348519 2026] [proxy_fcgi:error] [pid 57639:tid 57653] [client 51.103.163.175:11852] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:24:32.904829 2026] [proxy_fcgi:error] [pid 49094:tid 49119] [client 51.103.163.175:12048] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:24:39.919544 2026] [proxy_fcgi:error] [pid 7880:tid 7888] [client 51.103.163.175:11889] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:24:45.275751 2026] [proxy_fcgi:error] [pid 57536:tid 57561] [client 51.103.163.175:11929] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:24:48.885519 2026] [proxy_fcgi:error] [pid 7880:tid 7909] [client 51.103.163.175:17660] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:24:52.160312 2026] [proxy_fcgi:error] [pid 57639:tid 57660] [client 51.103.163.175:12045] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:24:58.356872 2026] [proxy_fcgi:error] [pid 57639:tid 57658] [client 51.103.163.175:17603] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:25:00.350304 2026] [proxy_fcgi:error] [pid 57639:tid 57661] [client 51.103.163.175:17607] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:25:02.815786 2026] [proxy_fcgi:error] [pid 57538:tid 57614] [client 51.103.163.175:64681] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:25:07.527813 2026] [proxy_fcgi:error] [pid 57538:tid 57612] [client 51.103.163.175:12077] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:25:12.104686 2026] [proxy_fcgi:error] [pid 7880:tid 7885] [client 51.103.163.175:65247] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 22:25:15.300940 2026] [:error] [pid 7880:tid 7898] [client 51.103.163.175:11951] [client 51.103.163.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "aeDxS6aezm4fSGc0yULBqAAAAY0"]
[Thu Apr 16 22:55:58.541581 2026] [proxy_fcgi:error] [pid 57639:tid 57662] [client 34.63.18.246:64563] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:09:40.407164 2026] [proxy_fcgi:error] [pid 49094:tid 49099] [client 34.30.63.241:59642] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:15:16.257688 2026] [proxy_fcgi:error] [pid 57639:tid 57669] [client 35.237.114.229:57247] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:22.159748 2026] [proxy_fcgi:error] [pid 57536:tid 57569] [client 20.203.186.201:55984] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:22.844870 2026] [proxy_fcgi:error] [pid 29603:tid 29628] [client 20.203.186.201:59878] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:23.513854 2026] [proxy_fcgi:error] [pid 7880:tid 7903] [client 20.203.186.201:59854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:24.248645 2026] [proxy_fcgi:error] [pid 7880:tid 7895] [client 20.203.186.201:59505] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:24.812663 2026] [proxy_fcgi:error] [pid 57536:tid 57571] [client 20.203.186.201:55970] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:25.465406 2026] [proxy_fcgi:error] [pid 57639:tid 57668] [client 20.203.186.201:55982] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:26.118456 2026] [proxy_fcgi:error] [pid 57639:tid 57666] [client 20.203.186.201:55938] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:26.675503 2026] [proxy_fcgi:error] [pid 49094:tid 49101] [client 20.203.186.201:59508] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:27.347679 2026] [proxy_fcgi:error] [pid 49094:tid 49103] [client 20.203.186.201:55972] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:27.970119 2026] [proxy_fcgi:error] [pid 57639:tid 57664] [client 20.203.186.201:55936] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:28.240791 2026] [autoindex:error] [pid 57639:tid 57661] [client 20.203.186.201:55936] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 23:32:28.579317 2026] [proxy_fcgi:error] [pid 57639:tid 57649] [client 20.203.186.201:55936] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:29.314449 2026] [proxy_fcgi:error] [pid 57639:tid 57667] [client 20.203.186.201:55985] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:29.915039 2026] [proxy_fcgi:error] [pid 7880:tid 7891] [client 20.203.186.201:55989] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:30.466962 2026] [proxy_fcgi:error] [pid 57538:tid 57621] [client 20.203.186.201:59847] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:31.131518 2026] [proxy_fcgi:error] [pid 7880:tid 7898] [client 20.203.186.201:59459] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:31.498832 2026] [proxy_fcgi:error] [pid 7880:tid 7887] [client 20.203.186.201:59459] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:32.106325 2026] [proxy_fcgi:error] [pid 57537:tid 57581] [client 20.203.186.201:59844] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:32.752404 2026] [proxy_fcgi:error] [pid 49094:tid 49102] [client 20.203.186.201:55998] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:33.317406 2026] [proxy_fcgi:error] [pid 57536:tid 57569] [client 20.203.186.201:59503] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:33.615900 2026] [proxy_fcgi:error] [pid 57536:tid 57550] [client 20.203.186.201:59503] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:34.260434 2026] [proxy_fcgi:error] [pid 57536:tid 57558] [client 20.203.186.201:59495] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:34.929435 2026] [proxy_fcgi:error] [pid 57639:tid 57650] [client 20.203.186.201:55967] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:35.691354 2026] [proxy_fcgi:error] [pid 57536:tid 57555] [client 20.203.186.201:49991] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:36.369699 2026] [proxy_fcgi:error] [pid 57639:tid 57651] [client 20.203.186.201:59461] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:36.955697 2026] [proxy_fcgi:error] [pid 57639:tid 57667] [client 20.203.186.201:59849] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:37.651627 2026] [proxy_fcgi:error] [pid 57536:tid 57559] [client 20.203.186.201:59893] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:38.242833 2026] [proxy_fcgi:error] [pid 7880:tid 7900] [client 20.203.186.201:59484] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:38.886439 2026] [proxy_fcgi:error] [pid 57536:tid 57566] [client 20.203.186.201:59515] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:39.757764 2026] [autoindex:error] [pid 57538:tid 57607] [client 20.203.186.201:55947] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 23:32:40.368323 2026] [proxy_fcgi:error] [pid 57538:tid 57620] [client 20.203.186.201:55947] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:41.339555 2026] [proxy_fcgi:error] [pid 57538:tid 57624] [client 20.203.186.201:59866] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:41.712123 2026] [proxy_fcgi:error] [pid 57538:tid 57605] [client 20.203.186.201:59866] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:42.597983 2026] [proxy_fcgi:error] [pid 29603:tid 29629] [client 20.203.186.201:59886] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:43.278693 2026] [proxy_fcgi:error] [pid 57536:tid 57562] [client 20.203.186.201:59885] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:43.911530 2026] [proxy_fcgi:error] [pid 49094:tid 49102] [client 20.203.186.201:59501] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:44.569106 2026] [proxy_fcgi:error] [pid 57536:tid 57549] [client 20.203.186.201:59851] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:45.314936 2026] [proxy_fcgi:error] [pid 49094:tid 49099] [client 20.203.186.201:59485] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:45.964075 2026] [proxy_fcgi:error] [pid 57538:tid 57613] [client 20.203.186.201:59894] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:46.525815 2026] [proxy_fcgi:error] [pid 57537:tid 57575] [client 20.203.186.201:55960] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:47.082470 2026] [proxy_fcgi:error] [pid 57538:tid 57615] [client 20.203.186.201:59504] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:47.699628 2026] [proxy_fcgi:error] [pid 57538:tid 57610] [client 20.203.186.201:55619] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:48.645261 2026] [proxy_fcgi:error] [pid 57538:tid 57625] [client 20.203.186.201:59863] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:49.307405 2026] [proxy_fcgi:error] [pid 57536:tid 57572] [client 20.203.186.201:55956] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:49.940212 2026] [proxy_fcgi:error] [pid 49094:tid 49097] [client 20.203.186.201:59488] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:50.587705 2026] [proxy_fcgi:error] [pid 49094:tid 49109] [client 20.203.186.201:59865] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:51.201998 2026] [proxy_fcgi:error] [pid 57536:tid 57562] [client 20.203.186.201:59890] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:51.768032 2026] [proxy_fcgi:error] [pid 7880:tid 7891] [client 20.203.186.201:59514] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:52.548653 2026] [proxy_fcgi:error] [pid 57639:tid 57646] [client 20.203.186.201:49965] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:53.218554 2026] [proxy_fcgi:error] [pid 57536:tid 57566] [client 20.203.186.201:55969] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:53.915388 2026] [proxy_fcgi:error] [pid 57536:tid 57549] [client 20.203.186.201:59512] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:54.478855 2026] [proxy_fcgi:error] [pid 57639:tid 57653] [client 20.203.186.201:55979] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:55.131147 2026] [proxy_fcgi:error] [pid 57536:tid 57569] [client 20.203.186.201:59517] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:55.781522 2026] [proxy_fcgi:error] [pid 57639:tid 57646] [client 20.203.186.201:59892] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:56.116297 2026] [proxy_fcgi:error] [pid 57639:tid 57663] [client 20.203.186.201:59892] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:56.801324 2026] [proxy_fcgi:error] [pid 7880:tid 7904] [client 20.203.186.201:59843] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:57.418943 2026] [proxy_fcgi:error] [pid 49094:tid 49106] [client 20.203.186.201:55954] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:57.748068 2026] [proxy_fcgi:error] [pid 49094:tid 49115] [client 20.203.186.201:55954] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:58.430639 2026] [proxy_fcgi:error] [pid 57536:tid 57563] [client 20.203.186.201:59877] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:59.105817 2026] [proxy_fcgi:error] [pid 57538:tid 57611] [client 20.203.186.201:59499] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:32:59.710806 2026] [proxy_fcgi:error] [pid 57538:tid 57620] [client 20.203.186.201:55986] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:00.297375 2026] [proxy_fcgi:error] [pid 57536:tid 57561] [client 20.203.186.201:59841] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:00.920852 2026] [proxy_fcgi:error] [pid 49094:tid 49100] [client 20.203.186.201:59874] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:01.258964 2026] [proxy_fcgi:error] [pid 49094:tid 49104] [client 20.203.186.201:59874] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:01.906056 2026] [proxy_fcgi:error] [pid 49094:tid 49106] [client 20.203.186.201:55651] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:02.479550 2026] [proxy_fcgi:error] [pid 57536:tid 57554] [client 20.203.186.201:55975] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:03.231177 2026] [proxy_fcgi:error] [pid 57639:tid 57669] [client 20.203.186.201:59884] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:03.804634 2026] [proxy_fcgi:error] [pid 49094:tid 49114] [client 20.203.186.201:59887] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:04.496378 2026] [proxy_fcgi:error] [pid 7880:tid 7892] [client 20.203.186.201:59519] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:05.204010 2026] [proxy_fcgi:error] [pid 29603:tid 29615] [client 20.203.186.201:55639] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:05.769554 2026] [proxy_fcgi:error] [pid 57536:tid 57562] [client 20.203.186.201:59457] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:06.351905 2026] [proxy_fcgi:error] [pid 57639:tid 57651] [client 20.203.186.201:55992] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:06.693532 2026] [proxy_fcgi:error] [pid 57639:tid 57658] [client 20.203.186.201:55992] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:07.276067 2026] [proxy_fcgi:error] [pid 57639:tid 57647] [client 20.203.186.201:55994] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:07.842724 2026] [proxy_fcgi:error] [pid 57639:tid 57660] [client 20.203.186.201:50005] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:08.413562 2026] [proxy_fcgi:error] [pid 57639:tid 57661] [client 20.203.186.201:59486] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:09.130912 2026] [proxy_fcgi:error] [pid 49094:tid 49119] [client 20.203.186.201:55641] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:09.997225 2026] [proxy_fcgi:error] [pid 49094:tid 49098] [client 20.203.186.201:55940] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:10.608621 2026] [proxy_fcgi:error] [pid 7880:tid 7900] [client 20.203.186.201:59466] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:10.909953 2026] [proxy_fcgi:error] [pid 7880:tid 7891] [client 20.203.186.201:59466] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:11.518506 2026] [proxy_fcgi:error] [pid 49094:tid 49097] [client 20.203.186.201:55991] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:11.823405 2026] [proxy_fcgi:error] [pid 49094:tid 49118] [client 20.203.186.201:55991] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:12.541331 2026] [proxy_fcgi:error] [pid 49094:tid 49117] [client 20.203.186.201:55663] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:13.311521 2026] [proxy_fcgi:error] [pid 49094:tid 49105] [client 20.203.186.201:59889] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:13.617878 2026] [proxy_fcgi:error] [pid 49094:tid 49113] [client 20.203.186.201:59889] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:14.286251 2026] [proxy_fcgi:error] [pid 29603:tid 29616] [client 20.203.186.201:59858] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:14.669314 2026] [proxy_fcgi:error] [pid 29603:tid 29622] [client 20.203.186.201:59858] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:15.372574 2026] [proxy_fcgi:error] [pid 57537:tid 57581] [client 20.203.186.201:59473] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:16.180330 2026] [proxy_fcgi:error] [pid 57639:tid 57662] [client 20.203.186.201:59857] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:16.821368 2026] [proxy_fcgi:error] [pid 57536:tid 57564] [client 20.203.186.201:55996] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:17.714564 2026] [proxy_fcgi:error] [pid 49094:tid 49112] [client 20.203.186.201:50027] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:18.495596 2026] [proxy_fcgi:error] [pid 57536:tid 57561] [client 20.203.186.201:49988] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:19.234934 2026] [proxy_fcgi:error] [pid 57538:tid 57606] [client 20.203.186.201:59476] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:20.790162 2026] [proxy_fcgi:error] [pid 57538:tid 57621] [client 20.203.186.201:59476] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:21.454667 2026] [proxy_fcgi:error] [pid 57538:tid 57611] [client 20.203.186.201:59493] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:21.826054 2026] [proxy_fcgi:error] [pid 57538:tid 57608] [client 20.203.186.201:59493] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:22.355137 2026] [proxy_fcgi:error] [pid 57537:tid 57580] [client 20.203.186.201:50040] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:23.938881 2026] [proxy_fcgi:error] [pid 57537:tid 57591] [client 20.203.186.201:50040] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:24.174747 2026] [:error] [pid 57537:tid 57583] [client 20.203.186.201:50040] [client 20.203.186.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tinyfilemanager.php"] [unique_id "aeEBRFVQRS8nm73ENAnRbAAAAEg"]
[Thu Apr 16 23:33:24.835855 2026] [proxy_fcgi:error] [pid 57536:tid 57558] [client 20.203.186.201:59856] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:25.438453 2026] [proxy_fcgi:error] [pid 49094:tid 49100] [client 20.203.186.201:55941] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:26.035257 2026] [proxy_fcgi:error] [pid 49094:tid 49102] [client 20.203.186.201:59902] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:26.578928 2026] [autoindex:error] [pid 49094:tid 49113] [client 20.203.186.201:59870] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 23:33:26.879178 2026] [proxy_fcgi:error] [pid 49094:tid 49109] [client 20.203.186.201:59870] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:27.213878 2026] [proxy_fcgi:error] [pid 49094:tid 49101] [client 20.203.186.201:59870] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:28.022329 2026] [proxy_fcgi:error] [pid 57536:tid 57557] [client 20.203.186.201:55951] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:28.634331 2026] [proxy_fcgi:error] [pid 57639:tid 57657] [client 20.203.186.201:59500] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:28.944202 2026] [proxy_fcgi:error] [pid 57639:tid 57663] [client 20.203.186.201:59500] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:29.624894 2026] [proxy_fcgi:error] [pid 57538:tid 57609] [client 20.203.186.201:59511] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:30.176118 2026] [proxy_fcgi:error] [pid 57538:tid 57614] [client 20.203.186.201:59895] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:30.878522 2026] [proxy_fcgi:error] [pid 49094:tid 49103] [client 20.203.186.201:55943] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:31.599809 2026] [proxy_fcgi:error] [pid 57537:tid 57590] [client 20.203.186.201:55623] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:31.950134 2026] [proxy_fcgi:error] [pid 57537:tid 57581] [client 20.203.186.201:55623] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:32.754521 2026] [proxy_fcgi:error] [pid 57639:tid 57664] [client 20.203.186.201:59867] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:33.331123 2026] [proxy_fcgi:error] [pid 49094:tid 49100] [client 20.203.186.201:59871] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:33.637662 2026] [proxy_fcgi:error] [pid 49094:tid 49107] [client 20.203.186.201:59871] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:34.482985 2026] [proxy_fcgi:error] [pid 49094:tid 49112] [client 20.203.186.201:55664] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:35.165745 2026] [proxy_fcgi:error] [pid 57536:tid 57548] [client 20.203.186.201:59897] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:35.475653 2026] [proxy_fcgi:error] [pid 57536:tid 57550] [client 20.203.186.201:59897] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:36.198762 2026] [proxy_fcgi:error] [pid 57536:tid 57556] [client 20.203.186.201:55656] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:36.869428 2026] [proxy_fcgi:error] [pid 57536:tid 57557] [client 20.203.186.201:59464] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:37.227984 2026] [proxy_fcgi:error] [pid 57536:tid 57550] [client 20.203.186.201:59464] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:38.019475 2026] [autoindex:error] [pid 57536:tid 57572] [client 20.203.186.201:55962] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 23:33:38.386576 2026] [proxy_fcgi:error] [pid 57536:tid 57558] [client 20.203.186.201:55962] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:39.054044 2026] [proxy_fcgi:error] [pid 57537:tid 57596] [client 20.203.186.201:55957] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:39.387459 2026] [proxy_fcgi:error] [pid 57537:tid 57579] [client 20.203.186.201:55957] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:40.000891 2026] [proxy_fcgi:error] [pid 57639:tid 57659] [client 20.203.186.201:55978] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:40.693485 2026] [proxy_fcgi:error] [pid 57639:tid 57668] [client 20.203.186.201:59472] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:41.410741 2026] [proxy_fcgi:error] [pid 57639:tid 57655] [client 20.203.186.201:55937] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:42.219715 2026] [proxy_fcgi:error] [pid 7880:tid 7894] [client 20.203.186.201:59864] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:42.805415 2026] [proxy_fcgi:error] [pid 57639:tid 57660] [client 20.203.186.201:59471] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:43.155140 2026] [autoindex:error] [pid 57639:tid 57652] [client 20.203.186.201:59471] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2021/02/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 23:33:43.490063 2026] [proxy_fcgi:error] [pid 57639:tid 57661] [client 20.203.186.201:59471] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:44.298155 2026] [proxy_fcgi:error] [pid 57639:tid 57665] [client 20.203.186.201:59899] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:44.906345 2026] [proxy_fcgi:error] [pid 57639:tid 57646] [client 20.203.186.201:55987] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:45.445890 2026] [proxy_fcgi:error] [pid 57639:tid 57652] [client 20.203.186.201:55970] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:45.746976 2026] [proxy_fcgi:error] [pid 57639:tid 57661] [client 20.203.186.201:55970] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:46.315433 2026] [proxy_fcgi:error] [pid 49094:tid 49114] [client 20.203.186.201:55988] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:47.016804 2026] [:error] [pid 57536:tid 57564] [client 20.203.186.201:59480] [client 20.203.186.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeEBWyQU4faGja6jpDu5zwAAABA"]
[Thu Apr 16 23:33:47.907167 2026] [proxy_fcgi:error] [pid 57639:tid 57662] [client 20.203.186.201:55628] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:48.670311 2026] [proxy_fcgi:error] [pid 57537:tid 57581] [client 20.203.186.201:55670] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:48.975114 2026] [autoindex:error] [pid 57537:tid 57588] [client 20.203.186.201:55670] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 23:33:49.277937 2026] [autoindex:error] [pid 57537:tid 57575] [client 20.203.186.201:55670] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 23:33:49.667050 2026] [proxy_fcgi:error] [pid 57537:tid 57592] [client 20.203.186.201:55670] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:50.041920 2026] [proxy_fcgi:error] [pid 57537:tid 57594] [client 20.203.186.201:55670] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:50.678181 2026] [proxy_fcgi:error] [pid 57639:tid 57670] [client 20.203.186.201:59846] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:51.262623 2026] [proxy_fcgi:error] [pid 49094:tid 49103] [client 20.203.186.201:50041] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:51.927138 2026] [proxy_fcgi:error] [pid 57639:tid 57664] [client 20.203.186.201:59513] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:52.573157 2026] [proxy_fcgi:error] [pid 49094:tid 49100] [client 20.203.186.201:55955] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:53.128558 2026] [proxy_fcgi:error] [pid 49094:tid 49108] [client 20.203.186.201:49922] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:53.728876 2026] [proxy_fcgi:error] [pid 57639:tid 57668] [client 20.203.186.201:59460] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:54.058668 2026] [proxy_fcgi:error] [pid 57639:tid 57670] [client 20.203.186.201:59460] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:54.613337 2026] [proxy_fcgi:error] [pid 49094:tid 49103] [client 20.203.186.201:55958] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:55.165491 2026] [proxy_fcgi:error] [pid 49094:tid 49113] [client 20.203.186.201:55950] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:55.826696 2026] [proxy_fcgi:error] [pid 57639:tid 57667] [client 20.203.186.201:59491] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:56.517586 2026] [proxy_fcgi:error] [pid 57536:tid 57558] [client 20.203.186.201:59474] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:57.145869 2026] [proxy_fcgi:error] [pid 29603:tid 29614] [client 20.203.186.201:59497] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:57.836053 2026] [proxy_fcgi:error] [pid 57639:tid 57655] [client 20.203.186.201:49992] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:58.427662 2026] [proxy_fcgi:error] [pid 57639:tid 57654] [client 20.203.186.201:55945] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:59.078158 2026] [proxy_fcgi:error] [pid 29603:tid 29620] [client 20.203.186.201:55668] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:33:59.750880 2026] [proxy_fcgi:error] [pid 57639:tid 57663] [client 20.203.186.201:50024] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:34:00.359406 2026] [proxy_fcgi:error] [pid 7880:tid 7887] [client 20.203.186.201:49964] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:34:00.737436 2026] [proxy_fcgi:error] [pid 7880:tid 7908] [client 20.203.186.201:49964] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:34:01.360305 2026] [proxy_fcgi:error] [pid 49094:tid 49107] [client 20.203.186.201:55658] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:34:01.961404 2026] [proxy_fcgi:error] [pid 7880:tid 7897] [client 20.203.186.201:49999] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:34:02.671666 2026] [proxy_fcgi:error] [pid 49094:tid 49115] [client 20.203.186.201:59861] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:34:03.330289 2026] [proxy_fcgi:error] [pid 49094:tid 49104] [client 20.203.186.201:55968] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:34:04.023368 2026] [proxy_fcgi:error] [pid 57537:tid 57584] [client 20.203.186.201:55981] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:34:04.726477 2026] [proxy_fcgi:error] [pid 29603:tid 29615] [client 20.203.186.201:59487] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:34:05.424115 2026] [proxy_fcgi:error] [pid 57536:tid 57549] [client 20.203.186.201:50004] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:34:06.128211 2026] [proxy_fcgi:error] [pid 57536:tid 57564] [client 20.203.186.201:50008] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:34:06.735197 2026] [proxy_fcgi:error] [pid 29603:tid 29611] [client 20.203.186.201:55669] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:34:07.325732 2026] [proxy_fcgi:error] [pid 57536:tid 57562] [client 20.203.186.201:59868] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:45:00.184867 2026] [proxy_fcgi:error] [pid 7880:tid 7897] [client 35.237.114.229:55464] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 16 23:48:16.441500 2026] [proxy_fcgi:error] [pid 57538:tid 57625] [client 138.246.253.24:38278] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 00:01:04.239963 2026] [proxy_fcgi:error] [pid 57639:tid 57668] [client 35.223.19.70:56992] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 00:22:18.636508 2026] [:error] [pid 3245:tid 3286] [client 45.130.203.137:29567] [client 45.130.203.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/HEAD"] [unique_id "aeEMuqESOMTHVLs-uFCxlgAAARg"]
[Fri Apr 17 00:29:15.022864 2026] [proxy_fcgi:error] [pid 43386:tid 43421] [client 35.223.19.70:57718] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 01:08:05.471576 2026] [proxy_fcgi:error] [pid 26480:tid 26499] [client 52.167.144.65:10246] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 01:08:14.531702 2026] [proxy_fcgi:error] [pid 26102:tid 26118] [client 52.167.144.206:45551] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 01:56:20.433655 2026] [proxy_fcgi:error] [pid 26480:tid 26502] [client 18.212.24.65:47982] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 01:56:45.530851 2026] [proxy_fcgi:error] [pid 26102:tid 26120] [client 136.117.35.45:50292] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 02:10:13.938167 2026] [proxy_fcgi:error] [pid 43386:tid 43435] [client 18.212.24.65:44108] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 03:36:37.094041 2026] [proxy_fcgi:error] [pid 43837:tid 43849] [client 34.182.185.17:62696] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 04:03:11.800061 2026] [:error] [pid 9152:tid 9205] [client 209.38.89.62:38460] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/install.php"] [unique_id "aeFAf5JYca8I3TNCwIfNmgAAAE8"]
[Fri Apr 17 04:03:11.880064 2026] [:error] [pid 9151:tid 9177] [client 209.38.89.62:38468] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp/wp-admin/install.php"] [unique_id "aeFAf8hTVuRPkua22vRikwAAABA"]
[Fri Apr 17 04:03:11.973648 2026] [:error] [pid 9151:tid 9185] [client 209.38.89.62:38476] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/new/wp-admin/install.php"] [unique_id "aeFAf8hTVuRPkua22vRilQAAABg"]
[Fri Apr 17 04:03:12.020995 2026] [:error] [pid 9263:tid 9285] [client 209.38.89.62:38486] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/old/wp-admin/install.php"] [unique_id "aeFAgBP68VyHNvj1e56OEwAAANQ"]
[Fri Apr 17 04:03:12.635601 2026] [:error] [pid 9263:tid 9278] [client 209.38.89.62:38494] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wordpress/wp-admin/install.php"] [unique_id "aeFAgBP68VyHNvj1e56OFQAAAM0"]
[Fri Apr 17 04:03:12.865152 2026] [:error] [pid 9153:tid 9231] [client 209.38.89.62:38508] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/test/wp-admin/install.php"] [unique_id "aeFAgOMHGxkTZX3c45euiAAAAI0"]
[Fri Apr 17 04:03:12.959185 2026] [:error] [pid 9263:tid 9282] [client 209.38.89.62:38522] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/blog/wp-admin/install.php"] [unique_id "aeFAgBP68VyHNvj1e56OFgAAANE"]
[Fri Apr 17 04:03:13.440121 2026] [:error] [pid 9152:tid 9212] [client 209.38.89.62:38526] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cms/wp-admin/install.php"] [unique_id "aeFAgZJYca8I3TNCwIfNmwAAAFY"]
[Fri Apr 17 04:03:13.702719 2026] [:error] [pid 9152:tid 9214] [client 209.38.89.62:38532] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/web/wp-admin/install.php"] [unique_id "aeFAgZJYca8I3TNCwIfNnAAAAFg"]
[Fri Apr 17 04:03:13.918389 2026] [:error] [pid 9152:tid 9208] [client 209.38.89.62:38542] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/backup/wp-admin/install.php"] [unique_id "aeFAgZJYca8I3TNCwIfNnQAAAFI"]
[Fri Apr 17 04:03:13.981772 2026] [:error] [pid 9151:tid 9166] [client 209.38.89.62:38550] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/site/wp-admin/install.php"] [unique_id "aeFAgchTVuRPkua22vRimAAAAAU"]
[Fri Apr 17 04:03:14.063093 2026] [:error] [pid 9153:tid 9219] [client 209.38.89.62:38560] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/oldsite/wp-admin/install.php"] [unique_id "aeFAguMHGxkTZX3c45eujAAAAIE"]
[Fri Apr 17 04:03:14.113434 2026] [:error] [pid 9151:tid 9168] [client 209.38.89.62:38574] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/shop/wp-admin/install.php"] [unique_id "aeFAgshTVuRPkua22vRimQAAAAc"]
[Fri Apr 17 08:25:43.562995 2026] [:error] [pid 9151:tid 9165] [client 172.71.164.193:13261] [client 172.71.164.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/"] [unique_id "aeF-B8hTVuRPkua22vTVfQAAAAQ"]
[Fri Apr 17 08:25:46.083887 2026] [:error] [pid 9152:tid 9194] [client 172.71.148.20:12444] [client 172.71.148.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/"] [unique_id "aeF-CpJYca8I3TNCwIddKwAAAEQ"]
[Fri Apr 17 08:28:54.555472 2026] [proxy_fcgi:error] [pid 34273:tid 34283] [client 180.93.230.246:62943] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 11:15:32.175912 2026] [:error] [pid 9152:tid 9190] [client 138.199.15.165:38500] [client 138.199.15.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aeGl1JJYca8I3TNCwIe_rgAAAEA"]
[Fri Apr 17 11:15:32.676410 2026] [:error] [pid 9153:tid 9232] [client 138.199.15.165:37636] [client 138.199.15.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aeGl1OMHGxkTZX3c45esPgAAAI4"]
[Fri Apr 17 11:24:41.264498 2026] [proxy_fcgi:error] [pid 9263:tid 9277] [client 180.93.230.246:52754] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 12:23:30.882052 2026] [proxy_fcgi:error] [pid 9153:tid 9234] [client 104.168.28.15:52672] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 12:23:35.686167 2026] [proxy_fcgi:error] [pid 9151:tid 9180] [client 104.168.28.15:48026] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 12:58:17.832686 2026] [proxy_fcgi:error] [pid 61523:tid 61546] [client 15.204.182.106:2174] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 14:01:05.068871 2026] [proxy_fcgi:error] [pid 9263:tid 9271] [client 43.165.0.31:62978] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 14:08:31.814476 2026] [proxy_fcgi:error] [pid 9151:tid 9167] [client 124.198.131.57:51710] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 14:41:49.235334 2026] [proxy_fcgi:error] [pid 9151:tid 9167] [client 122.161.48.33:15725] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 14:55:07.712825 2026] [proxy_fcgi:error] [pid 61523:tid 61558] [client 192.159.99.168:19220] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 16:26:24.308324 2026] [proxy_fcgi:error] [pid 9263:tid 9267] [client 188.166.55.201:36182] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 16:26:25.371093 2026] [proxy_fcgi:error] [pid 61523:tid 61562] [client 188.166.55.201:36192] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: http://southerncrosscentre.au/
[Fri Apr 17 16:26:27.097222 2026] [proxy_fcgi:error] [pid 61523:tid 61560] [client 188.166.55.201:55222] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 16:26:35.392195 2026] [proxy_fcgi:error] [pid 25010:tid 25015] [client 188.166.55.201:56862] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/
[Fri Apr 17 16:57:02.868906 2026] [proxy_fcgi:error] [pid 61523:tid 61559] [client 216.73.216.65:22726] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 16:57:03.372661 2026] [proxy_fcgi:error] [pid 61523:tid 61547] [client 216.73.216.65:22726] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 18:23:34.182621 2026] [proxy_fcgi:error] [pid 25010:tid 25032] [client 176.65.148.161:38884] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 17 18:23:34.183320 2026] [proxy_fcgi:error] [pid 9153:tid 9230] [client 176.65.148.161:38896] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 00:30:44.488012 2026] [proxy_fcgi:error] [pid 59043:tid 59094] [client 136.114.255.104:56442] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 00:30:44.488082 2026] [proxy_fcgi:error] [pid 59042:tid 59062] [client 136.114.255.104:56436] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:16.887580 2026] [proxy_fcgi:error] [pid 9863:tid 9895] [client 20.91.129.11:46981] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:17.773726 2026] [proxy_fcgi:error] [pid 9864:tid 9921] [client 20.91.129.11:56502] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:18.623045 2026] [proxy_fcgi:error] [pid 9864:tid 9929] [client 20.91.129.11:33829] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:19.435250 2026] [proxy_fcgi:error] [pid 9864:tid 9916] [client 20.91.129.11:39118] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:20.269333 2026] [proxy_fcgi:error] [pid 9863:tid 9883] [client 20.91.129.11:5068] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:21.193223 2026] [proxy_fcgi:error] [pid 9863:tid 9885] [client 20.91.129.11:60817] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:22.304585 2026] [proxy_fcgi:error] [pid 9863:tid 9881] [client 20.91.129.11:35929] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:23.205177 2026] [proxy_fcgi:error] [pid 9864:tid 9925] [client 20.91.129.11:42151] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:24.120076 2026] [proxy_fcgi:error] [pid 9865:tid 9947] [client 20.91.129.11:48671] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:25.008805 2026] [proxy_fcgi:error] [pid 9970:tid 9983] [client 20.91.129.11:45595] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:25.918599 2026] [proxy_fcgi:error] [pid 9865:tid 9952] [client 20.91.129.11:56006] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:26.885011 2026] [proxy_fcgi:error] [pid 9970:tid 9977] [client 20.91.129.11:4131] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:27.854939 2026] [proxy_fcgi:error] [pid 9864:tid 9907] [client 20.91.129.11:32588] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:28.750968 2026] [proxy_fcgi:error] [pid 9970:tid 9974] [client 20.91.129.11:41048] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:29.584943 2026] [proxy_fcgi:error] [pid 9864:tid 9919] [client 20.91.129.11:34886] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:30.416777 2026] [proxy_fcgi:error] [pid 9864:tid 9913] [client 20.91.129.11:40068] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:31.282940 2026] [proxy_fcgi:error] [pid 9970:tid 9986] [client 20.91.129.11:44082] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:32.147888 2026] [proxy_fcgi:error] [pid 9865:tid 9939] [client 20.91.129.11:35760] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:33.060867 2026] [proxy_fcgi:error] [pid 9863:tid 9877] [client 20.91.129.11:4426] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:33.916322 2026] [proxy_fcgi:error] [pid 9864:tid 9923] [client 20.91.129.11:41042] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:34.721689 2026] [proxy_fcgi:error] [pid 9970:tid 9993] [client 20.91.129.11:4475] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:35.545128 2026] [proxy_fcgi:error] [pid 9970:tid 9984] [client 20.91.129.11:4422] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:36.564065 2026] [proxy_fcgi:error] [pid 9970:tid 9987] [client 20.91.129.11:4421] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:37.393022 2026] [proxy_fcgi:error] [pid 9970:tid 9975] [client 20.91.129.11:41086] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:38.287655 2026] [proxy_fcgi:error] [pid 9970:tid 9985] [client 20.91.129.11:53150] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:39.180616 2026] [proxy_fcgi:error] [pid 9863:tid 9885] [client 20.91.129.11:60465] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:40.021059 2026] [proxy_fcgi:error] [pid 9864:tid 9926] [client 20.91.129.11:48578] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:40.830709 2026] [proxy_fcgi:error] [pid 9863:tid 9878] [client 20.91.129.11:4805] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:41.667798 2026] [proxy_fcgi:error] [pid 9970:tid 9990] [client 20.91.129.11:4714] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 04:47:42.521818 2026] [proxy_fcgi:error] [pid 9865:tid 9950] [client 20.91.129.11:41038] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:36:24.471869 2026] [proxy_fcgi:error] [pid 34290:tid 34342] [client 158.158.109.150:65448] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:36:25.461991 2026] [proxy_fcgi:error] [pid 9863:tid 9884] [client 158.158.109.150:40315] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:36:26.474737 2026] [proxy_fcgi:error] [pid 9864:tid 9918] [client 158.158.109.150:65433] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:36:27.420847 2026] [proxy_fcgi:error] [pid 34288:tid 34311] [client 158.158.109.150:65468] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:36:28.500736 2026] [proxy_fcgi:error] [pid 13023:tid 13042] [client 158.158.109.150:65412] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:36:29.369710 2026] [proxy_fcgi:error] [pid 9970:tid 9985] [client 158.158.109.150:65464] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:36:31.084668 2026] [proxy_fcgi:error] [pid 13023:tid 13028] [client 158.158.109.150:65367] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:36:36.330125 2026] [proxy_fcgi:error] [pid 34288:tid 34297] [client 158.158.109.150:40299] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:15.519779 2026] [:error] [pid 9970:tid 9985] [client 158.158.109.150:65369] [client 158.158.109.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeLEKyYdRLRhVmaIMx35GgAAAMs"]
[Sat Apr 18 07:37:18.419865 2026] [proxy_fcgi:error] [pid 9865:tid 9961] [client 158.158.109.150:65454] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:20.253921 2026] [proxy_fcgi:error] [pid 13023:tid 13038] [client 158.158.109.150:65449] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:21.463698 2026] [proxy_fcgi:error] [pid 9970:tid 9982] [client 158.158.109.150:65363] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:22.748982 2026] [proxy_fcgi:error] [pid 13023:tid 13026] [client 158.158.109.150:65414] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:23.910259 2026] [proxy_fcgi:error] [pid 13023:tid 13036] [client 158.158.109.150:40260] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:24.738999 2026] [proxy_fcgi:error] [pid 13023:tid 13048] [client 158.158.109.150:40285] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:25.569213 2026] [proxy_fcgi:error] [pid 34288:tid 34305] [client 158.158.109.150:40289] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:26.888138 2026] [proxy_fcgi:error] [pid 9863:tid 9878] [client 158.158.109.150:65471] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:27.750801 2026] [proxy_fcgi:error] [pid 34290:tid 34321] [client 158.158.109.150:65452] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:29.009191 2026] [proxy_fcgi:error] [pid 13023:tid 13041] [client 158.158.109.150:65423] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:29.902179 2026] [proxy_fcgi:error] [pid 9864:tid 9929] [client 158.158.109.150:65461] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:30.682214 2026] [proxy_fcgi:error] [pid 13023:tid 13035] [client 158.158.109.150:40301] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:32.114594 2026] [proxy_fcgi:error] [pid 34237:tid 34253] [client 158.158.109.150:65364] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:33.104083 2026] [proxy_fcgi:error] [pid 9865:tid 9951] [client 158.158.109.150:65465] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:34.205973 2026] [proxy_fcgi:error] [pid 34290:tid 34322] [client 158.158.109.150:40256] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:35.565835 2026] [proxy_fcgi:error] [pid 34290:tid 34340] [client 158.158.109.150:40316] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:36.298102 2026] [:error] [pid 34237:tid 34248] [client 158.158.109.150:40280] [client 158.158.109.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tiny.php"] [unique_id "aeLEQBBmX4Wq5a6rxfbZVwAAAUk"]
[Sat Apr 18 07:37:37.402363 2026] [proxy_fcgi:error] [pid 34237:tid 34242] [client 158.158.109.150:65071] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:38.326716 2026] [proxy_fcgi:error] [pid 34290:tid 34321] [client 158.158.109.150:40275] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:39.361599 2026] [proxy_fcgi:error] [pid 9863:tid 9882] [client 158.158.109.150:65365] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:40.345272 2026] [proxy_fcgi:error] [pid 34290:tid 34336] [client 158.158.109.150:65408] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:41.433314 2026] [proxy_fcgi:error] [pid 13023:tid 13035] [client 158.158.109.150:65451] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:42.660771 2026] [proxy_fcgi:error] [pid 9864:tid 9921] [client 158.158.109.150:65410] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:43.599008 2026] [proxy_fcgi:error] [pid 34290:tid 34335] [client 158.158.109.150:65455] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:44.994314 2026] [proxy_fcgi:error] [pid 13023:tid 13044] [client 158.158.109.150:40263] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:46.959458 2026] [proxy_fcgi:error] [pid 13023:tid 13044] [client 158.158.109.150:40276] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:48.808542 2026] [proxy_fcgi:error] [pid 13023:tid 13048] [client 158.158.109.150:65438] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:49.677172 2026] [proxy_fcgi:error] [pid 13023:tid 13029] [client 158.158.109.150:65361] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:50.911459 2026] [proxy_fcgi:error] [pid 34237:tid 34263] [client 158.158.109.150:40282] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:52.081061 2026] [proxy_fcgi:error] [pid 9865:tid 9940] [client 158.158.109.150:65435] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:53.607977 2026] [proxy_fcgi:error] [pid 13023:tid 13046] [client 158.158.109.150:65350] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:54.593252 2026] [proxy_fcgi:error] [pid 13023:tid 13039] [client 158.158.109.150:40312] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:55.770611 2026] [proxy_fcgi:error] [pid 13023:tid 13043] [client 158.158.109.150:65366] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:56.681503 2026] [proxy_fcgi:error] [pid 13023:tid 13029] [client 158.158.109.150:65447] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:57.934928 2026] [proxy_fcgi:error] [pid 34290:tid 34334] [client 158.158.109.150:65024] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:37:59.260946 2026] [proxy_fcgi:error] [pid 13023:tid 13039] [client 158.158.109.150:65370] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:00.457208 2026] [proxy_fcgi:error] [pid 13023:tid 13034] [client 158.158.109.150:65425] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:02.247508 2026] [proxy_fcgi:error] [pid 13023:tid 13040] [client 158.158.109.150:65400] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:03.425520 2026] [proxy_fcgi:error] [pid 34237:tid 34260] [client 158.158.109.150:40266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:04.978513 2026] [proxy_fcgi:error] [pid 9970:tid 9988] [client 158.158.109.150:40261] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:06.806858 2026] [proxy_fcgi:error] [pid 34290:tid 34319] [client 158.158.109.150:40307] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:09.130983 2026] [proxy_fcgi:error] [pid 34288:tid 34292] [client 158.158.109.150:65426] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:11.183978 2026] [proxy_fcgi:error] [pid 9970:tid 9989] [client 158.158.109.150:64967] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:13.188704 2026] [proxy_fcgi:error] [pid 34288:tid 34313] [client 158.158.109.150:65421] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:15.048722 2026] [proxy_fcgi:error] [pid 34290:tid 34332] [client 158.158.109.150:65380] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:16.336214 2026] [proxy_fcgi:error] [pid 34288:tid 34294] [client 158.158.109.150:65347] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:18.206059 2026] [proxy_fcgi:error] [pid 9864:tid 9905] [client 158.158.109.150:65376] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:19.333027 2026] [proxy_fcgi:error] [pid 9863:tid 9897] [client 158.158.109.150:65073] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:20.211061 2026] [proxy_fcgi:error] [pid 34237:tid 34260] [client 158.158.109.150:65349] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:21.368011 2026] [proxy_fcgi:error] [pid 13023:tid 13032] [client 158.158.109.150:65360] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:22.503032 2026] [proxy_fcgi:error] [pid 9864:tid 9922] [client 158.158.109.150:40294] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:24.081746 2026] [proxy_fcgi:error] [pid 34288:tid 34299] [client 158.158.109.150:65388] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:26.780923 2026] [proxy_fcgi:error] [pid 34290:tid 34320] [client 158.158.109.150:40262] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:28.514774 2026] [proxy_fcgi:error] [pid 13023:tid 13046] [client 158.158.109.150:65469] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:30.280704 2026] [proxy_fcgi:error] [pid 13023:tid 13048] [client 158.158.109.150:40270] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:35.692667 2026] [proxy_fcgi:error] [pid 9865:tid 9953] [client 158.158.109.150:65354] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:39.048424 2026] [proxy_fcgi:error] [pid 34237:tid 34250] [client 158.158.109.150:65026] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:42.051079 2026] [proxy_fcgi:error] [pid 9865:tid 9955] [client 158.158.109.150:65346] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:44.362940 2026] [proxy_fcgi:error] [pid 9970:tid 9983] [client 158.158.109.150:65348] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:46.056101 2026] [proxy_fcgi:error] [pid 9970:tid 9984] [client 158.158.109.150:65457] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:47.975868 2026] [proxy_fcgi:error] [pid 9863:tid 9885] [client 158.158.109.150:40318] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:48.897820 2026] [proxy_fcgi:error] [pid 13023:tid 13034] [client 158.158.109.150:40256] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:49.775135 2026] [proxy_fcgi:error] [pid 34290:tid 34332] [client 158.158.109.150:65420] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:50.769305 2026] [proxy_fcgi:error] [pid 34290:tid 34321] [client 158.158.109.150:65429] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:51.676436 2026] [proxy_fcgi:error] [pid 13023:tid 13038] [client 158.158.109.150:65415] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:52.476249 2026] [proxy_fcgi:error] [pid 13023:tid 13043] [client 158.158.109.150:65439] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:53.491562 2026] [proxy_fcgi:error] [pid 34290:tid 34327] [client 158.158.109.150:65031] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:54.330837 2026] [proxy_fcgi:error] [pid 34288:tid 34295] [client 158.158.109.150:40314] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:55.338923 2026] [proxy_fcgi:error] [pid 34290:tid 34328] [client 158.158.109.150:65434] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:56.281490 2026] [proxy_fcgi:error] [pid 9970:tid 9986] [client 158.158.109.150:65383] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:57.248015 2026] [proxy_fcgi:error] [pid 9863:tid 9878] [client 158.158.109.150:40291] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:58.279295 2026] [proxy_fcgi:error] [pid 13023:tid 13048] [client 158.158.109.150:65041] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:38:59.664368 2026] [proxy_fcgi:error] [pid 9864:tid 9927] [client 158.158.109.150:64978] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:00.230690 2026] [proxy_fcgi:error] [pid 9864:tid 9929] [client 158.158.109.150:64978] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:01.397595 2026] [proxy_fcgi:error] [pid 9864:tid 9910] [client 158.158.109.150:65431] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:02.429886 2026] [proxy_fcgi:error] [pid 13023:tid 13035] [client 158.158.109.150:65467] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:03.609999 2026] [proxy_fcgi:error] [pid 34288:tid 34301] [client 158.158.109.150:65442] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:04.966540 2026] [proxy_fcgi:error] [pid 34288:tid 34293] [client 158.158.109.150:65066] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:06.446962 2026] [proxy_fcgi:error] [pid 9865:tid 9958] [client 158.158.109.150:65063] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:08.946838 2026] [proxy_fcgi:error] [pid 34288:tid 34293] [client 158.158.109.150:40296] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:11.019573 2026] [proxy_fcgi:error] [pid 9970:tid 9980] [client 158.158.109.150:65453] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:13.510062 2026] [:error] [pid 9865:tid 9955] [client 158.158.109.150:64961] [client 158.158.109.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeLEoazb5knECIY-C-jLIQAAAJI"]
[Sat Apr 18 07:39:18.481368 2026] [proxy_fcgi:error] [pid 13023:tid 13049] [client 158.158.109.150:65459] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:20.007165 2026] [proxy_fcgi:error] [pid 34290:tid 34340] [client 158.158.109.150:65416] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:22.160261 2026] [proxy_fcgi:error] [pid 34237:tid 34247] [client 158.158.109.150:40309] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:23.089220 2026] [proxy_fcgi:error] [pid 34237:tid 34256] [client 158.158.109.150:65470] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:24.021674 2026] [proxy_fcgi:error] [pid 9970:tid 9975] [client 158.158.109.150:40269] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:26.086376 2026] [proxy_fcgi:error] [pid 34290:tid 34331] [client 158.158.109.150:64973] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:27.136550 2026] [proxy_fcgi:error] [pid 9970:tid 9984] [client 158.158.109.150:40313] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:28.007469 2026] [proxy_fcgi:error] [pid 9865:tid 9959] [client 158.158.109.150:40303] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:28.879804 2026] [proxy_fcgi:error] [pid 13023:tid 13039] [client 158.158.109.150:40277] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:30.559761 2026] [proxy_fcgi:error] [pid 9865:tid 9949] [client 158.158.109.150:65345] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:32.553530 2026] [proxy_fcgi:error] [pid 34288:tid 34314] [client 158.158.109.150:40273] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:33.666920 2026] [proxy_fcgi:error] [pid 34288:tid 34293] [client 158.158.109.150:65355] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:36.350332 2026] [proxy_fcgi:error] [pid 9864:tid 9916] [client 158.158.109.150:65377] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:37.913319 2026] [proxy_fcgi:error] [pid 9970:tid 9987] [client 158.158.109.150:65430] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:38.990887 2026] [proxy_fcgi:error] [pid 9864:tid 9918] [client 158.158.109.150:64995] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:41.251933 2026] [proxy_fcgi:error] [pid 13023:tid 13035] [client 158.158.109.150:40272] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:42.385189 2026] [proxy_fcgi:error] [pid 13023:tid 13041] [client 158.158.109.150:40317] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:43.723684 2026] [proxy_fcgi:error] [pid 9864:tid 9922] [client 158.158.109.150:40259] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:44.839031 2026] [proxy_fcgi:error] [pid 9865:tid 9945] [client 158.158.109.150:65390] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:45.867829 2026] [proxy_fcgi:error] [pid 13023:tid 13038] [client 158.158.109.150:65038] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:47.025818 2026] [proxy_fcgi:error] [pid 34290:tid 34338] [client 158.158.109.150:65344] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:47.558951 2026] [proxy_fcgi:error] [pid 34290:tid 34337] [client 158.158.109.150:65344] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:48.417498 2026] [proxy_fcgi:error] [pid 9863:tid 9888] [client 158.158.109.150:65017] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:48.941486 2026] [proxy_fcgi:error] [pid 9863:tid 9883] [client 158.158.109.150:65017] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:50.282756 2026] [proxy_fcgi:error] [pid 13023:tid 13044] [client 158.158.109.150:65399] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:50.805079 2026] [proxy_fcgi:error] [pid 13023:tid 13035] [client 158.158.109.150:65399] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:51.856302 2026] [proxy_fcgi:error] [pid 34290:tid 34325] [client 158.158.109.150:64979] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 07:39:52.894396 2026] [proxy_fcgi:error] [pid 13023:tid 13042] [client 158.158.109.150:65466] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 13:36:30.465784 2026] [proxy_fcgi:error] [pid 34290:tid 34322] [client 34.77.219.71:60908] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 13:36:36.001706 2026] [proxy_fcgi:error] [pid 34290:tid 34340] [client 34.14.33.150:54472] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 13:50:56.746259 2026] [proxy_fcgi:error] [pid 9865:tid 9947] [client 43.164.193.149:50825] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 14:18:13.661700 2026] [proxy_fcgi:error] [pid 13023:tid 13043] [client 138.68.141.40:45322] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 14:18:14.537315 2026] [proxy_fcgi:error] [pid 13023:tid 13035] [client 138.68.141.40:45326] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: http://www.southerncrosscentre.au/
[Sat Apr 18 14:18:15.931345 2026] [proxy_fcgi:error] [pid 13023:tid 13045] [client 138.68.141.40:60188] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 14:18:22.369064 2026] [proxy_fcgi:error] [pid 34290:tid 34337] [client 138.68.141.40:60238] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://www.southerncrosscentre.au/
[Sat Apr 18 15:25:14.869969 2026] [proxy_fcgi:error] [pid 9865:tid 9956] [client 138.68.141.40:37182] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 15:25:15.674399 2026] [proxy_fcgi:error] [pid 9970:tid 9996] [client 138.68.141.40:37186] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: http://www.southerncrosscentre.au/
[Sat Apr 18 15:25:16.927125 2026] [proxy_fcgi:error] [pid 34290:tid 34319] [client 138.68.141.40:48384] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 15:25:23.165793 2026] [proxy_fcgi:error] [pid 9864:tid 9921] [client 138.68.141.40:52936] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://www.southerncrosscentre.au/
[Sat Apr 18 16:42:12.922574 2026] [proxy_fcgi:error] [pid 34290:tid 34336] [client 216.73.216.124:49873] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 16:42:13.439734 2026] [proxy_fcgi:error] [pid 34290:tid 34326] [client 216.73.216.124:49873] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 19:12:18.494923 2026] [proxy_fcgi:error] [pid 34237:tid 34241] [client 87.249.133.84:54516] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 19:12:27.885159 2026] [proxy_fcgi:error] [pid 34290:tid 34337] [client 87.249.133.84:46770] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 18 20:25:21.541371 2026] [proxy_fcgi:error] [pid 9864:tid 9908] [client 185.72.144.171:39442] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 00:19:13.753794 2026] [proxy_fcgi:error] [pid 33517:tid 33533] [client 91.200.101.138:54164] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 02:39:24.629260 2026] [proxy_fcgi:error] [pid 41277:tid 41279] [client 64.227.39.236:56494] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 02:39:25.512342 2026] [proxy_fcgi:error] [pid 32165:tid 32176] [client 64.227.39.236:56510] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: http://www.southerncrosscentre.au/
[Sun Apr 19 02:39:26.776617 2026] [proxy_fcgi:error] [pid 32165:tid 32192] [client 64.227.39.236:59058] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 02:39:33.015572 2026] [proxy_fcgi:error] [pid 32165:tid 32172] [client 64.227.39.236:45126] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://www.southerncrosscentre.au/
[Sun Apr 19 03:12:53.570626 2026] [:error] [pid 32252:tid 32265] [client 20.203.175.196:8074] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aePXteXl4Yc-Lt5fJ9izuwAAAQs"]
[Sun Apr 19 03:12:54.545045 2026] [:error] [pid 32167:tid 32231] [client 20.203.175.196:8178] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aePXtkyD4Jm27Mb3NJio9wAAAIY"]
[Sun Apr 19 03:12:55.689052 2026] [:error] [pid 32166:tid 32205] [client 20.203.175.196:8180] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aePXt5CHNkWwdiZnafLc9wAAAEc"]
[Sun Apr 19 03:12:56.552863 2026] [:error] [pid 32167:tid 32225] [client 20.203.175.196:8183] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aePXuEyD4Jm27Mb3NJio_QAAAIA"]
[Sun Apr 19 03:30:57.164741 2026] [proxy_fcgi:error] [pid 32252:tid 32254] [client 185.8.106.232:56180] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 03:47:35.514332 2026] [proxy_fcgi:error] [pid 40351:tid 40383] [client 158.173.67.197:49253] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 06:21:02.139740 2026] [proxy_fcgi:error] [pid 15694:tid 15726] [client 149.56.150.219:40275] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 06:21:04.966652 2026] [proxy_fcgi:error] [pid 15760:tid 15790] [client 149.56.150.219:34263] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:06:59.478415 2026] [proxy_fcgi:error] [pid 47773:tid 47833] [client 20.100.201.203:58579] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:00.380278 2026] [proxy_fcgi:error] [pid 47773:tid 47823] [client 20.100.201.203:47641] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:01.228985 2026] [proxy_fcgi:error] [pid 47773:tid 47835] [client 20.100.201.203:47637] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:01.817421 2026] [proxy_fcgi:error] [pid 47773:tid 47820] [client 20.100.201.203:47637] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:02.651194 2026] [proxy_fcgi:error] [pid 47886:tid 47899] [client 20.100.201.203:47662] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:03.629036 2026] [proxy_fcgi:error] [pid 47772:tid 47798] [client 20.100.201.203:47647] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:04.501130 2026] [proxy_fcgi:error] [pid 47773:tid 47816] [client 20.100.201.203:47616] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:05.327919 2026] [proxy_fcgi:error] [pid 47773:tid 47831] [client 20.100.201.203:47620] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:05.886798 2026] [proxy_fcgi:error] [pid 47773:tid 47824] [client 20.100.201.203:47620] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:06.712015 2026] [proxy_fcgi:error] [pid 47773:tid 47832] [client 20.100.201.203:58592] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:07.546009 2026] [proxy_fcgi:error] [pid 47773:tid 47839] [client 20.100.201.203:35471] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:08.381023 2026] [proxy_fcgi:error] [pid 15763:tid 15799] [client 20.100.201.203:58612] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:09.272859 2026] [proxy_fcgi:error] [pid 47773:tid 47839] [client 20.100.201.203:35505] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:10.076111 2026] [proxy_fcgi:error] [pid 47773:tid 47817] [client 20.100.201.203:35466] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:10.621541 2026] [proxy_fcgi:error] [pid 47773:tid 47833] [client 20.100.201.203:35466] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:11.434661 2026] [proxy_fcgi:error] [pid 15763:tid 15815] [client 20.100.201.203:47628] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:12.229362 2026] [proxy_fcgi:error] [pid 47773:tid 47834] [client 20.100.201.203:58564] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:13.027089 2026] [proxy_fcgi:error] [pid 15693:tid 15708] [client 20.100.201.203:35516] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:13.845068 2026] [proxy_fcgi:error] [pid 47775:tid 47853] [client 20.100.201.203:35494] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:14.650644 2026] [proxy_fcgi:error] [pid 15763:tid 15796] [client 20.100.201.203:35511] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:15.492784 2026] [proxy_fcgi:error] [pid 47886:tid 47895] [client 20.100.201.203:47670] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:16.323009 2026] [proxy_fcgi:error] [pid 47886:tid 47910] [client 20.100.201.203:58562] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:17.162538 2026] [proxy_fcgi:error] [pid 47775:tid 47846] [client 20.100.201.203:35472] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:17.990652 2026] [proxy_fcgi:error] [pid 47775:tid 47856] [client 20.100.201.203:35493] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:18.803785 2026] [proxy_fcgi:error] [pid 15694:tid 15730] [client 20.100.201.203:60406] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:19.618455 2026] [proxy_fcgi:error] [pid 47772:tid 47790] [client 20.100.201.203:35513] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:20.431473 2026] [proxy_fcgi:error] [pid 47886:tid 47894] [client 20.100.201.203:35488] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:21.254971 2026] [proxy_fcgi:error] [pid 15760:tid 15769] [client 20.100.201.203:35469] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:22.086473 2026] [proxy_fcgi:error] [pid 15694:tid 15749] [client 20.100.201.203:47645] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:22.880855 2026] [proxy_fcgi:error] [pid 47772:tid 47813] [client 20.100.201.203:47667] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:23.688125 2026] [proxy_fcgi:error] [pid 15760:tid 15778] [client 20.100.201.203:47663] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:24.571055 2026] [proxy_fcgi:error] [pid 47775:tid 47846] [client 20.100.201.203:35512] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:25.395866 2026] [proxy_fcgi:error] [pid 47773:tid 47837] [client 20.100.201.203:47618] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:26.211160 2026] [proxy_fcgi:error] [pid 47773:tid 47840] [client 20.100.201.203:47652] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:27.008492 2026] [proxy_fcgi:error] [pid 47773:tid 47828] [client 20.100.201.203:47661] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:27.826674 2026] [proxy_fcgi:error] [pid 15694:tid 15741] [client 20.100.201.203:58608] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:28.665474 2026] [proxy_fcgi:error] [pid 15763:tid 15802] [client 20.100.201.203:47678] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:29.483853 2026] [proxy_fcgi:error] [pid 47775:tid 47863] [client 20.100.201.203:58611] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:30.319802 2026] [proxy_fcgi:error] [pid 15765:tid 15867] [client 20.100.201.203:58607] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:31.134578 2026] [proxy_fcgi:error] [pid 47773:tid 47830] [client 20.100.201.203:35458] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:31.930819 2026] [proxy_fcgi:error] [pid 47773:tid 47838] [client 20.100.201.203:58591] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:32.749776 2026] [proxy_fcgi:error] [pid 47775:tid 47855] [client 20.100.201.203:46027] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:33.569288 2026] [proxy_fcgi:error] [pid 47886:tid 47889] [client 20.100.201.203:47622] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:34.548381 2026] [proxy_fcgi:error] [pid 47886:tid 47901] [client 20.100.201.203:47636] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:35.382656 2026] [proxy_fcgi:error] [pid 47886:tid 47897] [client 20.100.201.203:35499] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:36.201348 2026] [proxy_fcgi:error] [pid 47773:tid 47817] [client 20.100.201.203:58609] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:37.006704 2026] [proxy_fcgi:error] [pid 15764:tid 15839] [client 20.100.201.203:47642] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:37.820290 2026] [proxy_fcgi:error] [pid 47775:tid 47859] [client 20.100.201.203:58602] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:38.633590 2026] [proxy_fcgi:error] [pid 47773:tid 47837] [client 20.100.201.203:47650] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:39.484743 2026] [proxy_fcgi:error] [pid 47773:tid 47835] [client 20.100.201.203:58601] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:40.303704 2026] [proxy_fcgi:error] [pid 47773:tid 47830] [client 20.100.201.203:58604] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:41.114971 2026] [proxy_fcgi:error] [pid 47773:tid 47838] [client 20.100.201.203:35459] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:41.654389 2026] [proxy_fcgi:error] [pid 47773:tid 47826] [client 20.100.201.203:35459] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:42.466335 2026] [proxy_fcgi:error] [pid 47773:tid 47836] [client 20.100.201.203:47630] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:43.280617 2026] [proxy_fcgi:error] [pid 47775:tid 47863] [client 20.100.201.203:47664] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:45.141378 2026] [proxy_fcgi:error] [pid 47775:tid 47863] [client 20.100.201.203:47664] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:45.950099 2026] [proxy_fcgi:error] [pid 15765:tid 15856] [client 20.100.201.203:35484] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:46.778781 2026] [proxy_fcgi:error] [pid 15764:tid 15835] [client 20.100.201.203:58604] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:47.601566 2026] [proxy_fcgi:error] [pid 47773:tid 47835] [client 20.100.201.203:35462] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:48.476944 2026] [proxy_fcgi:error] [pid 15693:tid 15715] [client 20.100.201.203:35460] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:49.312644 2026] [proxy_fcgi:error] [pid 47775:tid 47852] [client 20.100.201.203:58584] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:50.115315 2026] [proxy_fcgi:error] [pid 47775:tid 47849] [client 20.100.201.203:47673] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:50.680168 2026] [proxy_fcgi:error] [pid 47775:tid 47864] [client 20.100.201.203:47673] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:51.500851 2026] [proxy_fcgi:error] [pid 15765:tid 15868] [client 20.100.201.203:58567] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:52.319335 2026] [proxy_fcgi:error] [pid 15764:tid 15848] [client 20.100.201.203:35500] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:53.127783 2026] [proxy_fcgi:error] [pid 47773:tid 47833] [client 20.100.201.203:35470] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:53.943607 2026] [proxy_fcgi:error] [pid 47775:tid 47847] [client 20.100.201.203:58572] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:54.740652 2026] [proxy_fcgi:error] [pid 47775:tid 47858] [client 20.100.201.203:60367] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:55.604023 2026] [proxy_fcgi:error] [pid 47886:tid 47911] [client 20.100.201.203:60354] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:56.431792 2026] [proxy_fcgi:error] [pid 15694:tid 15737] [client 20.100.201.203:58588] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:57.245064 2026] [proxy_fcgi:error] [pid 15694:tid 15726] [client 20.100.201.203:58590] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:58.060740 2026] [proxy_fcgi:error] [pid 15760:tid 15787] [client 20.100.201.203:58560] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:58.607456 2026] [proxy_fcgi:error] [pid 15760:tid 15791] [client 20.100.201.203:58560] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:07:59.435182 2026] [proxy_fcgi:error] [pid 15763:tid 15815] [client 20.100.201.203:58585] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:00.397047 2026] [proxy_fcgi:error] [pid 47775:tid 47843] [client 20.100.201.203:35457] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:01.275960 2026] [proxy_fcgi:error] [pid 15760:tid 15777] [client 20.100.201.203:47676] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:02.105870 2026] [proxy_fcgi:error] [pid 15760:tid 15771] [client 20.100.201.203:47651] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:02.919886 2026] [proxy_fcgi:error] [pid 47772:tid 47813] [client 20.100.201.203:35517] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:03.751504 2026] [proxy_fcgi:error] [pid 15760:tid 15789] [client 20.100.201.203:58623] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:04.293995 2026] [proxy_fcgi:error] [pid 15760:tid 15776] [client 20.100.201.203:58623] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:05.113465 2026] [proxy_fcgi:error] [pid 47773:tid 47836] [client 20.100.201.203:46034] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:05.657205 2026] [proxy_fcgi:error] [pid 47773:tid 47834] [client 20.100.201.203:46034] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:06.549176 2026] [proxy_fcgi:error] [pid 15760:tid 15770] [client 20.100.201.203:47621] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:07.348768 2026] [proxy_fcgi:error] [pid 15760:tid 15774] [client 20.100.201.203:58566] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:07.885026 2026] [proxy_fcgi:error] [pid 15760:tid 15786] [client 20.100.201.203:58566] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:08.677866 2026] [proxy_fcgi:error] [pid 47772:tid 47795] [client 20.100.201.203:47646] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:09.213658 2026] [proxy_fcgi:error] [pid 47772:tid 47798] [client 20.100.201.203:47646] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:10.048973 2026] [proxy_fcgi:error] [pid 47886:tid 47907] [client 20.100.201.203:58613] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:10.877231 2026] [proxy_fcgi:error] [pid 47775:tid 47856] [client 20.100.201.203:58565] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:11.739273 2026] [proxy_fcgi:error] [pid 15765:tid 15870] [client 20.100.201.203:47648] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:12.538440 2026] [proxy_fcgi:error] [pid 47773:tid 47839] [client 20.100.201.203:58578] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:13.339491 2026] [proxy_fcgi:error] [pid 47886:tid 47912] [client 20.100.201.203:60393] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:14.151088 2026] [proxy_fcgi:error] [pid 15760:tid 15788] [client 20.100.201.203:47629] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:14.685299 2026] [proxy_fcgi:error] [pid 15760:tid 15771] [client 20.100.201.203:47629] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:15.501195 2026] [proxy_fcgi:error] [pid 47772:tid 47811] [client 20.100.201.203:58596] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:16.035260 2026] [proxy_fcgi:error] [pid 47772:tid 47799] [client 20.100.201.203:58596] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:16.621146 2026] [proxy_fcgi:error] [pid 47886:tid 47899] [client 20.100.201.203:60357] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:17.155291 2026] [proxy_fcgi:error] [pid 47886:tid 47903] [client 20.100.201.203:60357] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:17.422394 2026] [:error] [pid 47886:tid 47906] [client 20.100.201.203:60357] [client 20.100.201.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.southerncrosscentre.au"] [uri "/tinyfilemanager.php"] [unique_id "aeQO4USe8yiyuPrD7yMDTwAAANI"]
[Sun Apr 19 07:08:18.271083 2026] [proxy_fcgi:error] [pid 47773:tid 47833] [client 20.100.201.203:35481] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:19.085370 2026] [proxy_fcgi:error] [pid 47773:tid 47820] [client 20.100.201.203:58561] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:19.896097 2026] [proxy_fcgi:error] [pid 47773:tid 47836] [client 20.100.201.203:35463] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:20.433744 2026] [autoindex:error] [pid 15765:tid 15862] [client 20.100.201.203:47644] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 07:08:20.960174 2026] [proxy_fcgi:error] [pid 15765:tid 15877] [client 20.100.201.203:47644] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:21.498774 2026] [proxy_fcgi:error] [pid 15765:tid 15876] [client 20.100.201.203:47644] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:22.315000 2026] [proxy_fcgi:error] [pid 47886:tid 47896] [client 20.100.201.203:46070] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:23.132638 2026] [proxy_fcgi:error] [pid 47773:tid 47819] [client 20.100.201.203:35476] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:23.679795 2026] [proxy_fcgi:error] [pid 47773:tid 47835] [client 20.100.201.203:35476] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:24.513584 2026] [proxy_fcgi:error] [pid 47772:tid 47801] [client 20.100.201.203:47617] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:25.332318 2026] [proxy_fcgi:error] [pid 15760:tid 15769] [client 20.100.201.203:58615] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:26.168698 2026] [proxy_fcgi:error] [pid 15764:tid 15840] [client 20.100.201.203:47649] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:27.009195 2026] [proxy_fcgi:error] [pid 15694:tid 15725] [client 20.100.201.203:58581] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:27.562051 2026] [proxy_fcgi:error] [pid 15694:tid 15734] [client 20.100.201.203:58581] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:28.409937 2026] [proxy_fcgi:error] [pid 47772:tid 47799] [client 20.100.201.203:58580] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:28.952089 2026] [proxy_fcgi:error] [pid 47772:tid 47802] [client 20.100.201.203:46018] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:29.490170 2026] [proxy_fcgi:error] [pid 47772:tid 47813] [client 20.100.201.203:46018] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:30.309790 2026] [proxy_fcgi:error] [pid 47772:tid 47792] [client 20.100.201.203:35456] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:31.105623 2026] [proxy_fcgi:error] [pid 47773:tid 47826] [client 20.100.201.203:60388] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:31.663055 2026] [proxy_fcgi:error] [pid 47773:tid 47829] [client 20.100.201.203:60388] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:32.485857 2026] [proxy_fcgi:error] [pid 15764:tid 15843] [client 20.100.201.203:35487] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:33.283546 2026] [proxy_fcgi:error] [pid 47772:tid 47809] [client 20.100.201.203:46044] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:33.805800 2026] [autoindex:error] [pid 47773:tid 47828] [client 20.100.201.203:47674] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 07:08:34.356509 2026] [proxy_fcgi:error] [pid 47773:tid 47816] [client 20.100.201.203:47674] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:35.186944 2026] [proxy_fcgi:error] [pid 47772:tid 47806] [client 20.100.201.203:58577] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:35.743178 2026] [proxy_fcgi:error] [pid 47772:tid 47792] [client 20.100.201.203:58577] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:36.554549 2026] [proxy_fcgi:error] [pid 47773:tid 47824] [client 20.100.201.203:58620] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:37.378836 2026] [proxy_fcgi:error] [pid 47773:tid 47839] [client 20.100.201.203:47656] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:38.214250 2026] [proxy_fcgi:error] [pid 47775:tid 47858] [client 20.100.201.203:46068] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:39.058113 2026] [proxy_fcgi:error] [pid 47775:tid 47864] [client 20.100.201.203:47666] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:39.884639 2026] [proxy_fcgi:error] [pid 47772:tid 47795] [client 20.100.201.203:46074] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:40.149437 2026] [autoindex:error] [pid 47772:tid 47790] [client 20.100.201.203:46074] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2021/02/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 07:08:40.692679 2026] [proxy_fcgi:error] [pid 47772:tid 47802] [client 20.100.201.203:46074] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:41.573740 2026] [proxy_fcgi:error] [pid 47773:tid 47832] [client 20.100.201.203:47297] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:42.393656 2026] [proxy_fcgi:error] [pid 47773:tid 47827] [client 20.100.201.203:58573] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:43.238587 2026] [proxy_fcgi:error] [pid 47773:tid 47840] [client 20.100.201.203:58571] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:43.796021 2026] [proxy_fcgi:error] [pid 47773:tid 47834] [client 20.100.201.203:58571] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:44.601561 2026] [proxy_fcgi:error] [pid 47773:tid 47833] [client 20.100.201.203:47619] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:45.124036 2026] [:error] [pid 15763:tid 15799] [client 20.100.201.203:46028] [client 20.100.201.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeQO_bMXv1Y1THOoxaAv-AAAAgM"]
[Sun Apr 19 07:08:45.951009 2026] [proxy_fcgi:error] [pid 47775:tid 47852] [client 20.100.201.203:58593] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:46.758696 2026] [proxy_fcgi:error] [pid 47773:tid 47837] [client 20.100.201.203:47669] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:47.047318 2026] [autoindex:error] [pid 47773:tid 47826] [client 20.100.201.203:47669] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 07:08:47.313934 2026] [autoindex:error] [pid 47773:tid 47832] [client 20.100.201.203:47669] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 07:08:47.880837 2026] [proxy_fcgi:error] [pid 47773:tid 47840] [client 20.100.201.203:47669] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:48.702837 2026] [proxy_fcgi:error] [pid 15694:tid 15747] [client 20.100.201.203:58570] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:49.553825 2026] [proxy_fcgi:error] [pid 15694:tid 15740] [client 20.100.201.203:47648] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:50.357798 2026] [proxy_fcgi:error] [pid 15694:tid 15745] [client 20.100.201.203:58583] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:51.160639 2026] [proxy_fcgi:error] [pid 47772:tid 47797] [client 20.100.201.203:47318] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:51.983681 2026] [proxy_fcgi:error] [pid 15763:tid 15820] [client 20.100.201.203:35483] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:52.810036 2026] [proxy_fcgi:error] [pid 47773:tid 47823] [client 20.100.201.203:47639] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:53.663879 2026] [proxy_fcgi:error] [pid 15693:tid 15714] [client 20.100.201.203:47357] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:54.479699 2026] [proxy_fcgi:error] [pid 47775:tid 47844] [client 20.100.201.203:35473] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:55.294039 2026] [proxy_fcgi:error] [pid 15760:tid 15787] [client 20.100.201.203:60411] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:56.084703 2026] [proxy_fcgi:error] [pid 47886:tid 47896] [client 20.100.201.203:60355] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:56.932406 2026] [proxy_fcgi:error] [pid 47773:tid 47816] [client 20.100.201.203:58594] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:57.768632 2026] [proxy_fcgi:error] [pid 47773:tid 47823] [client 20.100.201.203:47659] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:58.615733 2026] [proxy_fcgi:error] [pid 47772:tid 47800] [client 20.100.201.203:60405] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:08:59.474434 2026] [proxy_fcgi:error] [pid 47772:tid 47808] [client 20.100.201.203:35464] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:09:00.296275 2026] [proxy_fcgi:error] [pid 15764:tid 15840] [client 20.100.201.203:60389] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:09:00.865759 2026] [proxy_fcgi:error] [pid 47775:tid 47854] [client 20.100.201.203:46036] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:09:01.435657 2026] [proxy_fcgi:error] [pid 47775:tid 47852] [client 20.100.201.203:46036] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:09:02.277103 2026] [proxy_fcgi:error] [pid 47773:tid 47836] [client 20.100.201.203:47635] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:09:03.148376 2026] [proxy_fcgi:error] [pid 15760:tid 15792] [client 20.100.201.203:47655] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:09:03.964863 2026] [proxy_fcgi:error] [pid 47886:tid 47889] [client 20.100.201.203:35506] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:09:04.787283 2026] [proxy_fcgi:error] [pid 47775:tid 47853] [client 20.100.201.203:58614] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:09:05.601478 2026] [proxy_fcgi:error] [pid 47773:tid 47816] [client 20.100.201.203:47643] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:09:06.421901 2026] [proxy_fcgi:error] [pid 15693:tid 15706] [client 20.100.201.203:58597] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:09:07.263929 2026] [proxy_fcgi:error] [pid 47886:tid 47892] [client 20.100.201.203:35480] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:09:08.062634 2026] [proxy_fcgi:error] [pid 47773:tid 47824] [client 20.100.201.203:60399] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:09:08.896699 2026] [proxy_fcgi:error] [pid 15694:tid 15743] [client 20.100.201.203:35508] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:09:09.705140 2026] [proxy_fcgi:error] [pid 47773:tid 47826] [client 20.100.201.203:60366] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 07:09:10.522516 2026] [proxy_fcgi:error] [pid 15763:tid 15815] [client 20.100.201.203:47658] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 14:28:34.493694 2026] [proxy_fcgi:error] [pid 15763:tid 15818] [client 157.230.186.58:55338] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 14:28:35.268769 2026] [proxy_fcgi:error] [pid 47775:tid 47860] [client 157.230.186.58:55346] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: http://southerncrosscentre.au/
[Sun Apr 19 14:28:36.434347 2026] [proxy_fcgi:error] [pid 15763:tid 15813] [client 157.230.186.58:41208] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 14:28:42.240786 2026] [proxy_fcgi:error] [pid 47772:tid 47802] [client 157.230.186.58:41324] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/
[Sun Apr 19 15:34:09.775162 2026] [:error] [pid 15694:tid 15737] [client 129.159.56.14:36642] [client 129.159.56.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aeSFcbimB-jol1fwqArsgAAAAYs"]
[Sun Apr 19 15:34:10.731280 2026] [proxy_fcgi:error] [pid 47773:tid 47819] [client 129.159.56.14:36666] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 19:58:11.380755 2026] [:error] [pid 47775:tid 47845] [client 88.151.32.163:50398] [client 88.151.32.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aeTDU7mztjlk9tsmoewGlQAAAII"]
[Sun Apr 19 19:58:11.749041 2026] [proxy_fcgi:error] [pid 47773:tid 47838] [client 88.151.32.163:50414] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 19:58:12.307278 2026] [:error] [pid 47773:tid 47821] [client 88.151.32.163:50414] [client 88.151.32.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/HEAD"] [unique_id "aeTDVOiBHdnCJDuPq9AvWQAAAEU"]
[Sun Apr 19 19:58:16.512095 2026] [:error] [pid 15765:tid 15870] [client 88.151.32.163:35166] [client 88.151.32.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.local"] [unique_id "aeTDWPRqinw-W5EwQ77w6gAAApE"]
[Sun Apr 19 19:58:16.535499 2026] [:error] [pid 15760:tid 15782] [client 88.151.32.163:35170] [client 88.151.32.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aeTDWPSdD_XHQMJ_ISv9DgAAAc4"]
[Sun Apr 19 19:58:16.535499 2026] [:error] [pid 15760:tid 15792] [client 88.151.32.163:35168] [client 88.151.32.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.production"] [unique_id "aeTDWPSdD_XHQMJ_ISv9DwAAAdg"]
[Sun Apr 19 20:10:37.920870 2026] [proxy_fcgi:error] [pid 47886:tid 47890] [client 66.249.79.238:57568] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 20:33:18.526116 2026] [:error] [pid 15764:tid 15829] [client 137.220.224.53:20245] [client 137.220.224.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||southerncrosscentre.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aeTLjmLL_sqdSHoVp-T-XAAAAkM"], referer: https://www.google.com/search?q=web+development&oq=web+development
[Sun Apr 19 20:33:19.138713 2026] [:error] [pid 47775:tid 47843] [client 137.220.224.18:3923] [client 137.220.224.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||southerncrosscentre.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aeTLj7mztjlk9tsmoewMCgAAAIA"], referer: https://www.linkedin.com/
[Sun Apr 19 20:33:19.803853 2026] [:error] [pid 47886:tid 47890] [client 137.220.224.53:47967] [client 137.220.224.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.220.224.53, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aeTLj0Se8yiyuPrD7yNvXwAAAMI"], referer: https://www.bing.com/
[Sun Apr 19 20:33:19.805865 2026] [:error] [pid 47886:tid 47890] [client 137.220.224.53:47967] [client 137.220.224.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||southerncrosscentre.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aeTLj0Se8yiyuPrD7yNvXwAAAMI"], referer: https://www.bing.com/
[Sun Apr 19 20:33:29.439328 2026] [:error] [pid 15694:tid 15744] [client 137.220.224.18:28301] [client 137.220.224.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||southerncrosscentre.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aeTLmbimB-jol1fwqAoHAQAAAZI"], referer: https://search.yahoo.com/search?p=blog+post%!(EXTRA string=blog+post)
[Sun Apr 19 20:33:44.958274 2026] [:error] [pid 15763:tid 15816] [client 137.220.224.53:54487] [client 137.220.224.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.220.224.53, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aeTLqLMXv1Y1THOoxaDpLQAAAhQ"], referer: https://duckduckgo.com/?q=wp+security%!(EXTRA string=wp+security)
[Sun Apr 19 20:33:44.960272 2026] [:error] [pid 15763:tid 15816] [client 137.220.224.53:54487] [client 137.220.224.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||southerncrosscentre.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aeTLqLMXv1Y1THOoxaDpLQAAAhQ"], referer: https://duckduckgo.com/?q=wp+security%!(EXTRA string=wp+security)
[Sun Apr 19 20:58:05.913831 2026] [proxy_fcgi:error] [pid 15760:tid 15791] [client 216.73.217.20:46868] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 20:58:06.432948 2026] [proxy_fcgi:error] [pid 15760:tid 15771] [client 216.73.217.20:46868] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 22:10:46.582272 2026] [proxy_fcgi:error] [pid 15764:tid 15840] [client 32.194.215.91:23120] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 19 22:50:47.954384 2026] [:error] [pid 15760:tid 15791] [client 146.70.194.222:43656] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aeTrx_SdD_XHQMJ_IStfaQAAAdc"]
[Sun Apr 19 22:50:48.496730 2026] [:error] [pid 47772:tid 47807] [client 146.70.194.222:43960] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "aeTryIc0L16cb4smAz_aJAAAABI"]
[Sun Apr 19 22:50:49.011879 2026] [:error] [pid 47773:tid 47832] [client 146.70.194.222:44446] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aeTryeiBHdnCJDuPq9BWxwAAAFA"]
[Mon Apr 20 01:38:28.542029 2026] [proxy_fcgi:error] [pid 47886:tid 47896] [client 91.134.35.95:50984] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 01:38:30.881138 2026] [proxy_fcgi:error] [pid 15760:tid 15782] [client 91.134.35.95:51132] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 03:11:06.846143 2026] [proxy_fcgi:error] [pid 47775:tid 47865] [client 136.117.157.176:51618] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 03:11:24.602140 2026] [:error] [pid 15694:tid 15732] [client 136.117.157.176:42094] [client 136.117.157.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.local"] [unique_id "aeUo3LimB-jol1fwqApCeAAAAYY"]
[Mon Apr 20 03:11:49.804146 2026] [:error] [pid 15764:tid 15828] [client 136.117.157.176:36092] [client 136.117.157.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.staging"] [unique_id "aeUo9WLL_sqdSHoVp-SLugAAAkI"]
[Mon Apr 20 03:12:06.764876 2026] [:error] [pid 15694:tid 15734] [client 136.117.157.176:48086] [client 136.117.157.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "aeUpBrimB-jol1fwqApCtQAAAYg"]
[Mon Apr 20 03:12:22.540272 2026] [:error] [pid 15694:tid 15740] [client 136.117.157.176:58744] [client 136.117.157.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.example"] [unique_id "aeUpFrimB-jol1fwqApC9QAAAY4"]
[Mon Apr 20 08:25:29.810079 2026] [proxy_fcgi:error] [pid 48101:tid 48107] [client 72.146.41.143:11775] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:25:35.617880 2026] [proxy_fcgi:error] [pid 64332:tid 64365] [client 72.146.41.143:15249] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:25:38.765999 2026] [proxy_fcgi:error] [pid 47779:tid 47791] [client 72.146.41.143:10320] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:25:44.997950 2026] [proxy_fcgi:error] [pid 64333:tid 64397] [client 72.146.41.143:10662] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:25:53.097971 2026] [proxy_fcgi:error] [pid 47731:tid 47753] [client 72.146.41.143:12370] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:26:01.155133 2026] [proxy_fcgi:error] [pid 64334:tid 64417] [client 72.146.41.143:10019] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:26:06.678257 2026] [proxy_fcgi:error] [pid 47731:tid 47745] [client 72.146.41.143:18903] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:26:22.480503 2026] [proxy_fcgi:error] [pid 64332:tid 64361] [client 72.146.41.143:5831] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:26:25.853927 2026] [proxy_fcgi:error] [pid 48101:tid 48123] [client 72.146.41.143:5874] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:27:03.288937 2026] [proxy_fcgi:error] [pid 64333:tid 64394] [client 72.146.41.143:2141] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:27:10.515138 2026] [proxy_fcgi:error] [pid 64334:tid 64427] [client 72.146.41.143:5051] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:27:31.101935 2026] [proxy_fcgi:error] [pid 48101:tid 48125] [client 72.146.41.143:20419] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:27:32.109106 2026] [proxy_fcgi:error] [pid 48101:tid 48106] [client 72.146.41.143:13587] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:27:36.306911 2026] [proxy_fcgi:error] [pid 64332:tid 64366] [client 72.146.41.143:7814] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:27:40.478795 2026] [proxy_fcgi:error] [pid 64332:tid 64356] [client 72.146.41.143:6665] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:27:44.298424 2026] [proxy_fcgi:error] [pid 64332:tid 64346] [client 72.146.41.143:7862] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:27:46.759231 2026] [proxy_fcgi:error] [pid 60072:tid 60089] [client 72.146.41.143:13598] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:27:48.413220 2026] [proxy_fcgi:error] [pid 64333:tid 64397] [client 72.146.41.143:10579] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:27:51.261394 2026] [proxy_fcgi:error] [pid 60072:tid 60086] [client 72.146.41.143:20464] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:27:55.843858 2026] [proxy_fcgi:error] [pid 47731:tid 47753] [client 72.146.41.143:12103] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:27:57.394760 2026] [proxy_fcgi:error] [pid 64332:tid 64342] [client 72.146.41.143:20570] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 08:28:23.793830 2026] [proxy_fcgi:error] [pid 47779:tid 47800] [client 72.146.41.143:19980] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 10:12:38.263289 2026] [proxy_fcgi:error] [pid 11352:tid 11419] [client 20.238.120.90:59054] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 10:12:39.149011 2026] [proxy_fcgi:error] [pid 11352:tid 11426] [client 20.238.120.90:12536] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 10:12:39.981869 2026] [proxy_fcgi:error] [pid 11351:tid 11397] [client 20.238.120.90:59066] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 10:12:40.798029 2026] [proxy_fcgi:error] [pid 11352:tid 11427] [client 20.238.120.90:63496] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 10:12:41.655481 2026] [proxy_fcgi:error] [pid 11441:tid 11460] [client 20.238.120.90:63491] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 10:12:42.494036 2026] [proxy_fcgi:error] [pid 11352:tid 11437] [client 20.238.120.90:52723] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 10:12:43.362439 2026] [proxy_fcgi:error] [pid 11351:tid 11401] [client 20.238.120.90:61354] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 10:12:44.173758 2026] [proxy_fcgi:error] [pid 11350:tid 11363] [client 20.238.120.90:52674] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 10:12:44.984340 2026] [proxy_fcgi:error] [pid 11351:tid 11393] [client 20.238.120.90:63511] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 10:12:45.784779 2026] [proxy_fcgi:error] [pid 11351:tid 11390] [client 20.238.120.90:57048] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 11:40:35.281636 2026] [proxy_fcgi:error] [pid 11441:tid 11467] [client 223.235.212.95:60682] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 13:36:34.566579 2026] [:error] [pid 11441:tid 11461] [client 103.65.237.216:57211] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/sftp-config.json"] [unique_id "aeW7YsixByFUvmh319D35gAAANI"]
[Mon Apr 20 13:36:35.299963 2026] [proxy_fcgi:error] [pid 11441:tid 11463] [client 103.65.237.216:57270] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 16:12:22.722956 2026] [proxy_fcgi:error] [pid 6928:tid 6936] [client 216.73.217.20:16093] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 16:12:23.268015 2026] [proxy_fcgi:error] [pid 6928:tid 6952] [client 216.73.217.20:16093] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 16:56:20.717783 2026] [proxy_fcgi:error] [pid 6928:tid 6932] [client 35.175.228.254:51346] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 16:56:21.070352 2026] [proxy_fcgi:error] [pid 6928:tid 6944] [client 35.175.228.254:34478] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 16:59:07.531630 2026] [proxy_fcgi:error] [pid 6928:tid 6939] [client 93.158.90.69:60801] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 20:16:37.248180 2026] [proxy_fcgi:error] [pid 11441:tid 11462] [client 216.73.217.20:42508] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 20:16:37.799133 2026] [proxy_fcgi:error] [pid 11441:tid 11454] [client 216.73.217.20:42508] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 21:24:17.990808 2026] [proxy_fcgi:error] [pid 42014:tid 42018] [client 66.249.79.224:49138] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 23:13:08.517721 2026] [proxy_fcgi:error] [pid 11350:tid 11367] [client 34.122.55.205:64407] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 20 23:13:08.528654 2026] [proxy_fcgi:error] [pid 6928:tid 6936] [client 34.122.55.205:64396] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 00:50:32.485136 2026] [proxy_fcgi:error] [pid 11350:tid 11364] [client 192.71.142.40:36167] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 04:00:23.102013 2026] [:error] [pid 35320:tid 35340] [client 185.194.178.29:28887] [client 185.194.178.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.29, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aeaF14JW6fdXWO6agMFcUAAAAAo"]
[Tue Apr 21 04:00:24.901499 2026] [proxy_fcgi:error] [pid 35320:tid 35340] [client 185.194.178.29:28887] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 04:00:42.126693 2026] [proxy_fcgi:error] [pid 35320:tid 35332] [client 185.194.178.35:22477] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 04:00:49.539686 2026] [proxy_fcgi:error] [pid 4823:tid 4872] [client 185.194.178.18:54619] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 05:49:33.849557 2026] [proxy_fcgi:error] [pid 4823:tid 4874] [client 44.242.153.169:50262] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 05:49:34.358239 2026] [proxy_fcgi:error] [pid 4823:tid 4875] [client 44.242.153.169:50262] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 06:06:43.087418 2026] [proxy_fcgi:error] [pid 35321:tid 35384] [client 192.36.137.155:39457] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 06:06:44.781517 2026] [proxy_fcgi:error] [pid 4822:tid 4846] [client 192.36.217.48:34713] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 06:06:47.931144 2026] [proxy_fcgi:error] [pid 35321:tid 35400] [client 35.175.106.97:23904] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/
[Tue Apr 21 07:22:48.286972 2026] [proxy_fcgi:error] [pid 35415:tid 35428] [client 43.165.6.216:49974] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 11:48:58.775993 2026] [:error] [pid 35320:tid 35335] [client 185.194.178.50:48989] [client 185.194.178.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.50, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aebzqoJW6fdXWO6agMHRggAAAAU"]
[Tue Apr 21 11:48:58.776437 2026] [:error] [pid 35322:tid 35369] [client 185.194.178.4:23859] [client 185.194.178.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.4, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aebzqqPoAfV40BTfVKyYOgAAAIw"]
[Tue Apr 21 11:48:59.496249 2026] [proxy_fcgi:error] [pid 35320:tid 35335] [client 185.194.178.50:48989] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 11:48:59.516558 2026] [proxy_fcgi:error] [pid 35322:tid 35369] [client 185.194.178.4:23859] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 12:22:17.999542 2026] [:error] [pid 4823:tid 4868] [client 185.194.178.25:33669] [client 185.194.178.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.25, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aeb7efc8mke3PfHqsxE68wAAAY8"]
[Tue Apr 21 12:22:18.420670 2026] [proxy_fcgi:error] [pid 4823:tid 4868] [client 185.194.178.25:33669] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 14:46:09.150718 2026] [proxy_fcgi:error] [pid 35415:tid 35428] [client 18.222.231.224:49156] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 14:46:09.725068 2026] [proxy_fcgi:error] [pid 35415:tid 35442] [client 18.222.231.224:49156] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 14:46:10.904708 2026] [proxy_fcgi:error] [pid 4822:tid 4846] [client 18.222.231.224:49210] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 14:46:12.072546 2026] [proxy_fcgi:error] [pid 4777:tid 4799] [client 18.222.231.224:49212] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 14:46:12.894022 2026] [:error] [pid 4777:tid 4790] [client 18.222.231.224:49252] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aecdNKxXur6bykKyLZRxcAAAAQI"]
[Tue Apr 21 14:46:14.073291 2026] [proxy_fcgi:error] [pid 4823:tid 4861] [client 18.222.231.224:49290] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 14:46:14.895790 2026] [:error] [pid 4822:tid 4834] [client 18.222.231.224:49324] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "aecdNiAteFQFwS_23JmHSwAAAUg"]
[Tue Apr 21 14:46:15.730287 2026] [:error] [pid 35320:tid 35342] [client 18.222.231.224:49350] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.local"] [unique_id "aecdN4JW6fdXWO6agMEAFgAAAAw"]
[Tue Apr 21 14:46:16.562744 2026] [:error] [pid 35320:tid 35339] [client 18.222.231.224:49386] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.production"] [unique_id "aecdOIJW6fdXWO6agMEAGgAAAAk"]
[Tue Apr 21 14:46:17.393872 2026] [:error] [pid 5377:tid 5387] [client 18.222.231.224:49418] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.staging"] [unique_id "aecdObBKychFlrHBdvu_XQAAAcE"]
[Tue Apr 21 14:46:18.214956 2026] [:error] [pid 4822:tid 4835] [client 18.222.231.224:39058] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.development"] [unique_id "aecdOiAteFQFwS_23JmHUQAAAUk"]
[Tue Apr 21 14:46:19.046135 2026] [:error] [pid 4822:tid 4843] [client 18.222.231.224:39086] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.test"] [unique_id "aecdOyAteFQFwS_23JmHVwAAAVE"]
[Tue Apr 21 14:46:19.878035 2026] [:error] [pid 4822:tid 4827] [client 18.222.231.224:39118] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.remote"] [unique_id "aecdOyAteFQFwS_23JmHYQAAAUE"]
[Tue Apr 21 14:46:20.713113 2026] [:error] [pid 4822:tid 4850] [client 18.222.231.224:39138] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "aecdPCAteFQFwS_23JmHbwAAAVg"]
[Tue Apr 21 14:46:21.609935 2026] [:error] [pid 4822:tid 4847] [client 18.222.231.224:39150] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.backup"] [unique_id "aecdPSAteFQFwS_23JmHfwAAAVU"]
[Tue Apr 21 14:46:22.452135 2026] [:error] [pid 4822:tid 4833] [client 18.222.231.224:39182] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.save"] [unique_id "aecdPiAteFQFwS_23JmHiwAAAUc"]
[Tue Apr 21 14:46:23.272392 2026] [:error] [pid 35320:tid 35339] [client 18.222.231.224:39222] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.old"] [unique_id "aecdP4JW6fdXWO6agMEAJwAAAAk"]
[Tue Apr 21 14:46:24.107856 2026] [:error] [pid 4822:tid 4827] [client 18.222.231.224:39246] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.sample"] [unique_id "aecdQCAteFQFwS_23JmHlgAAAUE"]
[Tue Apr 21 14:46:24.941569 2026] [:error] [pid 4823:tid 4875] [client 18.222.231.224:39260] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.example"] [unique_id "aecdQPc8mke3PfHqsxGJ0wAAAZY"]
[Tue Apr 21 14:46:25.776942 2026] [:error] [pid 35320:tid 35340] [client 18.222.231.224:39280] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.dev"] [unique_id "aecdQYJW6fdXWO6agMEALgAAAAo"]
[Tue Apr 21 14:46:26.613458 2026] [:error] [pid 4823:tid 4872] [client 18.222.231.224:39320] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.prod"] [unique_id "aecdQvc8mke3PfHqsxGJ2QAAAZM"]
[Tue Apr 21 14:46:27.433728 2026] [:error] [pid 4823:tid 4859] [client 18.222.231.224:39358] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.stage"] [unique_id "aecdQ_c8mke3PfHqsxGJ3wAAAYY"]
[Tue Apr 21 14:46:28.266296 2026] [:error] [pid 35322:tid 35361] [client 18.222.231.224:49894] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.ci"] [unique_id "aecdRKPoAfV40BTfVKyw4QAAAIQ"]
[Tue Apr 21 14:46:29.087399 2026] [:error] [pid 4823:tid 4869] [client 18.222.231.224:49924] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.docker"] [unique_id "aecdRfc8mke3PfHqsxGJ7QAAAZA"]
[Tue Apr 21 14:46:29.921936 2026] [:error] [pid 4823:tid 4874] [client 18.222.231.224:49946] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.live"] [unique_id "aecdRfc8mke3PfHqsxGJ9wAAAZU"]
[Tue Apr 21 14:46:30.754966 2026] [:error] [pid 4822:tid 4843] [client 18.222.231.224:49978] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.preprod"] [unique_id "aecdRiAteFQFwS_23JmHxgAAAVE"]
[Tue Apr 21 14:46:31.575413 2026] [:error] [pid 4822:tid 4849] [client 18.222.231.224:50038] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.uat"] [unique_id "aecdRyAteFQFwS_23JmH0wAAAVc"]
[Tue Apr 21 14:46:32.407092 2026] [:error] [pid 4822:tid 4838] [client 18.222.231.224:50082] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.dist"] [unique_id "aecdSCAteFQFwS_23JmH4wAAAUw"]
[Tue Apr 21 14:46:33.236116 2026] [:error] [pid 4823:tid 4871] [client 18.222.231.224:50112] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.swp"] [unique_id "aecdSfc8mke3PfHqsxGKCQAAAZI"]
[Tue Apr 21 14:46:34.070492 2026] [:error] [pid 5377:tid 5400] [client 18.222.231.224:50134] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env~"] [unique_id "aecdSrBKychFlrHBdvu_gQAAAc4"]
[Tue Apr 21 14:46:34.905999 2026] [:error] [pid 4823:tid 4867] [client 18.222.231.224:50176] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/app/.env"] [unique_id "aecdSvc8mke3PfHqsxGKHgAAAY4"]
[Tue Apr 21 14:46:35.739051 2026] [:error] [pid 35320:tid 35353] [client 18.222.231.224:50214] [client 18.222.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/apps/.env"] [unique_id "aecdS4JW6fdXWO6agMEAQAAAABc"]
[Tue Apr 21 15:12:04.400153 2026] [proxy_fcgi:error] [pid 4822:tid 4827] [client 54.90.168.40:35348] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 15:12:05.214361 2026] [proxy_fcgi:error] [pid 4822:tid 4843] [client 54.90.168.40:35348] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 15:12:06.498661 2026] [proxy_fcgi:error] [pid 4823:tid 4877] [client 54.90.168.40:35374] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 15:12:08.087931 2026] [proxy_fcgi:error] [pid 4822:tid 4849] [client 54.90.168.40:35396] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 15:12:09.046013 2026] [:error] [pid 4823:tid 4861] [client 54.90.168.40:35434] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aecjSfc8mke3PfHqsxGb4QAAAYg"]
[Tue Apr 21 15:12:10.269468 2026] [proxy_fcgi:error] [pid 4822:tid 4827] [client 54.90.168.40:35454] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 15:12:11.126722 2026] [:error] [pid 4822:tid 4843] [client 54.90.168.40:35494] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aecjSyAteFQFwS_23Jmh-wAAAVE"]
[Tue Apr 21 15:12:11.995981 2026] [:error] [pid 4822:tid 4833] [client 54.90.168.40:47238] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.local"] [unique_id "aecjSyAteFQFwS_23JmiCgAAAUc"]
[Tue Apr 21 15:12:12.987689 2026] [:error] [pid 4823:tid 4876] [client 54.90.168.40:47270] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.production"] [unique_id "aecjTPc8mke3PfHqsxGb5wAAAZc"]
[Tue Apr 21 15:12:15.965386 2026] [:error] [pid 4823:tid 4862] [client 54.90.168.40:47314] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.development"] [unique_id "aecjT_c8mke3PfHqsxGb_wAAAYk"]
[Tue Apr 21 15:12:16.968781 2026] [:error] [pid 4823:tid 4875] [client 54.90.168.40:47346] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.test"] [unique_id "aecjUPc8mke3PfHqsxGcAwAAAZY"]
[Tue Apr 21 15:12:17.877473 2026] [:error] [pid 35322:tid 35377] [client 54.90.168.40:47372] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.remote"] [unique_id "aecjUaPoAfV40BTfVKy0WgAAAJQ"]
[Tue Apr 21 15:12:18.774019 2026] [:error] [pid 35320:tid 35347] [client 54.90.168.40:47382] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "aecjUoJW6fdXWO6agMEKOgAAABE"]
[Tue Apr 21 15:12:19.620744 2026] [:error] [pid 4822:tid 4828] [client 54.90.168.40:47420] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.backup"] [unique_id "aecjUyAteFQFwS_23JmiNAAAAUI"]
[Tue Apr 21 15:12:20.466116 2026] [:error] [pid 4822:tid 4833] [client 54.90.168.40:47438] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.save"] [unique_id "aecjVCAteFQFwS_23JmiOQAAAUc"]
[Tue Apr 21 15:12:21.356467 2026] [:error] [pid 4822:tid 4847] [client 54.90.168.40:47456] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.old"] [unique_id "aecjVSAteFQFwS_23JmiQQAAAVU"]
[Tue Apr 21 15:12:22.336511 2026] [:error] [pid 35320:tid 35344] [client 54.90.168.40:53404] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.sample"] [unique_id "aecjVoJW6fdXWO6agMEKQgAAAA4"]
[Tue Apr 21 15:12:25.090937 2026] [:error] [pid 4822:tid 4850] [client 54.90.168.40:53454] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.dev"] [unique_id "aecjWSAteFQFwS_23JmiYQAAAVg"]
[Tue Apr 21 15:12:26.015539 2026] [:error] [pid 4823:tid 4864] [client 54.90.168.40:53480] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.prod"] [unique_id "aecjWvc8mke3PfHqsxGcFgAAAYs"]
[Tue Apr 21 15:12:26.999883 2026] [:error] [pid 5377:tid 5398] [client 54.90.168.40:53496] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.stage"] [unique_id "aecjWrBKychFlrHBdvvNAQAAAcw"]
[Tue Apr 21 15:12:27.843674 2026] [:error] [pid 35320:tid 35343] [client 54.90.168.40:53534] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.docker"] [unique_id "aecjW4JW6fdXWO6agMEKTgAAAA0"]
[Tue Apr 21 15:12:28.696993 2026] [:error] [pid 4823:tid 4854] [client 54.90.168.40:53588] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.live"] [unique_id "aecjXPc8mke3PfHqsxGcHQAAAYE"]
[Tue Apr 21 15:12:29.587710 2026] [:error] [pid 5377:tid 5403] [client 54.90.168.40:53612] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.preprod"] [unique_id "aecjXbBKychFlrHBdvvNEQAAAdE"]
[Tue Apr 21 15:12:30.769098 2026] [:error] [pid 4822:tid 4850] [client 54.90.168.40:53634] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.uat"] [unique_id "aecjXiAteFQFwS_23JmidQAAAVg"]
[Tue Apr 21 15:12:31.821648 2026] [:error] [pid 35320:tid 35340] [client 54.90.168.40:35850] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.dist"] [unique_id "aecjX4JW6fdXWO6agMEKVQAAAAo"]
[Tue Apr 21 15:12:32.820729 2026] [:error] [pid 4822:tid 4831] [client 54.90.168.40:35876] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.swp"] [unique_id "aecjYCAteFQFwS_23JmiegAAAUU"]
[Tue Apr 21 15:12:33.728572 2026] [:error] [pid 4822:tid 4850] [client 54.90.168.40:35928] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env~"] [unique_id "aecjYSAteFQFwS_23JmigwAAAVg"]
[Tue Apr 21 15:12:34.754140 2026] [:error] [pid 4823:tid 4877] [client 54.90.168.40:35950] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/app/.env"] [unique_id "aecjYvc8mke3PfHqsxGcOgAAAZg"]
[Tue Apr 21 15:12:35.703782 2026] [:error] [pid 4823:tid 4854] [client 54.90.168.40:35994] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/apps/.env"] [unique_id "aecjY_c8mke3PfHqsxGcRAAAAYE"]
[Tue Apr 21 15:12:36.543320 2026] [:error] [pid 4822:tid 4844] [client 54.90.168.40:36016] [client 54.90.168.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/api/.env"] [unique_id "aecjZCAteFQFwS_23JmikAAAAVI"]
[Tue Apr 21 15:32:55.715534 2026] [proxy_fcgi:error] [pid 35322:tid 35373] [client 185.8.106.232:34668] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 15:32:59.704551 2026] [proxy_fcgi:error] [pid 35321:tid 35401] [client 185.8.106.232:51662] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 17:05:22.052112 2026] [:error] [pid 35321:tid 35402] [client 185.194.178.43:47319] [client 185.194.178.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.43, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aec90jeHLhVUuu8cVXzvdQAAAFI"]
[Tue Apr 21 17:05:22.455030 2026] [proxy_fcgi:error] [pid 35321:tid 35402] [client 185.194.178.43:47319] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 17:37:14.446985 2026] [:error] [pid 53832:tid 53854] [client 185.194.178.42:30021] [client 185.194.178.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.42, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aedFStzkuxsE_OhM9UJJkAAAAlM"]
[Tue Apr 21 17:37:14.454856 2026] [:error] [pid 54080:tid 54094] [client 185.194.178.24:27211] [client 185.194.178.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.24, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aedFSozEbQHHxtmWbaaH5QAAAsw"]
[Tue Apr 21 17:37:14.823879 2026] [proxy_fcgi:error] [pid 53832:tid 53854] [client 185.194.178.42:30021] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 17:37:14.847481 2026] [proxy_fcgi:error] [pid 54080:tid 54094] [client 185.194.178.24:27211] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 19:19:28.403391 2026] [:error] [pid 53978:tid 53991] [client 134.122.99.13:55701] [client 134.122.99.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.99.13, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aeddQJ1ivsR4hcOSQbYDpgAAAos"]
[Tue Apr 21 19:19:28.813591 2026] [proxy_fcgi:error] [pid 53978:tid 53991] [client 134.122.99.13:55701] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 19:19:29.805097 2026] [:error] [pid 53832:tid 53856] [client 134.122.99.13:57479] [client 134.122.99.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.99.13, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aeddQdzkuxsE_OhM9UJbcQAAAlU"]
[Tue Apr 21 19:19:30.137126 2026] [proxy_fcgi:error] [pid 53832:tid 53856] [client 134.122.99.13:57479] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 19:19:30.738916 2026] [proxy_fcgi:error] [pid 53832:tid 53851] [client 134.122.99.13:57479] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 19:19:32.040753 2026] [proxy_fcgi:error] [pid 4777:tid 4796] [client 134.122.99.13:61800] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 19:19:32.594270 2026] [proxy_fcgi:error] [pid 4777:tid 4792] [client 134.122.99.13:61800] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 19:40:01.370577 2026] [proxy_fcgi:error] [pid 53731:tid 53743] [client 5.133.192.167:45799] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 20:27:03.140452 2026] [proxy_fcgi:error] [pid 35320:tid 35334] [client 104.198.24.61:57253] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 20:38:37.918612 2026] [proxy_fcgi:error] [pid 53978:tid 53992] [client 3.107.116.237:57928] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 20:56:47.830660 2026] [proxy_fcgi:error] [pid 4823:tid 4854] [client 35.196.86.166:53502] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 22:10:23.750601 2026] [proxy_fcgi:error] [pid 4777:tid 4791] [client 16.59.47.184:59700] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 22:10:57.563208 2026] [proxy_fcgi:error] [pid 54080:tid 54101] [client 16.59.47.184:49932] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 22:14:56.654287 2026] [proxy_fcgi:error] [pid 35321:tid 35390] [client 34.178.2.250:51477] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 22:50:37.244300 2026] [proxy_fcgi:error] [pid 35321:tid 35398] [client 34.48.112.219:50650] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 22:53:28.105444 2026] [proxy_fcgi:error] [pid 35321:tid 35397] [client 34.10.201.170:50977] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 23:03:18.148650 2026] [proxy_fcgi:error] [pid 35320:tid 35337] [client 35.195.107.66:62391] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 23:12:09.600702 2026] [proxy_fcgi:error] [pid 35320:tid 35348] [client 34.69.70.102:58872] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 23:20:57.095275 2026] [proxy_fcgi:error] [pid 54080:tid 54094] [client 35.195.107.66:53014] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 23:23:12.217036 2026] [proxy_fcgi:error] [pid 35320:tid 35348] [client 34.67.61.172:52551] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 23:23:12.233139 2026] [proxy_fcgi:error] [pid 35320:tid 35342] [client 34.67.61.172:52561] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 21 23:55:38.615834 2026] [proxy_fcgi:error] [pid 4777:tid 4797] [client 34.10.201.170:51827] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 00:45:33.932936 2026] [proxy_fcgi:error] [pid 35320:tid 35340] [client 66.249.79.238:51917] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 04:10:47.225696 2026] [proxy_fcgi:error] [pid 23041:tid 23050] [client 2.58.56.211:64540] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 04:10:48.087942 2026] [proxy_fcgi:error] [pid 23041:tid 23046] [client 2.58.56.211:64811] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 04:10:48.592764 2026] [:error] [pid 21681:tid 21702] [client 2.58.56.211:65005] [client 2.58.56.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aefZyN5LmJziq-yZYawRawAAAAw"]
[Wed Apr 22 04:10:49.097510 2026] [:error] [pid 21681:tid 21691] [client 2.58.56.211:65160] [client 2.58.56.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aefZyd5LmJziq-yZYawRbAAAAAE"]
[Wed Apr 22 04:10:49.600369 2026] [:error] [pid 21681:tid 21710] [client 2.58.56.211:65370] [client 2.58.56.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aefZyd5LmJziq-yZYawRbgAAABQ"]
[Wed Apr 22 04:10:50.422256 2026] [proxy_fcgi:error] [pid 21788:tid 21813] [client 2.58.56.211:49176] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 04:10:50.923779 2026] [:error] [pid 21683:tid 21755] [client 2.58.56.211:49646] [client 2.58.56.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/txets.php"] [unique_id "aefZylZBWT-0diZyYyZWsQAAAIU"]
[Wed Apr 22 04:10:51.739983 2026] [proxy_fcgi:error] [pid 21788:tid 21808] [client 2.58.56.211:49965] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 04:10:52.564839 2026] [proxy_fcgi:error] [pid 21788:tid 21790] [client 2.58.56.211:50550] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 06:49:09.311445 2026] [proxy_fcgi:error] [pid 21682:tid 21733] [client 192.175.111.243:62895] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 06:49:10.728196 2026] [proxy_fcgi:error] [pid 31949:tid 31960] [client 192.175.111.250:51599] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 06:49:13.534678 2026] [proxy_fcgi:error] [pid 31755:tid 31771] [client 192.175.111.232:60410] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 06:49:14.535499 2026] [proxy_fcgi:error] [pid 31755:tid 31769] [client 192.175.111.245:58722] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 06:49:18.999574 2026] [proxy_fcgi:error] [pid 21683:tid 21757] [client 192.175.111.240:43947] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 06:49:20.390514 2026] [proxy_fcgi:error] [pid 21682:tid 21737] [client 192.175.111.231:53078] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 06:49:23.066094 2026] [proxy_fcgi:error] [pid 23041:tid 23066] [client 192.175.111.242:23580] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 06:49:24.023133 2026] [proxy_fcgi:error] [pid 23041:tid 23063] [client 192.175.111.236:19223] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 07:36:18.557557 2026] [:error] [pid 21682:tid 21742] [client 103.179.188.213:52108] [client 103.179.188.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.188.213, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "aegJ8plXWQZUlmPHS3oRgQAAAFM"]
[Wed Apr 22 07:36:18.568068 2026] [:error] [pid 21682:tid 21729] [client 103.179.188.213:51834] [client 103.179.188.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.179.188.213, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aegJ8plXWQZUlmPHS3oRggAAAEY"]
[Wed Apr 22 07:36:19.004758 2026] [proxy_fcgi:error] [pid 21682:tid 21729] [client 103.179.188.213:51834] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 07:36:19.026137 2026] [proxy_fcgi:error] [pid 21682:tid 21742] [client 103.179.188.213:52108] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 07:57:37.417663 2026] [proxy_fcgi:error] [pid 32095:tid 32099] [client 20.123.29.91:12251] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 07:57:39.182460 2026] [:error] [pid 23041:tid 23068] [client 20.123.29.91:12266] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/aboutc.php"] [unique_id "aegO80TXx_lUa7xwAb4F8gAAARg"]
[Wed Apr 22 07:57:40.697472 2026] [:error] [pid 21682:tid 21729] [client 20.123.29.91:20015] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/aboutc.php"] [unique_id "aegO9JlXWQZUlmPHS3oYEQAAAEY"]
[Wed Apr 22 07:57:42.947528 2026] [:error] [pid 31706:tid 31710] [client 20.123.29.91:21732] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/aboutc.php"] [unique_id "aegO9rGSe9Rnd4Q_z1ijDQAAAcE"]
[Wed Apr 22 07:57:47.272008 2026] [:error] [pid 31949:tid 31971] [client 20.123.29.91:15348] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/aboutc.php"] [unique_id "aegO-32WtGZh5JfbMUdGiwAAAxM"]
[Wed Apr 22 07:57:49.765634 2026] [:error] [pid 21682:tid 21728] [client 20.123.29.91:21462] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/new4.php"] [unique_id "aegO_ZlXWQZUlmPHS3oYHQAAAEU"]
[Wed Apr 22 07:57:53.775363 2026] [:error] [pid 31755:tid 31784] [client 20.123.29.91:1547] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/new4.php"] [unique_id "aegPAQz2mYMkg3X8q1uDzgAAAhU"]
[Wed Apr 22 07:57:55.977204 2026] [:error] [pid 31755:tid 31770] [client 20.123.29.91:1555] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/new4.php"] [unique_id "aegPAwz2mYMkg3X8q1uD1gAAAgc"]
[Wed Apr 22 07:57:58.970156 2026] [:error] [pid 31755:tid 31784] [client 20.123.29.91:22578] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/new4.php"] [unique_id "aegPBgz2mYMkg3X8q1uD3QAAAhU"]
[Wed Apr 22 07:58:00.777306 2026] [:error] [pid 23041:tid 23048] [client 20.123.29.91:24174] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/hroxw.php"] [unique_id "aegPCETXx_lUa7xwAb4GIAAAAQQ"]
[Wed Apr 22 07:58:02.350053 2026] [:error] [pid 32095:tid 32109] [client 20.123.29.91:19524] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/hroxw.php"] [unique_id "aegPCtfu5Cv628YPe5971wAAA4s"]
[Wed Apr 22 07:58:03.460289 2026] [:error] [pid 31755:tid 31767] [client 20.123.29.91:16126] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/hroxw.php"] [unique_id "aegPCwz2mYMkg3X8q1uD6gAAAgQ"]
[Wed Apr 22 07:58:06.623304 2026] [:error] [pid 32095:tid 32121] [client 20.123.29.91:19556] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/hroxw.php"] [unique_id "aegPDtfu5Cv628YPe5973AAAA5c"]
[Wed Apr 22 07:58:09.618590 2026] [:error] [pid 31756:tid 31801] [client 20.123.29.91:12743] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-blogs.php"] [unique_id "aegPEd_WbkXbHaEfhd3oTQAAAkk"]
[Wed Apr 22 07:58:11.537825 2026] [:error] [pid 21682:tid 21742] [client 20.123.29.91:15047] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-blogs.php"] [unique_id "aegPE5lXWQZUlmPHS3oYJwAAAFM"]
[Wed Apr 22 07:58:12.570642 2026] [:error] [pid 31755:tid 31782] [client 20.123.29.91:22503] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-blogs.php"] [unique_id "aegPFAz2mYMkg3X8q1uECAAAAhM"]
[Wed Apr 22 07:58:14.086846 2026] [:error] [pid 31755:tid 31773] [client 20.123.29.91:12746] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-blogs.php"] [unique_id "aegPFgz2mYMkg3X8q1uEDQAAAgo"]
[Wed Apr 22 07:58:16.862403 2026] [:error] [pid 21682:tid 21724] [client 20.123.29.91:31691] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/set.php"] [unique_id "aegPGJlXWQZUlmPHS3oYLgAAAEE"]
[Wed Apr 22 07:58:18.434899 2026] [:error] [pid 31755:tid 31777] [client 20.123.29.91:12798] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/set.php"] [unique_id "aegPGgz2mYMkg3X8q1uEGwAAAg4"]
[Wed Apr 22 07:58:19.864690 2026] [:error] [pid 31755:tid 31786] [client 20.123.29.91:1840] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/set.php"] [unique_id "aegPGwz2mYMkg3X8q1uEJAAAAhc"]
[Wed Apr 22 07:58:24.022710 2026] [:error] [pid 21682:tid 21742] [client 20.123.29.91:25410] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/set.php"] [unique_id "aegPIJlXWQZUlmPHS3oYMwAAAFM"]
[Wed Apr 22 07:58:25.952639 2026] [:error] [pid 31755:tid 31777] [client 20.123.29.91:25432] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/lib.php"] [unique_id "aegPIQz2mYMkg3X8q1uEPQAAAg4"]
[Wed Apr 22 07:58:27.228966 2026] [:error] [pid 31755:tid 31773] [client 20.123.29.91:19641] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/lib.php"] [unique_id "aegPIwz2mYMkg3X8q1uEQQAAAgo"]
[Wed Apr 22 07:58:29.550987 2026] [:error] [pid 21683:tid 21767] [client 20.123.29.91:19599] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/lib.php"] [unique_id "aegPJVZBWT-0diZyYyaimAAAAJE"]
[Wed Apr 22 07:58:30.622857 2026] [:error] [pid 21683:tid 21752] [client 20.123.29.91:17108] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/lib.php"] [unique_id "aegPJlZBWT-0diZyYyaimQAAAII"]
[Wed Apr 22 07:58:31.497996 2026] [:error] [pid 23041:tid 23051] [client 20.123.29.91:1291] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/public/vx.php"] [unique_id "aegPJ0TXx_lUa7xwAb4GRwAAAQc"]
[Wed Apr 22 07:58:32.556666 2026] [:error] [pid 31755:tid 31766] [client 20.123.29.91:22646] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/public/vx.php"] [unique_id "aegPKAz2mYMkg3X8q1uESwAAAgM"]
[Wed Apr 22 07:58:34.474556 2026] [:error] [pid 31755:tid 31781] [client 20.123.29.91:25104] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/public/vx.php"] [unique_id "aegPKgz2mYMkg3X8q1uEUQAAAhI"]
[Wed Apr 22 07:58:35.997346 2026] [:error] [pid 31706:tid 31719] [client 20.123.29.91:18795] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/public/vx.php"] [unique_id "aegPK7GSe9Rnd4Q_z1ijFgAAAco"]
[Wed Apr 22 07:58:36.727915 2026] [:error] [pid 31755:tid 31776] [client 20.123.29.91:22618] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws57.php"] [unique_id "aegPLAz2mYMkg3X8q1uEVwAAAg0"]
[Wed Apr 22 07:58:39.815624 2026] [proxy_fcgi:error] [pid 31844:tid 31846] [client 20.123.29.91:18810] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 07:58:44.337925 2026] [:error] [pid 23041:tid 23067] [client 20.123.29.91:24094] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/domains.php"] [unique_id "aegPNETXx_lUa7xwAb4GXwAAARc"]
[Wed Apr 22 07:58:45.599816 2026] [:error] [pid 31844:tid 31849] [client 20.123.29.91:25672] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/domains.php"] [unique_id "aegPNWtAU9CprTB4b3I1dQAAAoM"]
[Wed Apr 22 07:58:47.688207 2026] [:error] [pid 31756:tid 31796] [client 20.123.29.91:28936] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/domains.php"] [unique_id "aegPN9_WbkXbHaEfhd3oZAAAAkQ"]
[Wed Apr 22 07:58:51.186686 2026] [:error] [pid 31755:tid 31777] [client 20.123.29.91:31653] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/domains.php"] [unique_id "aegPOwz2mYMkg3X8q1uEcQAAAg4"]
[Wed Apr 22 07:58:52.558644 2026] [:error] [pid 31844:tid 31854] [client 20.123.29.91:13763] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/222.php"] [unique_id "aegPPGtAU9CprTB4b3I1dwAAAog"]
[Wed Apr 22 07:58:54.193492 2026] [:error] [pid 31756:tid 31790] [client 20.123.29.91:25984] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/222.php"] [unique_id "aegPPt_WbkXbHaEfhd3obQAAAkA"]
[Wed Apr 22 07:58:55.398077 2026] [:error] [pid 32053:tid 32058] [client 20.123.29.91:33496] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/222.php"] [unique_id "aegPPwzPjXx_ocfbYhs7kwAAA0M"]
[Wed Apr 22 07:58:56.912568 2026] [:error] [pid 31755:tid 31776] [client 20.123.29.91:33499] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/222.php"] [unique_id "aegPQAz2mYMkg3X8q1uEewAAAg0"]
[Wed Apr 22 07:58:57.951173 2026] [:error] [pid 31844:tid 31861] [client 20.123.29.91:11720] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/166.php"] [unique_id "aegPQWtAU9CprTB4b3I1eAAAAo8"]
[Wed Apr 22 07:58:59.714678 2026] [:error] [pid 23041:tid 23067] [client 20.123.29.91:13551] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/166.php"] [unique_id "aegPQ0TXx_lUa7xwAb4GagAAARc"]
[Wed Apr 22 07:59:01.036196 2026] [:error] [pid 32053:tid 32074] [client 20.123.29.91:1160] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/166.php"] [unique_id "aegPRQzPjXx_ocfbYhs7lQAAA1M"]
[Wed Apr 22 07:59:02.344954 2026] [:error] [pid 31844:tid 31857] [client 20.123.29.91:12940] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/166.php"] [unique_id "aegPRmtAU9CprTB4b3I1egAAAos"]
[Wed Apr 22 07:59:03.455284 2026] [:error] [pid 31756:tid 31807] [client 20.123.29.91:16035] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/term.php"] [unique_id "aegPR9_WbkXbHaEfhd3oegAAAk8"]
[Wed Apr 22 07:59:04.737614 2026] [:error] [pid 23041:tid 23048] [client 20.123.29.91:28164] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/term.php"] [unique_id "aegPSETXx_lUa7xwAb4GbwAAAQQ"]
[Wed Apr 22 07:59:05.718732 2026] [:error] [pid 31755:tid 31778] [client 20.123.29.91:16889] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/term.php"] [unique_id "aegPSQz2mYMkg3X8q1uEhAAAAg8"]
[Wed Apr 22 07:59:06.743579 2026] [:error] [pid 31706:tid 31723] [client 20.123.29.91:1072] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/term.php"] [unique_id "aegPSrGSe9Rnd4Q_z1ijHQAAAc4"]
[Wed Apr 22 07:59:11.214335 2026] [:error] [pid 21682:tid 21743] [client 20.123.29.91:2001] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/666.php"] [unique_id "aegPT5lXWQZUlmPHS3oYUgAAAFQ"]
[Wed Apr 22 07:59:14.629418 2026] [:error] [pid 31755:tid 31783] [client 20.123.29.91:28186] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/666.php"] [unique_id "aegPUgz2mYMkg3X8q1uEkgAAAhQ"]
[Wed Apr 22 07:59:15.729360 2026] [:error] [pid 31755:tid 31781] [client 20.123.29.91:16011] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/666.php"] [unique_id "aegPUwz2mYMkg3X8q1uElAAAAhI"]
[Wed Apr 22 07:59:19.847685 2026] [:error] [pid 32053:tid 32075] [client 20.123.29.91:1414] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/666.php"] [unique_id "aegPVwzPjXx_ocfbYhs7nAAAA1Q"]
[Wed Apr 22 07:59:21.182162 2026] [:error] [pid 32053:tid 32063] [client 20.123.29.91:15783] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/tt.php"] [unique_id "aegPWQzPjXx_ocfbYhs7ngAAA0g"]
[Wed Apr 22 07:59:22.897177 2026] [:error] [pid 31756:tid 31790] [client 20.123.29.91:33440] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/tt.php"] [unique_id "aegPWt_WbkXbHaEfhd3oiwAAAkA"]
[Wed Apr 22 07:59:24.015708 2026] [:error] [pid 32095:tid 32116] [client 20.123.29.91:19337] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/tt.php"] [unique_id "aegPXNfu5Cv628YPe598DQAAA5I"]
[Wed Apr 22 07:59:25.798595 2026] [:error] [pid 21683:tid 21755] [client 20.123.29.91:19102] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/tt.php"] [unique_id "aegPXVZBWT-0diZyYyairgAAAIU"]
[Wed Apr 22 07:59:27.857201 2026] [:error] [pid 23041:tid 23068] [client 20.123.29.91:13726] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/sid3.php"] [unique_id "aegPX0TXx_lUa7xwAb4GhAAAARg"]
[Wed Apr 22 07:59:31.395551 2026] [:error] [pid 23041:tid 23062] [client 20.123.29.91:25192] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/sid3.php"] [unique_id "aegPY0TXx_lUa7xwAb4GjQAAARI"]
[Wed Apr 22 07:59:33.267960 2026] [:error] [pid 21682:tid 21723] [client 20.123.29.91:14231] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/sid3.php"] [unique_id "aegPZZlXWQZUlmPHS3oYdgAAAEA"]
[Wed Apr 22 07:59:35.072542 2026] [:error] [pid 21682:tid 21738] [client 20.123.29.91:22228] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/sid3.php"] [unique_id "aegPZ5lXWQZUlmPHS3oYfQAAAE8"]
[Wed Apr 22 07:59:36.323015 2026] [:error] [pid 32095:tid 32117] [client 20.123.29.91:19077] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/66.php"] [unique_id "aegPaNfu5Cv628YPe598EwAAA5M"]
[Wed Apr 22 07:59:37.619948 2026] [:error] [pid 23041:tid 23067] [client 20.123.29.91:16023] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/66.php"] [unique_id "aegPaUTXx_lUa7xwAb4GkQAAARc"]
[Wed Apr 22 07:59:39.184926 2026] [:error] [pid 23041:tid 23063] [client 20.123.29.91:13722] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/66.php"] [unique_id "aegPa0TXx_lUa7xwAb4GlQAAARM"]
[Wed Apr 22 07:59:41.051430 2026] [proxy_fcgi:error] [pid 31755:tid 31785] [client 20.123.29.91:14761] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 07:59:42.822675 2026] [proxy_fcgi:error] [pid 31755:tid 31787] [client 20.123.29.91:33428] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 07:59:43.590534 2026] [:error] [pid 31755:tid 31774] [client 20.123.29.91:23389] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/jga.php"] [unique_id "aegPbwz2mYMkg3X8q1uErAAAAgs"]
[Wed Apr 22 07:59:46.236590 2026] [:error] [pid 31756:tid 31807] [client 20.123.29.91:22246] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/jga.php"] [unique_id "aegPct_WbkXbHaEfhd3okQAAAk8"]
[Wed Apr 22 07:59:47.555450 2026] [:error] [pid 31756:tid 31800] [client 20.123.29.91:19133] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/jga.php"] [unique_id "aegPc9_WbkXbHaEfhd3olQAAAkg"]
[Wed Apr 22 07:59:48.510732 2026] [:error] [pid 31755:tid 31765] [client 20.123.29.91:13985] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/jga.php"] [unique_id "aegPdAz2mYMkg3X8q1uEtgAAAgI"]
[Wed Apr 22 07:59:49.922879 2026] [:error] [pid 31755:tid 31774] [client 20.123.29.91:13962] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-blog-header.php"] [unique_id "aegPdQz2mYMkg3X8q1uEuAAAAgs"]
[Wed Apr 22 07:59:52.714404 2026] [:error] [pid 31755:tid 31766] [client 20.123.29.91:15764] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-blog-header.php"] [unique_id "aegPeAz2mYMkg3X8q1uEvAAAAgM"]
[Wed Apr 22 07:59:55.050692 2026] [:error] [pid 31755:tid 31785] [client 20.123.29.91:31633] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-blog-header.php"] [unique_id "aegPewz2mYMkg3X8q1uExgAAAhY"]
[Wed Apr 22 07:59:58.990731 2026] [:error] [pid 23041:tid 23054] [client 20.123.29.91:26343] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-blog-header.php"] [unique_id "aegPfkTXx_lUa7xwAb4GvQAAAQo"]
[Wed Apr 22 08:00:04.031171 2026] [:error] [pid 23041:tid 23044] [client 20.123.29.91:16031] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bmi.php"] [unique_id "aegPhETXx_lUa7xwAb4G0QAAAQA"]
[Wed Apr 22 08:00:05.386660 2026] [:error] [pid 31844:tid 31867] [client 20.123.29.91:28255] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bmi.php"] [unique_id "aegPhWtAU9CprTB4b3I1gwAAApU"]
[Wed Apr 22 08:00:08.254586 2026] [:error] [pid 31949:tid 31963] [client 20.123.29.91:15557] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bmi.php"] [unique_id "aegPiH2WtGZh5JfbMUdGwQAAAws"]
[Wed Apr 22 08:00:10.700292 2026] [:error] [pid 23041:tid 23044] [client 20.123.29.91:1925] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/bmi.php"] [unique_id "aegPikTXx_lUa7xwAb4G1QAAAQA"]
[Wed Apr 22 08:00:11.779588 2026] [:error] [pid 23041:tid 23052] [client 20.123.29.91:14765] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/byypas.php"] [unique_id "aegPi0TXx_lUa7xwAb4G2AAAAQg"]
[Wed Apr 22 08:00:13.445669 2026] [:error] [pid 31949:tid 31952] [client 20.123.29.91:15763] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/byypas.php"] [unique_id "aegPjX2WtGZh5JfbMUdGxAAAAwA"]
[Wed Apr 22 08:00:16.137604 2026] [:error] [pid 21682:tid 21726] [client 20.123.29.91:14720] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/byypas.php"] [unique_id "aegPkJlXWQZUlmPHS3oYuAAAAEM"]
[Wed Apr 22 08:00:17.238749 2026] [:error] [pid 21682:tid 21745] [client 20.123.29.91:28258] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/byypas.php"] [unique_id "aegPkZlXWQZUlmPHS3oYvwAAAFY"]
[Wed Apr 22 08:00:19.103457 2026] [:error] [pid 23041:tid 23055] [client 20.123.29.91:2005] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/radio.php"] [unique_id "aegPk0TXx_lUa7xwAb4G4gAAAQs"]
[Wed Apr 22 08:00:22.274960 2026] [:error] [pid 21683:tid 21755] [client 20.123.29.91:16009] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/radio.php"] [unique_id "aegPllZBWT-0diZyYyaiygAAAIU"]
[Wed Apr 22 08:00:25.902759 2026] [:error] [pid 31756:tid 31815] [client 20.123.29.91:2010] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/radio.php"] [unique_id "aegPmd_WbkXbHaEfhd3otAAAAlc"]
[Wed Apr 22 08:00:31.602147 2026] [:error] [pid 31755:tid 31786] [client 20.123.29.91:15615] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-content/radio.php"] [unique_id "aegPnwz2mYMkg3X8q1uE_AAAAhc"]
[Wed Apr 22 08:00:32.803545 2026] [:error] [pid 21682:tid 21736] [client 20.123.29.91:21279] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-png.php"] [unique_id "aegPoJlXWQZUlmPHS3oY1gAAAE0"]
[Wed Apr 22 08:00:34.731430 2026] [:error] [pid 21682:tid 21727] [client 20.123.29.91:21287] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-png.php"] [unique_id "aegPoplXWQZUlmPHS3oY2wAAAEQ"]
[Wed Apr 22 08:00:37.359586 2026] [:error] [pid 21682:tid 21739] [client 20.123.29.91:1958] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-png.php"] [unique_id "aegPpZlXWQZUlmPHS3oY3gAAAFA"]
[Wed Apr 22 08:00:39.625193 2026] [:error] [pid 31755:tid 31772] [client 20.123.29.91:19086] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-png.php"] [unique_id "aegPpwz2mYMkg3X8q1uFGgAAAgk"]
[Wed Apr 22 08:00:44.458587 2026] [proxy_fcgi:error] [pid 31755:tid 31781] [client 20.123.29.91:31300] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:00:47.357744 2026] [proxy_fcgi:error] [pid 21682:tid 21730] [client 20.123.29.91:28287] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:00:50.557460 2026] [:error] [pid 21683:tid 21763] [client 20.123.29.91:16314] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ioxi001.PhP7"] [unique_id "aegPslZBWT-0diZyYyai2AAAAI0"]
[Wed Apr 22 08:00:52.681921 2026] [:error] [pid 31755:tid 31784] [client 20.123.29.91:31298] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ioxi001.PhP7"] [unique_id "aegPtAz2mYMkg3X8q1uFOAAAAhU"]
[Wed Apr 22 08:00:59.110297 2026] [:error] [pid 31755:tid 31781] [client 20.123.29.91:15555] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ioxi001.PhP7"] [unique_id "aegPuwz2mYMkg3X8q1uFQAAAAhI"]
[Wed Apr 22 08:01:01.608256 2026] [:error] [pid 31756:tid 31809] [client 20.123.29.91:16258] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ioxi001.PhP7"] [unique_id "aegPvd_WbkXbHaEfhd3ozQAAAlE"]
[Wed Apr 22 08:01:03.534925 2026] [:error] [pid 23041:tid 23048] [client 20.123.29.91:26319] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-kikikoko.php"] [unique_id "aegPv0TXx_lUa7xwAb4HUQAAAQQ"]
[Wed Apr 22 08:01:05.836188 2026] [:error] [pid 31755:tid 31769] [client 20.123.29.91:16267] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-kikikoko.php"] [unique_id "aegPwQz2mYMkg3X8q1uFSQAAAgY"]
[Wed Apr 22 08:01:08.469926 2026] [:error] [pid 32095:tid 32102] [client 20.123.29.91:16353] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-kikikoko.php"] [unique_id "aegPxNfu5Cv628YPe598MAAAA4Q"]
[Wed Apr 22 08:01:11.797694 2026] [:error] [pid 31755:tid 31773] [client 20.123.29.91:16380] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-kikikoko.php"] [unique_id "aegPxwz2mYMkg3X8q1uFUAAAAgo"]
[Wed Apr 22 08:01:13.414341 2026] [:error] [pid 31756:tid 31811] [client 20.123.29.91:1935] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/hplfuns.php"] [unique_id "aegPyd_WbkXbHaEfhd3o5AAAAlM"]
[Wed Apr 22 08:01:16.191653 2026] [:error] [pid 31755:tid 31775] [client 20.123.29.91:28513] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/hplfuns.php"] [unique_id "aegPzAz2mYMkg3X8q1uFYQAAAgw"]
[Wed Apr 22 08:01:18.146625 2026] [:error] [pid 23041:tid 23050] [client 20.123.29.91:28497] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/hplfuns.php"] [unique_id "aegPzkTXx_lUa7xwAb4HYQAAAQY"]
[Wed Apr 22 08:01:21.513940 2026] [:error] [pid 31756:tid 31793] [client 20.123.29.91:27753] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/hplfuns.php"] [unique_id "aegP0d_WbkXbHaEfhd3o8QAAAkM"]
[Wed Apr 22 08:01:24.050464 2026] [:error] [pid 31949:tid 31976] [client 20.123.29.91:15285] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/shell.php"] [unique_id "aegP1H2WtGZh5JfbMUdG4gAAAxg"]
[Wed Apr 22 08:01:25.363435 2026] [:error] [pid 32095:tid 32115] [client 20.123.29.91:15246] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/shell.php"] [unique_id "aegP1dfu5Cv628YPe598VAAAA5E"]
[Wed Apr 22 08:01:26.665065 2026] [:error] [pid 31949:tid 31975] [client 20.123.29.91:14334] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/shell.php"] [unique_id "aegP1n2WtGZh5JfbMUdG5QAAAxc"]
[Wed Apr 22 08:01:27.679475 2026] [:error] [pid 21682:tid 21745] [client 20.123.29.91:21128] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/shell.php"] [unique_id "aegP15lXWQZUlmPHS3oZEAAAAFY"]
[Wed Apr 22 08:01:29.152094 2026] [:error] [pid 23041:tid 23067] [client 20.123.29.91:12724] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/new.php"] [unique_id "aegP2UTXx_lUa7xwAb4HdwAAARc"]
[Wed Apr 22 08:01:30.138938 2026] [:error] [pid 23041:tid 23064] [client 20.123.29.91:12688] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/new.php"] [unique_id "aegP2kTXx_lUa7xwAb4HegAAARQ"]
[Wed Apr 22 08:01:31.992768 2026] [:error] [pid 23041:tid 23050] [client 20.123.29.91:29344] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/new.php"] [unique_id "aegP20TXx_lUa7xwAb4HfgAAAQY"]
[Wed Apr 22 08:01:32.857771 2026] [:error] [pid 21682:tid 21733] [client 20.123.29.91:29370] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/new.php"] [unique_id "aegP3JlXWQZUlmPHS3oZGgAAAEo"]
[Wed Apr 22 08:01:33.505182 2026] [:error] [pid 21682:tid 21730] [client 20.123.29.91:30865] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aegP3ZlXWQZUlmPHS3oZHQAAAEc"]
[Wed Apr 22 08:01:34.238059 2026] [:error] [pid 31756:tid 31810] [client 20.123.29.91:15232] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aegP3t_WbkXbHaEfhd3o-gAAAlI"]
[Wed Apr 22 08:01:36.719194 2026] [:error] [pid 31755:tid 31764] [client 20.123.29.91:1885] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aegP4Az2mYMkg3X8q1uFnAAAAgE"]
[Wed Apr 22 08:01:41.478135 2026] [:error] [pid 31949:tid 31969] [client 20.123.29.91:28509] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aegP5X2WtGZh5JfbMUdG7wAAAxE"]
[Wed Apr 22 08:01:45.845705 2026] [:error] [pid 31949:tid 31971] [client 20.123.29.91:29369] [client 20.123.29.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.southerncrosscentre.au"] [uri "/ws48.php"] [unique_id "aegP6X2WtGZh5JfbMUdG8QAAAxM"]
[Wed Apr 22 08:01:48.271030 2026] [proxy_fcgi:error] [pid 21683:tid 21755] [client 20.123.29.91:15820] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:01:49.877554 2026] [proxy_fcgi:error] [pid 31706:tid 31721] [client 20.123.29.91:29359] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:01:51.754387 2026] [proxy_fcgi:error] [pid 31706:tid 31727] [client 20.123.29.91:21981] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:01:55.721162 2026] [proxy_fcgi:error] [pid 31949:tid 31963] [client 20.123.29.91:41076] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:01:56.963657 2026] [proxy_fcgi:error] [pid 31949:tid 31973] [client 20.123.29.91:21132] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:01:58.564956 2026] [proxy_fcgi:error] [pid 31949:tid 31966] [client 20.123.29.91:30855] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:00.090006 2026] [proxy_fcgi:error] [pid 31755:tid 31773] [client 20.123.29.91:30883] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:03.198166 2026] [proxy_fcgi:error] [pid 32095:tid 32106] [client 20.123.29.91:21701] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:04.958645 2026] [proxy_fcgi:error] [pid 31756:tid 31799] [client 20.123.29.91:27955] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:07.139400 2026] [proxy_fcgi:error] [pid 21682:tid 21732] [client 20.123.29.91:21712] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:08.832916 2026] [proxy_fcgi:error] [pid 32053:tid 32069] [client 20.123.29.91:21703] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:09.970874 2026] [proxy_fcgi:error] [pid 31949:tid 31961] [client 20.123.29.91:12269] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:11.420145 2026] [proxy_fcgi:error] [pid 31756:tid 31790] [client 20.123.29.91:21713] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:15.138255 2026] [proxy_fcgi:error] [pid 21683:tid 21764] [client 20.123.29.91:28479] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:16.608507 2026] [proxy_fcgi:error] [pid 32095:tid 32101] [client 20.123.29.91:11536] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:17.836428 2026] [proxy_fcgi:error] [pid 32095:tid 32119] [client 20.123.29.91:24495] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:19.176730 2026] [proxy_fcgi:error] [pid 31755:tid 31775] [client 20.123.29.91:12189] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:21.149920 2026] [proxy_fcgi:error] [pid 23041:tid 23047] [client 20.123.29.91:15344] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:22.579634 2026] [proxy_fcgi:error] [pid 23041:tid 23045] [client 20.123.29.91:38039] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:23.931110 2026] [proxy_fcgi:error] [pid 32095:tid 32110] [client 20.123.29.91:32639] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:26.427091 2026] [proxy_fcgi:error] [pid 23041:tid 23056] [client 20.123.29.91:38063] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:32.149982 2026] [proxy_fcgi:error] [pid 23041:tid 23046] [client 20.123.29.91:13050] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:33.551656 2026] [proxy_fcgi:error] [pid 23041:tid 23057] [client 20.123.29.91:25422] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:34.791337 2026] [proxy_fcgi:error] [pid 31755:tid 31772] [client 20.123.29.91:13456] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:35.378458 2026] [proxy_fcgi:error] [pid 31755:tid 31776] [client 20.123.29.91:13456] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:36.642426 2026] [proxy_fcgi:error] [pid 31756:tid 31811] [client 20.123.29.91:14563] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:37.772696 2026] [proxy_fcgi:error] [pid 31756:tid 31809] [client 20.123.29.91:35139] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:40.410800 2026] [proxy_fcgi:error] [pid 31706:tid 31726] [client 20.123.29.91:1546] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:41.555529 2026] [proxy_fcgi:error] [pid 21682:tid 21732] [client 20.123.29.91:29034] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:42.900068 2026] [proxy_fcgi:error] [pid 21682:tid 21736] [client 20.123.29.91:41017] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:44.710188 2026] [proxy_fcgi:error] [pid 32053:tid 32077] [client 20.123.29.91:35083] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:46.157924 2026] [proxy_fcgi:error] [pid 21682:tid 21727] [client 20.123.29.91:1329] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:46.710395 2026] [proxy_fcgi:error] [pid 21682:tid 21741] [client 20.123.29.91:1329] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:48.571756 2026] [proxy_fcgi:error] [pid 23041:tid 23049] [client 20.123.29.91:16537] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:50.770143 2026] [proxy_fcgi:error] [pid 21682:tid 21736] [client 20.123.29.91:12473] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:52.293132 2026] [proxy_fcgi:error] [pid 31844:tid 31854] [client 20.123.29.91:12466] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:53.497391 2026] [proxy_fcgi:error] [pid 31756:tid 31805] [client 20.123.29.91:1110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:54.579644 2026] [proxy_fcgi:error] [pid 23041:tid 23060] [client 20.123.29.91:22504] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:56.075784 2026] [proxy_fcgi:error] [pid 31756:tid 31804] [client 20.123.29.91:24125] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:57.775307 2026] [proxy_fcgi:error] [pid 31755:tid 31765] [client 20.123.29.91:14070] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:02:59.830529 2026] [proxy_fcgi:error] [pid 21683:tid 21751] [client 20.123.29.91:1110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:01.654528 2026] [proxy_fcgi:error] [pid 31755:tid 31782] [client 20.123.29.91:22272] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:02.927923 2026] [proxy_fcgi:error] [pid 31755:tid 31786] [client 20.123.29.91:12515] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:04.853307 2026] [proxy_fcgi:error] [pid 31755:tid 31769] [client 20.123.29.91:25632] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:06.050458 2026] [proxy_fcgi:error] [pid 21682:tid 21725] [client 20.123.29.91:13548] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:07.829517 2026] [proxy_fcgi:error] [pid 21682:tid 21723] [client 20.123.29.91:11911] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:10.444542 2026] [proxy_fcgi:error] [pid 21682:tid 21725] [client 20.123.29.91:1363] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:12.257957 2026] [proxy_fcgi:error] [pid 32053:tid 32069] [client 20.123.29.91:13567] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:14.900067 2026] [proxy_fcgi:error] [pid 21683:tid 21767] [client 20.123.29.91:20361] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:16.653310 2026] [proxy_fcgi:error] [pid 21683:tid 21755] [client 20.123.29.91:20780] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:17.670396 2026] [proxy_fcgi:error] [pid 23041:tid 23064] [client 20.123.29.91:17697] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:19.375032 2026] [proxy_fcgi:error] [pid 31755:tid 31776] [client 20.123.29.91:26735] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:20.940628 2026] [proxy_fcgi:error] [pid 31755:tid 31766] [client 20.123.29.91:26728] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:21.852083 2026] [proxy_fcgi:error] [pid 31755:tid 31770] [client 20.123.29.91:1394] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:23.728441 2026] [proxy_fcgi:error] [pid 32053:tid 32058] [client 20.123.29.91:26706] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:25.409113 2026] [proxy_fcgi:error] [pid 23041:tid 23067] [client 20.123.29.91:33477] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:26.634648 2026] [proxy_fcgi:error] [pid 31755:tid 31765] [client 20.123.29.91:20753] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:28.310069 2026] [proxy_fcgi:error] [pid 23041:tid 23047] [client 20.123.29.91:1391] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:29.652326 2026] [proxy_fcgi:error] [pid 32095:tid 32102] [client 20.123.29.91:25632] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:30.844270 2026] [proxy_fcgi:error] [pid 31755:tid 31774] [client 20.123.29.91:1390] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:32.349330 2026] [proxy_fcgi:error] [pid 31756:tid 31790] [client 20.123.29.91:11945] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:33.446250 2026] [proxy_fcgi:error] [pid 23041:tid 23055] [client 20.123.29.91:13541] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:36.355787 2026] [proxy_fcgi:error] [pid 21683:tid 21753] [client 20.123.29.91:11743] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:36.941883 2026] [proxy_fcgi:error] [pid 21683:tid 21765] [client 20.123.29.91:11743] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:38.079033 2026] [proxy_fcgi:error] [pid 23041:tid 23060] [client 20.123.29.91:13536] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:39.487564 2026] [proxy_fcgi:error] [pid 31756:tid 31805] [client 20.123.29.91:16267] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:40.786498 2026] [proxy_fcgi:error] [pid 21683:tid 21771] [client 20.123.29.91:28619] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:43.901959 2026] [proxy_fcgi:error] [pid 31756:tid 31799] [client 20.123.29.91:26742] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:46.058277 2026] [proxy_fcgi:error] [pid 31755:tid 31774] [client 20.123.29.91:27684] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:49.109517 2026] [proxy_fcgi:error] [pid 23041:tid 23050] [client 20.123.29.91:19305] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:51.616798 2026] [proxy_fcgi:error] [pid 31756:tid 31810] [client 20.123.29.91:19357] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:52.714235 2026] [proxy_fcgi:error] [pid 21682:tid 21731] [client 20.123.29.91:13277] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:54.371851 2026] [proxy_fcgi:error] [pid 31755:tid 31777] [client 20.123.29.91:11748] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:55.862497 2026] [proxy_fcgi:error] [pid 31755:tid 31774] [client 20.123.29.91:19343] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:57.454364 2026] [proxy_fcgi:error] [pid 23041:tid 23052] [client 20.123.29.91:23782] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 08:03:59.233652 2026] [proxy_fcgi:error] [pid 23041:tid 23055] [client 20.123.29.91:19267] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 15:53:08.821285 2026] [proxy_fcgi:error] [pid 6344:tid 6361] [client 43.164.193.149:50051] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 22 22:52:43.873666 2026] [proxy_fcgi:error] [pid 6251:tid 6303] [client 66.249.79.238:35607] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 04:48:50.662280 2026] [proxy_fcgi:error] [pid 42973:tid 43063] [client 43.165.0.23:50056] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 04:49:41.745836 2026] [proxy_fcgi:error] [pid 42971:tid 43007] [client 199.45.155.97:38922] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 04:54:30.295475 2026] [proxy_fcgi:error] [pid 42971:tid 42987] [client 17.22.237.24:56578] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 05:10:19.255672 2026] [proxy_fcgi:error] [pid 43083:tid 43087] [client 17.22.253.9:42194] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:50:58.347035 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 194.61.40.105:60337] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:50:58.924698 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 194.61.40.94:37667] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:50:59.687614 2026] [proxy_fcgi:error] [pid 42972:tid 43029] [client 194.61.40.85:30211] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:00.370584 2026] [proxy_fcgi:error] [pid 42973:tid 43051] [client 194.61.40.96:61205] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:01.366714 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 194.61.40.97:46715] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:02.039647 2026] [proxy_fcgi:error] [pid 42972:tid 43038] [client 194.61.40.95:37635] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:02.635538 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 194.61.40.82:65503] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:03.243184 2026] [proxy_fcgi:error] [pid 42972:tid 43029] [client 194.61.40.67:26951] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:03.826482 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 194.61.40.83:38011] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:04.466573 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 194.61.40.85:31125] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:05.028075 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 194.61.40.91:33259] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:05.594639 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 194.61.40.68:37167] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:06.188462 2026] [proxy_fcgi:error] [pid 59700:tid 59710] [client 194.61.40.59:47433] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:06.756510 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 194.61.40.106:37667] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:07.344538 2026] [proxy_fcgi:error] [pid 43083:tid 43093] [client 194.61.40.94:46459] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:07.916259 2026] [proxy_fcgi:error] [pid 43083:tid 43095] [client 194.61.40.67:49831] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:08.481322 2026] [proxy_fcgi:error] [pid 42972:tid 43028] [client 194.61.40.85:50297] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:09.045145 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 194.61.40.98:42569] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:09.623950 2026] [proxy_fcgi:error] [pid 64967:tid 64991] [client 194.61.40.67:53413] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:10.349788 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 194.61.40.61:53535] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:10.962032 2026] [proxy_fcgi:error] [pid 42972:tid 43024] [client 194.61.40.74:27063] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:11.565408 2026] [proxy_fcgi:error] [pid 42973:tid 43065] [client 194.61.40.75:29427] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:12.141845 2026] [proxy_fcgi:error] [pid 42971:tid 42989] [client 194.61.40.67:39137] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:12.757931 2026] [proxy_fcgi:error] [pid 64967:tid 64970] [client 194.61.40.75:55983] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:13.493659 2026] [proxy_fcgi:error] [pid 64998:tid 65026] [client 194.61.40.75:37197] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:14.099292 2026] [proxy_fcgi:error] [pid 43083:tid 43106] [client 194.61.40.73:33633] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:14.683305 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 194.61.40.72:29533] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:15.291453 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 194.61.40.97:64465] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:15.865273 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 194.61.40.87:41883] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:16.439978 2026] [proxy_fcgi:error] [pid 64998:tid 65008] [client 194.61.40.98:41103] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:17.124821 2026] [proxy_fcgi:error] [pid 64998:tid 65026] [client 194.61.40.100:38123] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:17.823846 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 194.61.40.77:33089] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:18.306364 2026] [:error] [pid 64998:tid 65026] [client 194.61.40.54:50753] [client 194.61.40.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeltBoV5EysYcTLjmwhDdQAAAdg"]
[Thu Apr 23 08:51:18.898078 2026] [proxy_fcgi:error] [pid 64967:tid 64987] [client 194.61.40.57:23531] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:19.460409 2026] [proxy_fcgi:error] [pid 42972:tid 43031] [client 194.61.40.86:31457] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:20.035293 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 194.61.40.91:48611] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:20.344657 2026] [:error] [pid 42972:tid 43020] [client 194.61.40.105:54015] [client 194.61.40.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeltCMOAb-3sOknsk4czNgAAAEQ"]
[Thu Apr 23 08:51:20.944041 2026] [proxy_fcgi:error] [pid 43083:tid 43109] [client 194.61.40.87:40457] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:21.542911 2026] [proxy_fcgi:error] [pid 64967:tid 64974] [client 194.61.40.97:45979] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:22.128248 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 194.61.40.96:53421] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:22.693329 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 194.61.40.97:49949] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:23.298223 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 194.61.40.60:30777] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:23.968605 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 194.61.40.86:60121] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:24.228759 2026] [:error] [pid 64998:tid 65003] [client 194.61.40.63:30553] [client 194.61.40.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tinyfilemanager.php"] [unique_id "aeltDIV5EysYcTLjmwhDhAAAAcE"]
[Thu Apr 23 08:51:24.848352 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 194.61.40.99:30801] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:25.621789 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 194.61.40.70:61123] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:26.212044 2026] [proxy_fcgi:error] [pid 59700:tid 59703] [client 194.61.40.67:22829] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:26.483797 2026] [:error] [pid 59700:tid 59704] [client 194.61.40.55:47083] [client 194.61.40.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeltDpXyGZJFeAIDWtl7TgAAAUI"]
[Thu Apr 23 08:51:27.150468 2026] [proxy_fcgi:error] [pid 42971:tid 43002] [client 194.61.40.90:21631] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:27.760222 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 194.61.40.87:36783] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:28.344070 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 194.61.40.90:45451] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:28.905774 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 194.61.40.76:22369] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:29.493922 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 194.61.40.86:60651] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:30.105156 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 194.61.40.75:42839] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:30.402380 2026] [:error] [pid 64998:tid 65002] [client 194.61.40.99:48795] [client 194.61.40.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeltEoV5EysYcTLjmwhDkgAAAcA"]
[Thu Apr 23 08:51:31.130578 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 194.61.40.106:42389] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:31.431419 2026] [:error] [pid 64998:tid 65011] [client 194.61.40.96:58437] [client 194.61.40.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aeltE4V5EysYcTLjmwhDlQAAAck"]
[Thu Apr 23 08:51:31.688912 2026] [:error] [pid 64998:tid 65025] [client 194.61.40.88:55851] [client 194.61.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aeltE4V5EysYcTLjmwhDlgAAAdc"]
[Thu Apr 23 08:51:31.951723 2026] [:error] [pid 64998:tid 65008] [client 194.61.40.90:20823] [client 194.61.40.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aeltE4V5EysYcTLjmwhDlwAAAcY"]
[Thu Apr 23 08:51:32.231053 2026] [:error] [pid 25635:tid 25650] [client 194.61.40.73:27495] [client 194.61.40.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aeltFMRxv6UsgRGKB3LueQAAAQs"]
[Thu Apr 23 08:51:32.495845 2026] [:error] [pid 43083:tid 43098] [client 194.61.40.60:32693] [client 194.61.40.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aeltFDC5hrvNXosL83L4jgAAAM0"]
[Thu Apr 23 08:51:33.044835 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 194.61.40.83:63707] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:33.181443 2026] [:error] [pid 64998:tid 65023] [client 194.61.40.83:63707] [client 194.61.40.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aeltFYV5EysYcTLjmwhDmwAAAdU"]
[Thu Apr 23 08:51:33.751726 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 194.61.40.96:58669] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:34.146543 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 194.61.40.78:31153] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:34.300448 2026] [:error] [pid 64998:tid 65011] [client 194.61.40.78:31153] [client 194.61.40.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "aeltFoV5EysYcTLjmwhDoQAAAck"]
[Thu Apr 23 08:51:35.510320 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 194.61.40.98:49421] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:36.104851 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 194.61.40.76:33803] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:36.362638 2026] [:error] [pid 43083:tid 43089] [client 194.61.40.60:32965] [client 194.61.40.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aeltGDC5hrvNXosL83L4jwAAAMQ"]
[Thu Apr 23 08:51:36.978583 2026] [proxy_fcgi:error] [pid 42971:tid 43010] [client 194.61.40.78:35787] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:37.110717 2026] [:error] [pid 42971:tid 43001] [client 194.61.40.78:35787] [client 194.61.40.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aeltGTEP2_5RswrH8bHGNgAAAA8"]
[Thu Apr 23 08:51:37.704914 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 194.61.40.101:31331] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:37.991192 2026] [:error] [pid 64967:tid 64993] [client 194.61.40.82:60655] [client 194.61.40.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aeltGYAV4GfOOdX8QzoiRQAAAZg"]
[Thu Apr 23 08:51:38.654694 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 194.61.40.102:20497] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:39.093789 2026] [proxy_fcgi:error] [pid 59700:tid 59725] [client 194.61.40.102:20497] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:39.650938 2026] [proxy_fcgi:error] [pid 42973:tid 43053] [client 194.61.40.105:39851] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:40.293310 2026] [proxy_fcgi:error] [pid 59700:tid 59711] [client 194.61.40.89:36107] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:40.898829 2026] [proxy_fcgi:error] [pid 64967:tid 64971] [client 194.61.40.81:31949] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:41.456499 2026] [proxy_fcgi:error] [pid 59700:tid 59724] [client 194.61.40.78:36961] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:41.794701 2026] [:error] [pid 25635:tid 25640] [client 194.61.40.82:54787] [client 194.61.40.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aeltHcRxv6UsgRGKB3LufAAAAQE"]
[Thu Apr 23 08:51:42.383557 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 194.61.40.87:36823] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:42.651039 2026] [:error] [pid 65000:tid 65029] [client 194.61.40.68:32245] [client 194.61.40.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aeltHr6vRb9j6psK2ZbYVQAAAgA"]
[Thu Apr 23 08:51:43.197318 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 194.61.40.78:26253] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:43.876736 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 194.61.40.81:41181] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:44.236722 2026] [:error] [pid 65000:tid 65044] [client 194.61.40.69:57793] [client 194.61.40.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/defaults.php"] [unique_id "aeltIL6vRb9j6psK2ZbYWwAAAgs"]
[Thu Apr 23 08:51:44.874104 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 194.61.40.55:59771] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:45.136143 2026] [:error] [pid 65000:tid 65048] [client 194.61.40.68:31087] [client 194.61.40.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aeltIb6vRb9j6psK2ZbYYgAAAg8"]
[Thu Apr 23 08:51:45.712094 2026] [proxy_fcgi:error] [pid 64967:tid 64970] [client 194.61.40.60:46781] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:46.313623 2026] [proxy_fcgi:error] [pid 64967:tid 64972] [client 194.61.40.77:63979] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:46.888113 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 194.61.40.74:20905] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:47.475267 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 194.61.40.63:41377] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:47.731886 2026] [:error] [pid 59700:tid 59722] [client 194.61.40.83:39831] [client 194.61.40.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aeltI5XyGZJFeAIDWtl7ZAAAAVQ"]
[Thu Apr 23 08:51:48.375122 2026] [proxy_fcgi:error] [pid 59700:tid 59702] [client 194.61.40.61:48271] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:48.686075 2026] [:error] [pid 43083:tid 43085] [client 194.61.40.60:59181] [client 194.61.40.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aeltJDC5hrvNXosL83L4kwAAAMA"]
[Thu Apr 23 08:51:49.254032 2026] [proxy_fcgi:error] [pid 43083:tid 43086] [client 194.61.40.105:34311] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:49.515723 2026] [:error] [pid 25635:tid 25649] [client 194.61.40.80:56127] [client 194.61.40.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aeltJcRxv6UsgRGKB3LufgAAAQo"]
[Thu Apr 23 08:51:49.989372 2026] [:error] [pid 64998:tid 65003] [client 194.61.40.84:49055] [client 194.61.40.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aeltJYV5EysYcTLjmwhDrgAAAcE"]
[Thu Apr 23 08:51:50.301772 2026] [:error] [pid 65000:tid 65044] [client 194.61.40.60:41643] [client 194.61.40.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aeltJr6vRb9j6psK2ZbYbAAAAgs"]
[Thu Apr 23 08:51:50.980622 2026] [proxy_fcgi:error] [pid 42973:tid 43051] [client 194.61.40.64:32523] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:51.686420 2026] [proxy_fcgi:error] [pid 59700:tid 59703] [client 194.61.40.108:34147] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:52.336195 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 194.61.40.90:31479] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:52.601773 2026] [:error] [pid 64998:tid 65002] [client 194.61.40.60:30229] [client 194.61.40.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aeltKIV5EysYcTLjmwhDtQAAAcA"]
[Thu Apr 23 08:51:52.874886 2026] [:error] [pid 42972:tid 43023] [client 194.61.40.67:61169] [client 194.61.40.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class.api.php"] [unique_id "aeltKMOAb-3sOknsk4czQAAAAEc"]
[Thu Apr 23 08:51:53.156572 2026] [:error] [pid 42971:tid 42990] [client 194.61.40.87:43401] [client 194.61.40.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aeltKTEP2_5RswrH8bHGPwAAAAQ"]
[Thu Apr 23 08:51:53.727702 2026] [proxy_fcgi:error] [pid 25635:tid 25660] [client 194.61.40.58:48911] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:54.328810 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 194.61.40.78:20471] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:54.956342 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 194.61.40.81:35233] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:55.556772 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 194.61.40.91:22731] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:56.182221 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 194.61.40.68:46885] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:56.827343 2026] [proxy_fcgi:error] [pid 43083:tid 43087] [client 194.61.40.67:53443] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:57.441302 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 194.61.40.78:64751] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:58.041877 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 194.61.40.78:35847] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:58.451757 2026] [:error] [pid 64998:tid 65022] [client 194.61.40.96:29595] [client 194.61.40.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/admin.php"] [unique_id "aeltLoV5EysYcTLjmwhDwAAAAdQ"]
[Thu Apr 23 08:51:59.079306 2026] [proxy_fcgi:error] [pid 59700:tid 59709] [client 194.61.40.105:27093] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:51:59.649251 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 194.61.40.92:45081] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:00.398883 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 194.61.40.63:57057] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:00.648093 2026] [:error] [pid 64998:tid 65012] [client 194.61.40.63:57057] [client 194.61.40.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.61.40.63, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aeltMIV5EysYcTLjmwhD4AAAAco"]
[Thu Apr 23 08:52:01.010373 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 194.61.40.63:57057] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:01.683732 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 194.61.40.96:53335] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:02.310886 2026] [proxy_fcgi:error] [pid 59700:tid 59709] [client 194.61.40.89:20839] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:02.915595 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 194.61.40.73:38305] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:03.531712 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 194.61.40.75:50347] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:04.122977 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 194.61.40.105:21593] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:04.613030 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 194.61.40.105:21593] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:05.250345 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 194.61.40.83:63409] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:05.966843 2026] [proxy_fcgi:error] [pid 59700:tid 59703] [client 194.61.40.97:60561] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:06.674098 2026] [proxy_fcgi:error] [pid 43083:tid 43104] [client 194.61.40.82:21595] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:07.288926 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 194.61.40.86:44569] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:07.908758 2026] [proxy_fcgi:error] [pid 64998:tid 65004] [client 194.61.40.79:33537] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:08.207227 2026] [:error] [pid 64998:tid 65005] [client 194.61.40.103:32113] [client 194.61.40.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aeltOIV5EysYcTLjmwhEEgAAAcM"]
[Thu Apr 23 08:52:10.455807 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 194.61.40.74:20833] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:11.018988 2026] [proxy_fcgi:error] [pid 64998:tid 65008] [client 194.61.40.79:52243] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:11.278117 2026] [:error] [pid 64998:tid 65023] [client 194.61.40.98:37813] [client 194.61.40.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.61.40.98, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aeltO4V5EysYcTLjmwhEIQAAAdU"]
[Thu Apr 23 08:52:11.603354 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 194.61.40.98:37813] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:12.172058 2026] [proxy_fcgi:error] [pid 59700:tid 59718] [client 194.61.40.67:27725] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:12.430385 2026] [:error] [pid 64998:tid 65018] [client 194.61.40.68:25449] [client 194.61.40.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/item.php"] [unique_id "aeltPIV5EysYcTLjmwhEJgAAAdA"]
[Thu Apr 23 08:52:13.011733 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 194.61.40.102:44227] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:13.433428 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 194.61.40.102:44227] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:13.902987 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 194.61.40.102:44227] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:14.486987 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 194.61.40.88:59981] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:15.054254 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 194.61.40.90:39859] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:15.628091 2026] [proxy_fcgi:error] [pid 65000:tid 65041] [client 194.61.40.62:64539] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:16.188123 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 194.61.40.87:55363] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:16.748590 2026] [proxy_fcgi:error] [pid 43083:tid 43092] [client 194.61.40.70:20251] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:17.020136 2026] [:error] [pid 59700:tid 59702] [client 194.61.40.73:54973] [client 194.61.40.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aeltQZXyGZJFeAIDWtl7oAAAAUA"]
[Thu Apr 23 08:52:17.622028 2026] [proxy_fcgi:error] [pid 43083:tid 43102] [client 194.61.40.62:29019] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:18.264777 2026] [proxy_fcgi:error] [pid 42973:tid 43056] [client 194.61.40.68:50927] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:18.940355 2026] [proxy_fcgi:error] [pid 59700:tid 59716] [client 194.61.40.103:55137] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:19.511642 2026] [proxy_fcgi:error] [pid 43083:tid 43098] [client 194.61.40.60:29541] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:20.082170 2026] [proxy_fcgi:error] [pid 42971:tid 43008] [client 194.61.40.69:29061] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:20.708519 2026] [proxy_fcgi:error] [pid 64967:tid 64970] [client 194.61.40.97:28975] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:21.276297 2026] [proxy_fcgi:error] [pid 42971:tid 42996] [client 194.61.40.99:48533] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:21.849949 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 194.61.40.95:26701] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:22.113574 2026] [:error] [pid 65000:tid 65057] [client 194.61.40.81:44889] [client 194.61.40.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aeltRr6vRb9j6psK2ZbYqgAAAhg"]
[Thu Apr 23 08:52:22.702099 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 194.61.40.77:58395] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:23.275413 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 194.61.40.61:34075] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:23.541072 2026] [:error] [pid 64967:tid 64977] [client 194.61.40.96:21635] [client 194.61.40.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aeltR4AV4GfOOdX8QzoiWwAAAYg"]
[Thu Apr 23 08:52:24.119851 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 194.61.40.60:21985] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:24.699536 2026] [proxy_fcgi:error] [pid 64967:tid 64984] [client 194.61.40.96:32229] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:25.315048 2026] [proxy_fcgi:error] [pid 42973:tid 43053] [client 194.61.40.92:54911] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:25.584758 2026] [:error] [pid 59700:tid 59713] [client 194.61.40.97:41707] [client 194.61.40.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.61.40.97, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aeltSZXyGZJFeAIDWtl7qAAAAUs"]
[Thu Apr 23 08:52:25.889996 2026] [proxy_fcgi:error] [pid 59700:tid 59713] [client 194.61.40.97:41707] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:26.319088 2026] [:error] [pid 43083:tid 43101] [client 194.61.40.77:35561] [client 194.61.40.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aeltSjC5hrvNXosL83L4vAAAANA"]
[Thu Apr 23 08:52:26.964336 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 194.61.40.84:53043] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:27.556045 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 194.61.40.70:21579] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:28.354634 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 194.61.40.105:59517] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:29.012214 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 194.61.40.61:26599] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:29.650583 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 194.61.40.101:61807] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:30.324175 2026] [proxy_fcgi:error] [pid 42972:tid 43033] [client 194.61.40.81:43147] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:31.088749 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 194.61.40.60:41811] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:31.557825 2026] [proxy_fcgi:error] [pid 43083:tid 43103] [client 194.61.40.60:41811] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:32.147956 2026] [proxy_fcgi:error] [pid 43083:tid 43100] [client 194.61.40.63:44213] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:32.726560 2026] [proxy_fcgi:error] [pid 64967:tid 64982] [client 194.61.40.87:28275] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:33.345864 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 194.61.40.60:56913] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:33.974727 2026] [proxy_fcgi:error] [pid 43083:tid 43099] [client 194.61.40.63:33027] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:34.560763 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 194.61.40.90:48159] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:35.009900 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 194.61.40.90:48159] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:35.596449 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 194.61.40.54:48553] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:36.169655 2026] [proxy_fcgi:error] [pid 43083:tid 43097] [client 194.61.40.102:49591] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:36.786203 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 194.61.40.103:38313] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:36.945638 2026] [:error] [pid 65000:tid 65042] [client 194.61.40.103:38313] [client 194.61.40.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aeltVL6vRb9j6psK2ZbY2AAAAgk"]
[Thu Apr 23 08:52:37.544532 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 194.61.40.96:50445] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:38.123762 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 194.61.40.80:55371] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:38.716081 2026] [proxy_fcgi:error] [pid 25635:tid 25660] [client 194.61.40.72:44495] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:39.025069 2026] [:error] [pid 64998:tid 65012] [client 194.61.40.69:26389] [client 194.61.40.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.61.40.69, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aeltV4V5EysYcTLjmwhESAAAAco"]
[Thu Apr 23 08:52:39.338965 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 194.61.40.69:26389] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:39.923453 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 194.61.40.76:42327] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:40.539355 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 194.61.40.60:22249] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:41.093357 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 194.61.40.65:40567] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:41.424268 2026] [:error] [pid 42971:tid 43006] [client 194.61.40.86:57121] [client 194.61.40.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aeltWTEP2_5RswrH8bHGYAAAABQ"]
[Thu Apr 23 08:52:42.002934 2026] [proxy_fcgi:error] [pid 42971:tid 42999] [client 194.61.40.57:56447] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:42.263854 2026] [:error] [pid 42973:tid 43043] [client 194.61.40.76:46225] [client 194.61.40.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/infi.php"] [unique_id "aeltWm6I0QqmmmLTHE3mZAAAAIA"]
[Thu Apr 23 08:52:42.827826 2026] [proxy_fcgi:error] [pid 42973:tid 43058] [client 194.61.40.57:40725] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:43.283272 2026] [proxy_fcgi:error] [pid 42973:tid 43062] [client 194.61.40.57:40725] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:43.622199 2026] [:error] [pid 65000:tid 65052] [client 194.61.40.91:50789] [client 194.61.40.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aeltW76vRb9j6psK2ZbY2wAAAhM"]
[Thu Apr 23 08:52:44.210541 2026] [proxy_fcgi:error] [pid 42973:tid 43055] [client 194.61.40.76:42813] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:44.647519 2026] [proxy_fcgi:error] [pid 42973:tid 43067] [client 194.61.40.76:42813] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:45.305985 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 194.61.40.91:29109] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:45.597252 2026] [:error] [pid 42971:tid 43010] [client 194.61.40.54:38805] [client 194.61.40.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aeltXTEP2_5RswrH8bHGZAAAABg"]
[Thu Apr 23 08:52:45.897921 2026] [:error] [pid 42971:tid 43008] [client 194.61.40.61:32453] [client 194.61.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aeltXTEP2_5RswrH8bHGZQAAABY"]
[Thu Apr 23 08:52:46.507691 2026] [proxy_fcgi:error] [pid 42972:tid 43022] [client 194.61.40.90:27039] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:47.062349 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 194.61.40.73:45097] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:47.718423 2026] [proxy_fcgi:error] [pid 43083:tid 43089] [client 194.61.40.92:36393] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:48.468049 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 194.61.40.74:53021] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:48.904547 2026] [proxy_fcgi:error] [pid 59700:tid 59720] [client 194.61.40.74:53021] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:49.163344 2026] [:error] [pid 59700:tid 59707] [client 194.61.40.62:29741] [client 194.61.40.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aeltYZXyGZJFeAIDWtl7wgAAAUU"]
[Thu Apr 23 08:52:49.779107 2026] [proxy_fcgi:error] [pid 64998:tid 65008] [client 194.61.40.95:27133] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:50.053388 2026] [:error] [pid 64998:tid 65019] [client 194.61.40.105:42509] [client 194.61.40.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aeltYoV5EysYcTLjmwhEVgAAAdE"]
[Thu Apr 23 08:52:50.611662 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 194.61.40.73:27211] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:51.551829 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 194.61.40.89:56325] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:52.000687 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 194.61.40.89:56325] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:52.327913 2026] [:error] [pid 64998:tid 65017] [client 194.61.40.60:49151] [client 194.61.40.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/edit.php"] [unique_id "aeltZIV5EysYcTLjmwhEXAAAAc8"]
[Thu Apr 23 08:52:52.964514 2026] [proxy_fcgi:error] [pid 64998:tid 65007] [client 194.61.40.57:63987] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:53.529684 2026] [proxy_fcgi:error] [pid 42972:tid 43024] [client 194.61.40.64:23085] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:54.078537 2026] [proxy_fcgi:error] [pid 42973:tid 43054] [client 194.61.40.60:45235] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:54.375497 2026] [:error] [pid 65000:tid 65040] [client 194.61.40.103:44255] [client 194.61.40.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aeltZr6vRb9j6psK2ZbY4QAAAgc"]
[Thu Apr 23 08:52:54.982063 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 194.61.40.87:28353] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:55.575140 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 194.61.40.99:36489] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:55.846152 2026] [:error] [pid 64998:tid 65021] [client 194.61.40.102:60871] [client 194.61.40.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/click.php"] [unique_id "aeltZ4V5EysYcTLjmwhEYQAAAdM"]
[Thu Apr 23 08:52:56.483361 2026] [proxy_fcgi:error] [pid 59700:tid 59704] [client 194.61.40.76:60489] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:57.083872 2026] [proxy_fcgi:error] [pid 43083:tid 43098] [client 194.61.40.78:30835] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:57.663434 2026] [proxy_fcgi:error] [pid 43083:tid 43105] [client 194.61.40.63:52669] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:57.926572 2026] [:error] [pid 42971:tid 42994] [client 194.61.40.73:22123] [client 194.61.40.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aeltaTEP2_5RswrH8bHGagAAAAg"]
[Thu Apr 23 08:52:58.528312 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 194.61.40.91:56953] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:58.949665 2026] [proxy_fcgi:error] [pid 42971:tid 43002] [client 194.61.40.91:56953] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:59.545640 2026] [proxy_fcgi:error] [pid 64967:tid 64975] [client 194.61.40.66:27085] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:52:59.969566 2026] [proxy_fcgi:error] [pid 64967:tid 64993] [client 194.61.40.66:27085] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:00.670997 2026] [proxy_fcgi:error] [pid 59700:tid 59716] [client 194.61.40.57:41551] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:01.165795 2026] [proxy_fcgi:error] [pid 59700:tid 59707] [client 194.61.40.57:41551] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:01.766045 2026] [proxy_fcgi:error] [pid 43083:tid 43091] [client 194.61.40.101:28545] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:02.064765 2026] [:error] [pid 25635:tid 25663] [client 194.61.40.66:34215] [client 194.61.40.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aeltbsRxv6UsgRGKB3LulgAAARg"]
[Thu Apr 23 08:53:02.485837 2026] [:error] [pid 25635:tid 25662] [client 194.61.40.88:26537] [client 194.61.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aeltbsRxv6UsgRGKB3LulwAAARc"]
[Thu Apr 23 08:53:02.756883 2026] [:error] [pid 25635:tid 25653] [client 194.61.40.103:64183] [client 194.61.40.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aeltbsRxv6UsgRGKB3LumAAAAQ4"]
[Thu Apr 23 08:53:03.107821 2026] [:error] [pid 64998:tid 65026] [client 194.61.40.60:56719] [client 194.61.40.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aeltb4V5EysYcTLjmwhEbgAAAdg"]
[Thu Apr 23 08:53:03.764250 2026] [proxy_fcgi:error] [pid 43083:tid 43093] [client 194.61.40.103:62715] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:04.176467 2026] [:error] [pid 64998:tid 65021] [client 194.61.40.95:25629] [client 194.61.40.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aeltcIV5EysYcTLjmwhEcgAAAdM"]
[Thu Apr 23 08:53:04.459026 2026] [:error] [pid 59700:tid 59726] [client 194.61.40.85:36563] [client 194.61.40.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aeltcJXyGZJFeAIDWtl71QAAAVg"]
[Thu Apr 23 08:53:05.080847 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 194.61.40.68:22443] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:05.811678 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 194.61.40.77:61137] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:06.112124 2026] [:error] [pid 65000:tid 65048] [client 194.61.40.60:46835] [client 194.61.40.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeltcr6vRb9j6psK2ZbY5QAAAg8"]
[Thu Apr 23 08:53:06.548903 2026] [:error] [pid 43083:tid 43092] [client 194.61.40.100:42519] [client 194.61.40.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aeltcjC5hrvNXosL83L43AAAAMc"]
[Thu Apr 23 08:53:06.958030 2026] [:error] [pid 65000:tid 65049] [client 194.61.40.85:42849] [client 194.61.40.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aeltcr6vRb9j6psK2ZbY5gAAAhA"]
[Thu Apr 23 08:53:07.216136 2026] [:error] [pid 65000:tid 65037] [client 194.61.40.97:49335] [client 194.61.40.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aeltc76vRb9j6psK2ZbY5wAAAgQ"]
[Thu Apr 23 08:53:07.879263 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 194.61.40.70:28163] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:08.154147 2026] [:error] [pid 64998:tid 65024] [client 194.61.40.84:49741] [client 194.61.40.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aeltdIV5EysYcTLjmwhEewAAAdY"]
[Thu Apr 23 08:53:08.919302 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 194.61.40.100:22589] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:09.525326 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 194.61.40.75:33575] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:09.783322 2026] [:error] [pid 59700:tid 59703] [client 194.61.40.74:60993] [client 194.61.40.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aeltdZXyGZJFeAIDWtl71wAAAUE"]
[Thu Apr 23 08:53:10.421650 2026] [proxy_fcgi:error] [pid 59700:tid 59713] [client 194.61.40.104:21895] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:11.095863 2026] [proxy_fcgi:error] [pid 43083:tid 43094] [client 194.61.40.101:37411] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:11.570177 2026] [proxy_fcgi:error] [pid 43083:tid 43087] [client 194.61.40.101:37411] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:12.003729 2026] [proxy_fcgi:error] [pid 43083:tid 43098] [client 194.61.40.101:37411] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:12.345148 2026] [:error] [pid 42972:tid 43019] [client 194.61.40.73:37239] [client 194.61.40.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aelteMOAb-3sOknsk4czUwAAAEM"]
[Thu Apr 23 08:53:12.917646 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 194.61.40.59:56789] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:13.370721 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 194.61.40.59:56789] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:14.013968 2026] [proxy_fcgi:error] [pid 43083:tid 43108] [client 194.61.40.100:65073] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:14.662488 2026] [proxy_fcgi:error] [pid 43083:tid 43095] [client 194.61.40.104:40835] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:15.240135 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 194.61.40.60:25283] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:15.860440 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 194.61.40.87:53729] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:16.418997 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 194.61.40.102:41401] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:16.675927 2026] [:error] [pid 64998:tid 65016] [client 194.61.40.72:56167] [client 194.61.40.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aeltfIV5EysYcTLjmwhEjgAAAc4"]
[Thu Apr 23 08:53:17.228758 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 194.61.40.94:22911] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:17.653822 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 194.61.40.94:22911] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:18.212282 2026] [proxy_fcgi:error] [pid 64967:tid 64985] [client 194.61.40.55:63711] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:18.476292 2026] [:error] [pid 42971:tid 42993] [client 194.61.40.66:39729] [client 194.61.40.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aeltfjEP2_5RswrH8bHGbwAAAAc"]
[Thu Apr 23 08:53:18.750265 2026] [:error] [pid 42971:tid 42988] [client 194.61.40.78:55281] [client 194.61.40.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aeltfjEP2_5RswrH8bHGcAAAAAI"]
[Thu Apr 23 08:53:19.306361 2026] [proxy_fcgi:error] [pid 42972:tid 43031] [client 194.61.40.81:51023] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:19.718650 2026] [proxy_fcgi:error] [pid 42972:tid 43026] [client 194.61.40.81:51023] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:20.311078 2026] [proxy_fcgi:error] [pid 42973:tid 43060] [client 194.61.40.84:63145] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:20.738840 2026] [proxy_fcgi:error] [pid 42973:tid 43058] [client 194.61.40.84:63145] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:20.998594 2026] [:error] [pid 59700:tid 59704] [client 194.61.40.58:46175] [client 194.61.40.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aeltgJXyGZJFeAIDWtl73QAAAUI"]
[Thu Apr 23 08:53:21.664268 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 194.61.40.72:35719] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:22.223863 2026] [proxy_fcgi:error] [pid 59700:tid 59716] [client 194.61.40.106:51387] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:22.821796 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 194.61.40.108:34183] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:23.788692 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 194.61.40.56:30631] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:53:23.927012 2026] [proxy_fcgi:error] [pid 64998:tid 65008] [client 194.61.40.56:30631] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:53:24.112133 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 194.61.40.56:30631] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:53:24.623143 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 194.61.40.56:30631] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:25.306091 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 194.61.40.86:61113] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:25.892686 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 194.61.40.57:38493] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:26.087139 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 194.61.40.57:38493] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:26.215596 2026] [:error] [pid 65000:tid 65053] [client 194.61.40.57:38493] [client 194.61.40.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aelthr6vRb9j6psK2ZbY-AAAAhQ"]
[Thu Apr 23 08:53:26.475119 2026] [:error] [pid 64998:tid 65018] [client 194.61.40.54:58769] [client 194.61.40.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aelthoV5EysYcTLjmwhEoAAAAdA"]
[Thu Apr 23 08:53:27.892926 2026] [:error] [pid 59700:tid 59705] [client 194.61.40.87:65333] [client 194.61.40.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aelth5XyGZJFeAIDWtl76AAAAUM"]
[Thu Apr 23 08:53:28.192065 2026] [:error] [pid 59700:tid 59712] [client 194.61.40.74:39701] [client 194.61.40.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aeltiJXyGZJFeAIDWtl76QAAAUo"]
[Thu Apr 23 08:53:28.452869 2026] [:error] [pid 65000:tid 65043] [client 194.61.40.87:36299] [client 194.61.40.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aeltiL6vRb9j6psK2ZbY-gAAAgo"]
[Thu Apr 23 08:53:28.714939 2026] [:error] [pid 65000:tid 65041] [client 194.61.40.63:33875] [client 194.61.40.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aeltiL6vRb9j6psK2ZbY-wAAAgg"]
[Thu Apr 23 08:53:29.360184 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 194.61.40.89:48523] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:29.491022 2026] [:error] [pid 65000:tid 65051] [client 194.61.40.89:48523] [client 194.61.40.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aeltib6vRb9j6psK2ZbY_wAAAhI"]
[Thu Apr 23 08:53:29.825762 2026] [:error] [pid 64998:tid 65004] [client 194.61.40.62:29725] [client 194.61.40.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aeltiYV5EysYcTLjmwhEogAAAcI"]
[Thu Apr 23 08:53:30.106310 2026] [:error] [pid 59700:tid 59704] [client 194.61.40.99:58537] [client 194.61.40.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aeltipXyGZJFeAIDWtl76gAAAUI"]
[Thu Apr 23 08:53:30.371120 2026] [:error] [pid 59700:tid 59718] [client 194.61.40.104:40305] [client 194.61.40.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aeltipXyGZJFeAIDWtl76wAAAVA"]
[Thu Apr 23 08:53:31.165899 2026] [proxy_fcgi:error] [pid 64967:tid 64984] [client 194.61.40.63:51293] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:31.715923 2026] [proxy_fcgi:error] [pid 59700:tid 59720] [client 194.61.40.96:59375] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:31.876708 2026] [:error] [pid 59700:tid 59725] [client 194.61.40.96:59375] [client 194.61.40.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aelti5XyGZJFeAIDWtl78AAAAVc"]
[Thu Apr 23 08:53:32.492868 2026] [proxy_fcgi:error] [pid 43083:tid 43097] [client 194.61.40.61:53943] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:32.621130 2026] [:error] [pid 43083:tid 43107] [client 194.61.40.61:53943] [client 194.61.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aeltjDC5hrvNXosL83L47AAAANY"]
[Thu Apr 23 08:53:33.220232 2026] [proxy_fcgi:error] [pid 43083:tid 43094] [client 194.61.40.108:22979] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:33.848163 2026] [proxy_fcgi:error] [pid 59700:tid 59713] [client 194.61.40.64:60841] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:34.118763 2026] [:error] [pid 43083:tid 43106] [client 194.61.40.86:23381] [client 194.61.40.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aeltjjC5hrvNXosL83L47gAAANU"]
[Thu Apr 23 08:53:34.734712 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 194.61.40.59:64349] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:35.315865 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 194.61.40.56:24731] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:35.615104 2026] [:error] [pid 42971:tid 42997] [client 194.61.40.100:35647] [client 194.61.40.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/about.php"] [unique_id "aeltjzEP2_5RswrH8bHGcwAAAAs"]
[Thu Apr 23 08:53:36.213543 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 194.61.40.69:28575] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:36.892761 2026] [proxy_fcgi:error] [pid 42973:tid 43055] [client 194.61.40.58:49013] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:38.574176 2026] [proxy_fcgi:error] [pid 42971:tid 43003] [client 194.61.40.95:46913] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:38.925181 2026] [:error] [pid 42972:tid 43021] [client 194.61.40.64:20049] [client 194.61.40.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aeltksOAb-3sOknsk4czXQAAAEU"]
[Thu Apr 23 08:53:39.567914 2026] [proxy_fcgi:error] [pid 42971:tid 42992] [client 194.61.40.104:32457] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:40.146965 2026] [proxy_fcgi:error] [pid 43083:tid 43108] [client 194.61.40.96:33755] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:40.719629 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 194.61.40.67:56121] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:41.303585 2026] [proxy_fcgi:error] [pid 42973:tid 43052] [client 194.61.40.88:60781] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:41.565499 2026] [:error] [pid 65000:tid 65051] [client 194.61.40.66:44333] [client 194.61.40.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aeltlb6vRb9j6psK2ZbZDQAAAhI"]
[Thu Apr 23 08:53:42.171834 2026] [proxy_fcgi:error] [pid 42973:tid 43053] [client 194.61.40.74:39117] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:42.443558 2026] [:error] [pid 43083:tid 43101] [client 194.61.40.68:62131] [client 194.61.40.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aeltljC5hrvNXosL83L49QAAANA"]
[Thu Apr 23 08:53:43.095746 2026] [proxy_fcgi:error] [pid 42973:tid 43051] [client 194.61.40.103:22671] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:43.675444 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 194.61.40.69:37899] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:44.261433 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 194.61.40.99:22535] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:44.857953 2026] [proxy_fcgi:error] [pid 25635:tid 25658] [client 194.61.40.62:45687] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:45.449956 2026] [proxy_fcgi:error] [pid 64967:tid 64993] [client 194.61.40.70:63181] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:46.085766 2026] [proxy_fcgi:error] [pid 43083:tid 43105] [client 194.61.40.67:25543] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:46.730648 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 194.61.40.77:56701] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:47.402828 2026] [proxy_fcgi:error] [pid 42973:tid 43045] [client 194.61.40.91:58297] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:48.042887 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 194.61.40.76:46515] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:48.651742 2026] [proxy_fcgi:error] [pid 43083:tid 43100] [client 194.61.40.73:30717] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:49.321594 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 194.61.40.105:23313] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:49.888741 2026] [proxy_fcgi:error] [pid 59700:tid 59724] [client 194.61.40.61:63755] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:50.407271 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 194.61.40.61:63755] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:50.978894 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 194.61.40.108:62093] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:51.604648 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 194.61.40.56:57131] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:52.063850 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 194.61.40.56:57131] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:52.364213 2026] [:error] [pid 43083:tid 43100] [client 194.61.40.89:62463] [client 194.61.40.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aeltoDC5hrvNXosL83L5DAAAAM8"]
[Thu Apr 23 08:53:52.635656 2026] [:error] [pid 65000:tid 65051] [client 194.61.40.57:57597] [client 194.61.40.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aeltoL6vRb9j6psK2ZbZGgAAAhI"]
[Thu Apr 23 08:53:53.269243 2026] [proxy_fcgi:error] [pid 25635:tid 25647] [client 194.61.40.108:32095] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:53.531795 2026] [:error] [pid 59700:tid 59716] [client 194.61.40.102:29293] [client 194.61.40.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aeltoZXyGZJFeAIDWtl8BwAAAU4"]
[Thu Apr 23 08:53:54.108388 2026] [proxy_fcgi:error] [pid 59700:tid 59718] [client 194.61.40.101:48707] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:54.657547 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 194.61.40.108:46447] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:54.935121 2026] [:error] [pid 59700:tid 59725] [client 194.61.40.87:38073] [client 194.61.40.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aeltopXyGZJFeAIDWtl8CgAAAVc"]
[Thu Apr 23 08:53:55.201215 2026] [:error] [pid 65000:tid 65052] [client 194.61.40.57:63041] [client 194.61.40.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aelto76vRb9j6psK2ZbZHgAAAhM"]
[Thu Apr 23 08:53:55.769169 2026] [proxy_fcgi:error] [pid 43083:tid 43105] [client 194.61.40.108:23585] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:56.334693 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 194.61.40.86:62929] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:56.766083 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 194.61.40.86:62929] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:57.401133 2026] [proxy_fcgi:error] [pid 64998:tid 65007] [client 194.61.40.56:56649] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:57.713352 2026] [:error] [pid 65000:tid 65044] [client 194.61.40.72:45493] [client 194.61.40.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeltpb6vRb9j6psK2ZbZIAAAAgs"]
[Thu Apr 23 08:53:57.988665 2026] [:error] [pid 64998:tid 65002] [client 194.61.40.84:28035] [client 194.61.40.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "aeltpYV5EysYcTLjmwhEsAAAAcA"]
[Thu Apr 23 08:53:58.587439 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 194.61.40.67:43371] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:59.148138 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 194.61.40.68:53441] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:53:59.715183 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 194.61.40.86:44469] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:00.363614 2026] [proxy_fcgi:error] [pid 25635:tid 25655] [client 194.61.40.63:60277] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:01.137762 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 194.61.40.97:48187] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:01.402788 2026] [:error] [pid 25635:tid 25640] [client 194.61.40.82:37995] [client 194.61.40.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aeltqcRxv6UsgRGKB3LuogAAAQE"]
[Thu Apr 23 08:54:02.013100 2026] [proxy_fcgi:error] [pid 42972:tid 43032] [client 194.61.40.105:20605] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:02.317145 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 194.61.40.83:32887] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:54:02.770630 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 194.61.40.83:32887] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:03.067752 2026] [:error] [pid 43083:tid 43089] [client 194.61.40.61:47047] [client 194.61.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/function.php"] [unique_id "aeltqzC5hrvNXosL83L5GgAAAMQ"]
[Thu Apr 23 08:54:03.336929 2026] [:error] [pid 42971:tid 42998] [client 194.61.40.98:25411] [client 194.61.40.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/plugins.php"] [unique_id "aeltqzEP2_5RswrH8bHGfgAAAAw"]
[Thu Apr 23 08:54:04.011268 2026] [proxy_fcgi:error] [pid 42972:tid 43037] [client 194.61.40.102:55033] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:04.632966 2026] [proxy_fcgi:error] [pid 43083:tid 43086] [client 194.61.40.59:35159] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:04.924622 2026] [:error] [pid 43083:tid 43102] [client 194.61.40.98:44477] [client 194.61.40.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aeltrDC5hrvNXosL83L5HwAAANE"]
[Thu Apr 23 08:54:05.190361 2026] [:error] [pid 42971:tid 42996] [client 194.61.40.60:43865] [client 194.61.40.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aeltrTEP2_5RswrH8bHGgAAAAAo"]
[Thu Apr 23 08:54:05.824790 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 194.61.40.90:24537] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:06.323330 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 194.61.40.90:24537] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:06.900208 2026] [proxy_fcgi:error] [pid 43083:tid 43108] [client 194.61.40.79:43871] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:07.575287 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 194.61.40.59:30025] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:08.212928 2026] [proxy_fcgi:error] [pid 42971:tid 43004] [client 194.61.40.96:59497] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:08.824710 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 194.61.40.76:31185] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:09.426075 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 194.61.40.72:59869] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:09.703179 2026] [:error] [pid 65000:tid 65042] [client 194.61.40.81:21973] [client 194.61.40.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aeltsb6vRb9j6psK2ZbZMgAAAgk"]
[Thu Apr 23 08:54:10.148751 2026] [:error] [pid 25635:tid 25639] [client 194.61.40.58:52735] [client 194.61.40.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aeltssRxv6UsgRGKB3LupgAAAQA"]
[Thu Apr 23 08:54:10.768555 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 194.61.40.74:47625] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:11.380953 2026] [proxy_fcgi:error] [pid 42971:tid 43000] [client 194.61.40.74:55861] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:12.145732 2026] [proxy_fcgi:error] [pid 42972:tid 43039] [client 194.61.40.60:51531] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:12.793501 2026] [proxy_fcgi:error] [pid 43083:tid 43107] [client 194.61.40.65:25371] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:13.088006 2026] [:error] [pid 43083:tid 43098] [client 194.61.40.106:20167] [client 194.61.40.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/index.php"] [unique_id "aelttTC5hrvNXosL83L5LwAAAM0"]
[Thu Apr 23 08:54:13.366900 2026] [:error] [pid 42972:tid 43020] [client 194.61.40.80:59109] [client 194.61.40.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aelttcOAb-3sOknsk4czdAAAAEQ"]
[Thu Apr 23 08:54:13.689578 2026] [:error] [pid 42972:tid 43018] [client 194.61.40.88:49645] [client 194.61.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aelttcOAb-3sOknsk4czdQAAAEI"]
[Thu Apr 23 08:54:14.551508 2026] [proxy_fcgi:error] [pid 42972:tid 43033] [client 194.61.40.60:28831] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:15.179626 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 194.61.40.60:32033] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:15.826880 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 194.61.40.95:52385] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:16.493180 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 194.61.40.61:30929] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:17.127654 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 194.61.40.68:29265] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:17.421369 2026] [:error] [pid 64998:tid 65025] [client 194.61.40.83:39517] [client 194.61.40.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aeltuYV5EysYcTLjmwhEwwAAAdc"]
[Thu Apr 23 08:54:18.045602 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 194.61.40.77:47201] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:18.306491 2026] [:error] [pid 64998:tid 65007] [client 194.61.40.63:38423] [client 194.61.40.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aeltuoV5EysYcTLjmwhEyAAAAcU"]
[Thu Apr 23 08:54:18.920661 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 194.61.40.62:37585] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:19.592734 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 194.61.40.98:46413] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:20.030860 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 194.61.40.98:46413] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:20.508994 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 194.61.40.98:46413] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:21.293490 2026] [proxy_fcgi:error] [pid 43083:tid 43097] [client 194.61.40.106:20919] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:21.895225 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 194.61.40.61:24287] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:22.227442 2026] [proxy_fcgi:error] [pid 42972:tid 43037] [client 194.61.40.101:25879] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:22.355488 2026] [:error] [pid 42972:tid 43024] [client 194.61.40.101:25879] [client 194.61.40.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.61.40.101, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/js/wp-login.php"] [unique_id "aeltvsOAb-3sOknsk4czfQAAAEg"]
[Thu Apr 23 08:54:22.687949 2026] [proxy_fcgi:error] [pid 42972:tid 43024] [client 194.61.40.101:25879] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:23.288826 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 194.61.40.99:24097] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:23.898496 2026] [proxy_fcgi:error] [pid 64998:tid 65026] [client 194.61.40.64:22027] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:24.455757 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 194.61.40.87:34753] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:25.028996 2026] [proxy_fcgi:error] [pid 25635:tid 25657] [client 194.61.40.90:57117] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:25.651162 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 194.61.40.87:62887] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:26.007326 2026] [:error] [pid 59700:tid 59722] [client 194.61.40.100:41265] [client 194.61.40.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.61.40.100, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aeltwpXyGZJFeAIDWtl8HwAAAVQ"]
[Thu Apr 23 08:54:26.340370 2026] [proxy_fcgi:error] [pid 59700:tid 59722] [client 194.61.40.100:41265] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:27.124269 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 194.61.40.73:64647] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:27.722521 2026] [proxy_fcgi:error] [pid 43083:tid 43087] [client 194.61.40.65:48471] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:28.628731 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 194.61.40.103:28205] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:29.347990 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 194.61.40.97:54497] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:29.967327 2026] [proxy_fcgi:error] [pid 59700:tid 59720] [client 194.61.40.82:54725] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:30.722452 2026] [proxy_fcgi:error] [pid 59700:tid 59713] [client 194.61.40.57:62159] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:31.401567 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 194.61.40.108:51507] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:31.955801 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 194.61.40.80:64819] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:32.409471 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 194.61.40.80:64819] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:32.984164 2026] [proxy_fcgi:error] [pid 43083:tid 43102] [client 194.61.40.56:42135] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:33.245733 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 194.61.40.98:22325] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:54:33.733932 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 194.61.40.98:22325] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:34.336586 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 194.61.40.105:64527] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:34.975999 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 194.61.40.91:45771] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:35.654525 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 194.61.40.102:38717] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:36.278203 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 194.61.40.79:26801] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:37.078597 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 194.61.40.78:25563] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:37.669936 2026] [proxy_fcgi:error] [pid 43083:tid 43093] [client 194.61.40.76:23473] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:38.324743 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 194.61.40.82:24155] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:38.931704 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 194.61.40.78:58501] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:39.553923 2026] [proxy_fcgi:error] [pid 59700:tid 59710] [client 194.61.40.94:33335] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:41.665470 2026] [proxy_fcgi:error] [pid 59700:tid 59716] [client 194.61.40.94:33335] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:42.264542 2026] [proxy_fcgi:error] [pid 64967:tid 64982] [client 194.61.40.54:35197] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:42.867850 2026] [proxy_fcgi:error] [pid 42971:tid 42986] [client 194.61.40.77:51735] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:43.584769 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 194.61.40.75:41777] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:43.853690 2026] [:error] [pid 43083:tid 43099] [client 194.61.40.74:36695] [client 194.61.40.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aelt0zC5hrvNXosL83L5VAAAAM4"]
[Thu Apr 23 08:54:44.535498 2026] [proxy_fcgi:error] [pid 64967:tid 64976] [client 194.61.40.89:51035] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:45.109902 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 194.61.40.87:34653] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:45.787690 2026] [proxy_fcgi:error] [pid 42973:tid 43044] [client 194.61.40.89:53055] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:46.113962 2026] [:error] [pid 42972:tid 43039] [client 194.61.40.65:45555] [client 194.61.40.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aelt1sOAb-3sOknsk4czggAAAFc"]
[Thu Apr 23 08:54:46.763749 2026] [proxy_fcgi:error] [pid 42971:tid 43009] [client 194.61.40.73:33317] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:47.376611 2026] [proxy_fcgi:error] [pid 59700:tid 59706] [client 194.61.40.57:42965] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:48.819159 2026] [:error] [pid 64967:tid 64990] [client 194.61.40.97:65471] [client 194.61.40.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aelt2IAV4GfOOdX8QzoigQAAAZU"]
[Thu Apr 23 08:54:49.419699 2026] [proxy_fcgi:error] [pid 64967:tid 64986] [client 194.61.40.78:41621] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:50.076901 2026] [proxy_fcgi:error] [pid 42972:tid 43017] [client 194.61.40.92:57399] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:51.744853 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 194.61.40.82:43355] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:52.429179 2026] [proxy_fcgi:error] [pid 42972:tid 43025] [client 194.61.40.67:57477] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:53.072012 2026] [proxy_fcgi:error] [pid 25635:tid 25643] [client 194.61.40.76:50347] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:53.721937 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 194.61.40.87:22663] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:54.468642 2026] [proxy_fcgi:error] [pid 42972:tid 43024] [client 194.61.40.82:45451] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:55.108638 2026] [proxy_fcgi:error] [pid 42972:tid 43035] [client 194.61.40.76:57859] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:55.923989 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 194.61.40.98:61995] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:56.346881 2026] [:error] [pid 42972:tid 43040] [client 194.61.40.103:54487] [client 194.61.40.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aelt4MOAb-3sOknsk4czkwAAAFg"]
[Thu Apr 23 08:54:57.147380 2026] [proxy_fcgi:error] [pid 42972:tid 43030] [client 194.61.40.74:50399] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:57.786066 2026] [proxy_fcgi:error] [pid 43083:tid 43086] [client 194.61.40.99:41199] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:58.177008 2026] [:error] [pid 25635:tid 25663] [client 194.61.40.82:24179] [client 194.61.40.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aelt4sRxv6UsgRGKB3LuvAAAARg"]
[Thu Apr 23 08:54:58.793119 2026] [proxy_fcgi:error] [pid 25635:tid 25648] [client 194.61.40.99:55261] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:54:59.116357 2026] [:error] [pid 65000:tid 65048] [client 194.61.40.81:47183] [client 194.61.40.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aelt476vRb9j6psK2ZbZZgAAAg8"]
[Thu Apr 23 08:54:59.741641 2026] [proxy_fcgi:error] [pid 42971:tid 42992] [client 194.61.40.77:60579] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:00.490066 2026] [proxy_fcgi:error] [pid 43083:tid 43106] [client 194.61.40.66:29213] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:01.420276 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 194.61.40.63:34753] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:02.082408 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 194.61.40.81:63123] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:02.442612 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 194.61.40.87:22785] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:55:03.636715 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 194.61.40.87:22785] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:55:04.073387 2026] [:error] [pid 64998:tid 65021] [client 194.61.40.87:22785] [client 194.61.40.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aelt6IV5EysYcTLjmwhE_QAAAdM"]
[Thu Apr 23 08:55:04.517500 2026] [:error] [pid 25635:tid 25644] [client 194.61.40.90:21143] [client 194.61.40.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aelt6MRxv6UsgRGKB3LuxAAAAQU"]
[Thu Apr 23 08:55:05.281647 2026] [proxy_fcgi:error] [pid 43083:tid 43090] [client 194.61.40.72:46499] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:05.803098 2026] [proxy_fcgi:error] [pid 43083:tid 43108] [client 194.61.40.72:46499] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:06.480613 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 194.61.40.63:21353] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:08.609614 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 194.61.40.61:46901] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:09.440135 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 194.61.40.66:44595] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:10.187485 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 194.61.40.105:34801] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:11.036388 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 194.61.40.80:50851] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:11.169064 2026] [:error] [pid 42972:tid 43023] [client 194.61.40.80:50851] [client 194.61.40.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aelt78OAb-3sOknsk4cznAAAAEc"]
[Thu Apr 23 08:55:11.887275 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 194.61.40.72:55689] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:12.143645 2026] [:error] [pid 64998:tid 65014] [client 194.61.40.70:30323] [client 194.61.40.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tiny.php"] [unique_id "aelt8IV5EysYcTLjmwhFDAAAAcw"]
[Thu Apr 23 08:55:12.887813 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 194.61.40.82:48533] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:13.510219 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 194.61.40.105:52869] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:14.150603 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 194.61.40.68:26763] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:14.455665 2026] [:error] [pid 42971:tid 43000] [client 194.61.40.108:51243] [client 194.61.40.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aelt8jEP2_5RswrH8bHGpAAAAA4"]
[Thu Apr 23 08:55:15.099520 2026] [proxy_fcgi:error] [pid 64967:tid 64970] [client 194.61.40.97:34349] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:15.715518 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 194.61.40.106:48615] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:16.311316 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 194.61.40.81:54001] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:16.918546 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 194.61.40.64:44979] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:17.513474 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 194.61.40.55:63321] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:18.092042 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 194.61.40.86:44233] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:18.711156 2026] [proxy_fcgi:error] [pid 42972:tid 43016] [client 194.61.40.108:50877] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:19.047018 2026] [:error] [pid 25635:tid 25651] [client 194.61.40.55:27693] [client 194.61.40.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aelt98Rxv6UsgRGKB3LuzgAAAQw"]
[Thu Apr 23 08:55:19.314427 2026] [proxy_fcgi:error] [pid 43083:tid 43088] [client 194.61.40.83:26039] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:55:19.752914 2026] [proxy_fcgi:error] [pid 43083:tid 43100] [client 194.61.40.83:26039] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:20.506712 2026] [proxy_fcgi:error] [pid 42972:tid 43030] [client 194.61.40.101:63651] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:20.802723 2026] [:error] [pid 59700:tid 59720] [client 194.61.40.100:35449] [client 194.61.40.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aelt-JXyGZJFeAIDWtl8OwAAAVI"]
[Thu Apr 23 08:55:21.484663 2026] [proxy_fcgi:error] [pid 42972:tid 43038] [client 194.61.40.103:62491] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:22.070212 2026] [proxy_fcgi:error] [pid 64967:tid 64985] [client 194.61.40.75:23065] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:22.720839 2026] [proxy_fcgi:error] [pid 59700:tid 59713] [client 194.61.40.65:39679] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:23.377610 2026] [proxy_fcgi:error] [pid 42971:tid 42989] [client 194.61.40.67:28431] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:23.812175 2026] [proxy_fcgi:error] [pid 42971:tid 43010] [client 194.61.40.67:28431] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:24.089129 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 194.61.40.64:54503] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:55:24.561204 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 194.61.40.64:54503] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:24.857249 2026] [:error] [pid 25635:tid 25650] [client 194.61.40.57:53939] [client 194.61.40.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.61.40.57, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aelt_MRxv6UsgRGKB3Lu0AAAAQs"]
[Thu Apr 23 08:55:25.170838 2026] [proxy_fcgi:error] [pid 25635:tid 25650] [client 194.61.40.57:53939] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:25.806424 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 194.61.40.91:42841] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:26.509068 2026] [proxy_fcgi:error] [pid 59700:tid 59704] [client 194.61.40.94:65337] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:27.145170 2026] [proxy_fcgi:error] [pid 64998:tid 65008] [client 194.61.40.84:24787] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:27.841494 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 194.61.40.57:30487] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:28.109382 2026] [:error] [pid 64998:tid 65017] [client 194.61.40.75:26057] [client 194.61.40.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aeluAIV5EysYcTLjmwhFNwAAAc8"]
[Thu Apr 23 08:55:28.690974 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 194.61.40.104:29623] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:28.990750 2026] [:error] [pid 65000:tid 65043] [client 194.61.40.83:64531] [client 194.61.40.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aeluAL6vRb9j6psK2ZbZnAAAAgo"]
[Thu Apr 23 08:55:29.585383 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 194.61.40.101:46085] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:30.184441 2026] [proxy_fcgi:error] [pid 42973:tid 43057] [client 194.61.40.75:49069] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:30.672468 2026] [proxy_fcgi:error] [pid 42973:tid 43059] [client 194.61.40.75:49069] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:31.342505 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 194.61.40.63:44557] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:31.614985 2026] [:error] [pid 64998:tid 65025] [client 194.61.40.106:30909] [client 194.61.40.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aeluA4V5EysYcTLjmwhFSgAAAdc"]
[Thu Apr 23 08:55:32.266196 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 194.61.40.105:33915] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:32.752159 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 194.61.40.105:33915] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:33.378417 2026] [proxy_fcgi:error] [pid 64998:tid 65007] [client 194.61.40.82:48091] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:33.639298 2026] [:error] [pid 43083:tid 43087] [client 194.61.40.76:30413] [client 194.61.40.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aeluBTC5hrvNXosL83L5cwAAAMI"]
[Thu Apr 23 08:55:33.974032 2026] [:error] [pid 65000:tid 65037] [client 194.61.40.91:60501] [client 194.61.40.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aeluBb6vRb9j6psK2ZbZowAAAgQ"]
[Thu Apr 23 08:55:34.553396 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 194.61.40.102:48203] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:35.128387 2026] [proxy_fcgi:error] [pid 42972:tid 43020] [client 194.61.40.58:28245] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:35.690443 2026] [proxy_fcgi:error] [pid 59700:tid 59724] [client 194.61.40.73:60403] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:35.957278 2026] [:error] [pid 42973:tid 43047] [client 194.61.40.94:60483] [client 194.61.40.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aeluB26I0QqmmmLTHE3mkgAAAIQ"]
[Thu Apr 23 08:55:36.527292 2026] [proxy_fcgi:error] [pid 64967:tid 64986] [client 194.61.40.102:60669] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:37.154154 2026] [proxy_fcgi:error] [pid 43083:tid 43105] [client 194.61.40.55:63171] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:37.479626 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 194.61.40.73:30903] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:55:37.610148 2026] [:error] [pid 65000:tid 65050] [client 194.61.40.73:30903] [client 194.61.40.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aeluCb6vRb9j6psK2ZbZqQAAAhE"]
[Thu Apr 23 08:55:38.435921 2026] [proxy_fcgi:error] [pid 25635:tid 25652] [client 194.61.40.78:53197] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:38.691535 2026] [:error] [pid 42971:tid 42998] [client 194.61.40.106:47569] [client 194.61.40.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/db.php"] [unique_id "aeluCjEP2_5RswrH8bHGugAAAAw"]
[Thu Apr 23 08:55:38.984227 2026] [:error] [pid 65000:tid 65048] [client 194.61.40.58:48393] [client 194.61.40.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aeluCr6vRb9j6psK2ZbZrAAAAg8"]
[Thu Apr 23 08:55:39.241852 2026] [:error] [pid 42972:tid 43016] [client 194.61.40.96:50877] [client 194.61.40.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aeluC8OAb-3sOknsk4czrgAAAEA"]
[Thu Apr 23 08:55:39.522265 2026] [:error] [pid 65000:tid 65057] [client 194.61.40.64:32425] [client 194.61.40.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aeluC76vRb9j6psK2ZbZrgAAAhg"]
[Thu Apr 23 08:55:39.818538 2026] [:error] [pid 59700:tid 59713] [client 194.61.40.80:27509] [client 194.61.40.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aeluC5XyGZJFeAIDWtl8WwAAAUs"]
[Thu Apr 23 08:55:40.102721 2026] [:error] [pid 59700:tid 59715] [client 194.61.40.78:54807] [client 194.61.40.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aeluDJXyGZJFeAIDWtl8XAAAAU0"]
[Thu Apr 23 08:55:40.662015 2026] [proxy_fcgi:error] [pid 43083:tid 43099] [client 194.61.40.76:42223] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:41.303087 2026] [proxy_fcgi:error] [pid 43083:tid 43100] [client 194.61.40.55:50481] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:41.582499 2026] [:error] [pid 64967:tid 64977] [client 194.61.40.79:39679] [client 194.61.40.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aeluDYAV4GfOOdX8QzoinwAAAYg"]
[Thu Apr 23 08:55:41.847494 2026] [:error] [pid 42972:tid 43030] [client 194.61.40.85:49615] [client 194.61.40.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aeluDcOAb-3sOknsk4czsAAAAE4"]
[Thu Apr 23 08:55:42.104694 2026] [:error] [pid 65000:tid 65040] [client 194.61.40.58:46909] [client 194.61.40.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aeluDr6vRb9j6psK2ZbZsAAAAgc"]
[Thu Apr 23 08:55:42.362677 2026] [:error] [pid 59700:tid 59719] [client 194.61.40.101:52507] [client 194.61.40.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aeluDpXyGZJFeAIDWtl8XwAAAVE"]
[Thu Apr 23 08:55:42.662004 2026] [:error] [pid 65000:tid 65054] [client 194.61.40.56:21301] [client 194.61.40.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aeluDr6vRb9j6psK2ZbZsgAAAhU"]
[Thu Apr 23 08:55:42.927442 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 194.61.40.61:37329] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:55:43.385665 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 194.61.40.61:37329] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:43.993671 2026] [proxy_fcgi:error] [pid 43083:tid 43109] [client 194.61.40.85:52631] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:44.272333 2026] [:error] [pid 65000:tid 65051] [client 194.61.40.67:27287] [client 194.61.40.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.61.40.67, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aeluEL6vRb9j6psK2ZbZuQAAAhI"]
[Thu Apr 23 08:55:44.597762 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 194.61.40.67:27287] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:45.218061 2026] [proxy_fcgi:error] [pid 42973:tid 43056] [client 194.61.40.89:33899] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:45.789558 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 194.61.40.91:20913] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:46.419551 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 194.61.40.81:23165] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:47.021964 2026] [proxy_fcgi:error] [pid 59700:tid 59711] [client 194.61.40.90:53973] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:47.282231 2026] [:error] [pid 64998:tid 65024] [client 194.61.40.58:43663] [client 194.61.40.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aeluE4V5EysYcTLjmwhFZQAAAdY"]
[Thu Apr 23 08:55:47.947032 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 194.61.40.82:42319] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:48.545180 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 194.61.40.82:45573] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:49.180084 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 194.61.40.105:58629] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:49.994706 2026] [proxy_fcgi:error] [pid 42971:tid 43002] [client 194.61.40.69:26533] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:50.608727 2026] [proxy_fcgi:error] [pid 42972:tid 43036] [client 194.61.40.55:32491] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:51.044708 2026] [proxy_fcgi:error] [pid 42972:tid 43017] [client 194.61.40.55:32491] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:51.492339 2026] [proxy_fcgi:error] [pid 42972:tid 43035] [client 194.61.40.55:32491] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:52.315555 2026] [proxy_fcgi:error] [pid 42973:tid 43053] [client 194.61.40.94:22831] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:52.923833 2026] [proxy_fcgi:error] [pid 64998:tid 65004] [client 194.61.40.54:63193] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:53.504672 2026] [proxy_fcgi:error] [pid 42973:tid 43044] [client 194.61.40.78:38225] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:54.191586 2026] [proxy_fcgi:error] [pid 64967:tid 64973] [client 194.61.40.74:64365] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:54.784283 2026] [proxy_fcgi:error] [pid 42971:tid 42998] [client 194.61.40.63:62931] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:55.365250 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 194.61.40.62:48643] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:55.950294 2026] [proxy_fcgi:error] [pid 42971:tid 42986] [client 194.61.40.54:39279] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:56.586688 2026] [proxy_fcgi:error] [pid 42971:tid 42997] [client 194.61.40.76:43413] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:57.356479 2026] [proxy_fcgi:error] [pid 59700:tid 59718] [client 194.61.40.96:50331] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:57.661083 2026] [:error] [pid 25635:tid 25648] [client 194.61.40.76:51851] [client 194.61.40.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aeluHcRxv6UsgRGKB3Lu3AAAAQk"]
[Thu Apr 23 08:55:57.946229 2026] [:error] [pid 59700:tid 59715] [client 194.61.40.65:46623] [client 194.61.40.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aeluHZXyGZJFeAIDWtl8bAAAAU0"]
[Thu Apr 23 08:55:58.211997 2026] [:error] [pid 42972:tid 43026] [client 194.61.40.60:48905] [client 194.61.40.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aeluHsOAb-3sOknsk4czugAAAEo"]
[Thu Apr 23 08:55:58.952425 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 194.61.40.79:35863] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:55:59.608810 2026] [proxy_fcgi:error] [pid 59700:tid 59702] [client 194.61.40.58:31241] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:00.366355 2026] [proxy_fcgi:error] [pid 42973:tid 43062] [client 194.61.40.74:54807] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:01.350566 2026] [proxy_fcgi:error] [pid 64967:tid 64978] [client 194.61.40.95:59287] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:01.951481 2026] [proxy_fcgi:error] [pid 59700:tid 59720] [client 194.61.40.89:51657] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:02.591587 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 194.61.40.58:31135] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:03.002954 2026] [:error] [pid 43083:tid 43096] [client 194.61.40.83:32961] [client 194.61.40.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aeluIzC5hrvNXosL83L5jgAAAMs"]
[Thu Apr 23 08:56:03.495684 2026] [:error] [pid 43083:tid 43107] [client 194.61.40.104:45379] [client 194.61.40.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aeluIzC5hrvNXosL83L5jwAAANY"]
[Thu Apr 23 08:56:03.825626 2026] [:error] [pid 65000:tid 65046] [client 194.61.40.91:27101] [client 194.61.40.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aeluI76vRb9j6psK2ZbZ0wAAAg0"]
[Thu Apr 23 08:56:04.427294 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 194.61.40.100:47545] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:05.037724 2026] [proxy_fcgi:error] [pid 59700:tid 59706] [client 194.61.40.66:49049] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:05.682781 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 194.61.40.105:48615] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:06.164371 2026] [proxy_fcgi:error] [pid 43083:tid 43086] [client 194.61.40.105:48615] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:06.457901 2026] [:error] [pid 43083:tid 43093] [client 194.61.40.74:46785] [client 194.61.40.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aeluJjC5hrvNXosL83L5lQAAAMg"]
[Thu Apr 23 08:56:07.026700 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 194.61.40.54:20121] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:07.420174 2026] [:error] [pid 64967:tid 64986] [client 194.61.40.95:33387] [client 194.61.40.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aeluJ4AV4GfOOdX8QzoiqgAAAZE"]
[Thu Apr 23 08:56:08.081918 2026] [proxy_fcgi:error] [pid 42973:tid 43052] [client 194.61.40.74:33183] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:08.735481 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 194.61.40.78:41057] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:09.113886 2026] [:error] [pid 25635:tid 25656] [client 194.61.40.85:24559] [client 194.61.40.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aeluKcRxv6UsgRGKB3Lu4QAAARE"]
[Thu Apr 23 08:56:09.711927 2026] [proxy_fcgi:error] [pid 64967:tid 64981] [client 194.61.40.91:39513] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:10.432661 2026] [proxy_fcgi:error] [pid 42973:tid 43064] [client 194.61.40.56:28443] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:11.186064 2026] [proxy_fcgi:error] [pid 42973:tid 43049] [client 194.61.40.100:20811] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:11.859130 2026] [proxy_fcgi:error] [pid 42973:tid 43054] [client 194.61.40.73:32849] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:12.524019 2026] [proxy_fcgi:error] [pid 42973:tid 43066] [client 194.61.40.66:58295] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:13.261080 2026] [proxy_fcgi:error] [pid 64967:tid 64978] [client 194.61.40.65:47215] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:13.894740 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 194.61.40.77:29183] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:14.560799 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 194.61.40.65:48901] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:15.156375 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 194.61.40.65:44495] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:15.748046 2026] [proxy_fcgi:error] [pid 42971:tid 43001] [client 194.61.40.81:35797] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:16.362303 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 194.61.40.88:46799] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:16.695169 2026] [:error] [pid 64998:tid 65018] [client 194.61.40.95:51821] [client 194.61.40.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aeluMIV5EysYcTLjmwhFoQAAAdA"]
[Thu Apr 23 08:56:17.496150 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 194.61.40.92:55087] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:17.755040 2026] [:error] [pid 25635:tid 25657] [client 194.61.40.83:63145] [client 194.61.40.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/about.php"] [unique_id "aeluMcRxv6UsgRGKB3Lu5gAAARI"]
[Thu Apr 23 08:56:18.383624 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 194.61.40.72:58077] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:19.018678 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 194.61.40.64:65137] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:19.784524 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 194.61.40.108:34907] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:20.402747 2026] [proxy_fcgi:error] [pid 43083:tid 43103] [client 194.61.40.58:22435] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:21.081850 2026] [proxy_fcgi:error] [pid 59700:tid 59709] [client 194.61.40.88:27293] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:21.801180 2026] [proxy_fcgi:error] [pid 59700:tid 59725] [client 194.61.40.59:27575] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:22.070229 2026] [:error] [pid 64998:tid 65023] [client 194.61.40.91:43919] [client 194.61.40.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aeluNoV5EysYcTLjmwhFyQAAAdU"]
[Thu Apr 23 08:56:22.701402 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 194.61.40.66:23577] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:23.447049 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 194.61.40.101:32757] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:23.868759 2026] [:error] [pid 59700:tid 59713] [client 194.61.40.55:29653] [client 194.61.40.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aeluN5XyGZJFeAIDWtl8hgAAAUs"]
[Thu Apr 23 08:56:24.520109 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 194.61.40.58:25443] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:25.814085 2026] [proxy_fcgi:error] [pid 43083:tid 43104] [client 194.61.40.99:44545] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:26.449799 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 194.61.40.80:26467] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:27.043486 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 194.61.40.61:35319] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:27.956502 2026] [:error] [pid 59700:tid 59714] [client 194.61.40.62:58481] [client 194.61.40.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aeluO5XyGZJFeAIDWtl8iQAAAUw"]
[Thu Apr 23 08:56:28.954668 2026] [proxy_fcgi:error] [pid 43083:tid 43105] [client 194.61.40.64:25123] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:29.710964 2026] [proxy_fcgi:error] [pid 43083:tid 43106] [client 194.61.40.64:25123] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:30.439766 2026] [proxy_fcgi:error] [pid 42971:tid 42989] [client 194.61.40.104:22429] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:31.300821 2026] [proxy_fcgi:error] [pid 59700:tid 59709] [client 194.61.40.61:52303] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:31.621216 2026] [:error] [pid 43083:tid 43089] [client 194.61.40.54:59495] [client 194.61.40.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aeluPzC5hrvNXosL83L5pwAAAMQ"]
[Thu Apr 23 08:56:32.471520 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 194.61.40.73:20825] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:33.098007 2026] [proxy_fcgi:error] [pid 43083:tid 43095] [client 194.61.40.89:59921] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:33.402643 2026] [:error] [pid 59700:tid 59703] [client 194.61.40.90:59901] [client 194.61.40.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aeluQZXyGZJFeAIDWtl8mQAAAUE"]
[Thu Apr 23 08:56:33.689249 2026] [:error] [pid 43083:tid 43107] [client 194.61.40.68:63269] [client 194.61.40.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aeluQTC5hrvNXosL83L5rQAAANY"]
[Thu Apr 23 08:56:34.309792 2026] [proxy_fcgi:error] [pid 42973:tid 43061] [client 194.61.40.100:45521] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:34.996198 2026] [proxy_fcgi:error] [pid 42971:tid 43001] [client 194.61.40.69:47597] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:35.678584 2026] [proxy_fcgi:error] [pid 42971:tid 42997] [client 194.61.40.79:58431] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:36.442330 2026] [proxy_fcgi:error] [pid 25635:tid 25651] [client 194.61.40.97:44933] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:37.029258 2026] [proxy_fcgi:error] [pid 42973:tid 43055] [client 194.61.40.70:20899] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:37.455672 2026] [:error] [pid 42972:tid 43027] [client 194.61.40.86:38553] [client 194.61.40.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aeluRcOAb-3sOknsk4czyAAAAEs"]
[Thu Apr 23 08:56:38.201446 2026] [proxy_fcgi:error] [pid 59700:tid 59702] [client 194.61.40.89:38501] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:38.762434 2026] [proxy_fcgi:error] [pid 42971:tid 42994] [client 194.61.40.80:36087] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:39.218628 2026] [proxy_fcgi:error] [pid 42971:tid 43008] [client 194.61.40.80:36087] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:39.652260 2026] [proxy_fcgi:error] [pid 42971:tid 43003] [client 194.61.40.80:36087] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:40.329825 2026] [proxy_fcgi:error] [pid 42973:tid 43064] [client 194.61.40.68:55513] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:40.589452 2026] [:error] [pid 64998:tid 65024] [client 194.61.40.65:25893] [client 194.61.40.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aeluSIV5EysYcTLjmwhF3wAAAdY"]
[Thu Apr 23 08:56:41.163977 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 194.61.40.108:30675] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:41.849023 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 194.61.40.87:62091] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:42.478988 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 194.61.40.74:57075] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:43.167360 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 194.61.40.90:33447] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:43.448764 2026] [:error] [pid 42971:tid 43007] [client 194.61.40.82:39073] [client 194.61.40.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aeluSzEP2_5RswrH8bHG9gAAABU"]
[Thu Apr 23 08:56:43.740742 2026] [:error] [pid 65000:tid 65052] [client 194.61.40.91:50775] [client 194.61.40.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aeluS76vRb9j6psK2ZbaAwAAAhM"]
[Thu Apr 23 08:56:44.346425 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 194.61.40.82:64519] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:44.622842 2026] [:error] [pid 59700:tid 59718] [client 194.61.40.54:56941] [client 194.61.40.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aeluTJXyGZJFeAIDWtl8pwAAAVA"]
[Thu Apr 23 08:56:45.245702 2026] [proxy_fcgi:error] [pid 64967:tid 64970] [client 194.61.40.77:54083] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:45.901067 2026] [proxy_fcgi:error] [pid 43083:tid 43099] [client 194.61.40.72:29857] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:46.112751 2026] [:error] [pid 43083:tid 43107] [client 194.61.40.72:29857] [client 194.61.40.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/install.php"] [unique_id "aeluTjC5hrvNXosL83L5vQAAANY"]
[Thu Apr 23 08:56:46.479972 2026] [:error] [pid 59700:tid 59705] [client 194.61.40.70:28777] [client 194.61.40.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aeluTpXyGZJFeAIDWtl8qwAAAUM"]
[Thu Apr 23 08:56:47.207570 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 194.61.40.66:35385] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:47.777020 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 194.61.40.63:58077] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:48.395663 2026] [proxy_fcgi:error] [pid 42971:tid 42988] [client 194.61.40.70:36631] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:49.145384 2026] [proxy_fcgi:error] [pid 43083:tid 43108] [client 194.61.40.68:20561] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:49.736596 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 194.61.40.61:35447] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:50.369804 2026] [proxy_fcgi:error] [pid 42973:tid 43054] [client 194.61.40.55:63845] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:50.638376 2026] [:error] [pid 59700:tid 59716] [client 194.61.40.89:44413] [client 194.61.40.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/category-double.php"] [unique_id "aeluUpXyGZJFeAIDWtl8sAAAAU4"]
[Thu Apr 23 08:56:51.215783 2026] [proxy_fcgi:error] [pid 64967:tid 64979] [client 194.61.40.63:65213] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:51.857858 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 194.61.40.100:25571] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:52.117451 2026] [:error] [pid 42972:tid 43016] [client 194.61.40.101:65333] [client 194.61.40.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aeluVMOAb-3sOknsk4cz1AAAAEA"]
[Thu Apr 23 08:56:52.442413 2026] [:error] [pid 65000:tid 65051] [client 194.61.40.55:41369] [client 194.61.40.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aeluVL6vRb9j6psK2ZbaEgAAAhI"]
[Thu Apr 23 08:56:53.015594 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 194.61.40.79:20287] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:53.627223 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 194.61.40.85:23509] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:53.941262 2026] [:error] [pid 64998:tid 65003] [client 194.61.40.78:57237] [client 194.61.40.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aeluVYV5EysYcTLjmwhF6AAAAcE"]
[Thu Apr 23 08:56:54.509398 2026] [proxy_fcgi:error] [pid 25635:tid 25640] [client 194.61.40.67:21613] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:54.768880 2026] [:error] [pid 65000:tid 65054] [client 194.61.40.86:45323] [client 194.61.40.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aeluVr6vRb9j6psK2ZbaGgAAAhU"]
[Thu Apr 23 08:56:55.335462 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 194.61.40.101:30845] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:55.899611 2026] [proxy_fcgi:error] [pid 25635:tid 25650] [client 194.61.40.96:38969] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:56.467943 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 194.61.40.102:50295] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:57.126706 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 194.61.40.101:29909] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:57.768627 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 194.61.40.85:28833] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:57.904085 2026] [:error] [pid 65000:tid 65051] [client 194.61.40.85:28833] [client 194.61.40.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aeluWb6vRb9j6psK2ZbaIwAAAhI"]
[Thu Apr 23 08:56:58.526063 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 194.61.40.86:24739] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:59.276275 2026] [proxy_fcgi:error] [pid 42971:tid 42997] [client 194.61.40.95:52563] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:56:59.873811 2026] [:error] [pid 43083:tid 43097] [client 194.61.40.83:40119] [client 194.61.40.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aeluWzC5hrvNXosL83L5zQAAAMw"]
[Thu Apr 23 08:57:00.629759 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 194.61.40.75:60609] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:01.450904 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 194.61.40.54:52263] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:01.870753 2026] [:error] [pid 59700:tid 59715] [client 194.61.40.88:45679] [client 194.61.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aeluXZXyGZJFeAIDWtl8uwAAAU0"]
[Thu Apr 23 08:57:02.573710 2026] [proxy_fcgi:error] [pid 59700:tid 59721] [client 194.61.40.70:30905] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:02.899510 2026] [:error] [pid 65000:tid 65056] [client 194.61.40.105:50421] [client 194.61.40.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/as.php"] [unique_id "aeluXr6vRb9j6psK2ZbaKwAAAhc"]
[Thu Apr 23 08:57:03.776757 2026] [proxy_fcgi:error] [pid 64998:tid 65008] [client 194.61.40.82:34507] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:04.631275 2026] [:error] [pid 65000:tid 65053] [client 194.61.40.61:26815] [client 194.61.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aeluYL6vRb9j6psK2ZbaLQAAAhQ"]
[Thu Apr 23 08:57:05.715717 2026] [:error] [pid 42973:tid 43062] [client 194.61.40.76:26619] [client 194.61.40.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/install.php"] [unique_id "aeluYW6I0QqmmmLTHE3mtQAAAJM"]
[Thu Apr 23 08:57:06.698300 2026] [:error] [pid 64998:tid 65017] [client 194.61.40.75:64287] [client 194.61.40.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aeluYoV5EysYcTLjmwhF8AAAAc8"]
[Thu Apr 23 08:57:07.772702 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 194.61.40.95:47943] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:08.418660 2026] [proxy_fcgi:error] [pid 59700:tid 59710] [client 194.61.40.82:65195] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:09.107628 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 194.61.40.96:57119] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:09.699663 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 194.61.40.90:52725] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:10.373632 2026] [proxy_fcgi:error] [pid 42973:tid 43043] [client 194.61.40.106:48121] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:10.986799 2026] [proxy_fcgi:error] [pid 42971:tid 42986] [client 194.61.40.73:55647] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:11.307938 2026] [:error] [pid 42971:tid 43009] [client 194.61.40.64:60763] [client 194.61.40.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aeluZzEP2_5RswrH8bHHEAAAABc"]
[Thu Apr 23 08:57:11.930810 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 194.61.40.67:55829] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:12.524131 2026] [proxy_fcgi:error] [pid 43083:tid 43102] [client 194.61.40.64:39987] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:13.241275 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 194.61.40.59:42327] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:13.501590 2026] [:error] [pid 59700:tid 59702] [client 194.61.40.59:28007] [client 194.61.40.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rk2.php"] [unique_id "aeluaZXyGZJFeAIDWtl83AAAAUA"]
[Thu Apr 23 08:57:14.068789 2026] [proxy_fcgi:error] [pid 42971:tid 42989] [client 194.61.40.97:36429] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:14.778074 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 194.61.40.64:59295] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:15.071742 2026] [:error] [pid 43083:tid 43100] [client 194.61.40.85:48827] [client 194.61.40.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aeluazC5hrvNXosL83L54AAAAM8"]
[Thu Apr 23 08:57:15.862936 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 194.61.40.94:21465] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:16.587303 2026] [proxy_fcgi:error] [pid 64998:tid 65004] [client 194.61.40.91:52651] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:16.895548 2026] [:error] [pid 64998:tid 65012] [client 194.61.40.63:55865] [client 194.61.40.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aelubIV5EysYcTLjmwhGEwAAAco"]
[Thu Apr 23 08:57:17.473249 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 194.61.40.105:50457] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:18.032518 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 194.61.40.92:22407] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:18.468980 2026] [proxy_fcgi:error] [pid 59700:tid 59706] [client 194.61.40.92:22407] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:19.084740 2026] [proxy_fcgi:error] [pid 64967:tid 64971] [client 194.61.40.75:48109] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:19.725221 2026] [proxy_fcgi:error] [pid 64967:tid 64985] [client 194.61.40.72:44301] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:19.995712 2026] [:error] [pid 42971:tid 42988] [client 194.61.40.54:42579] [client 194.61.40.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aelubzEP2_5RswrH8bHHGQAAAAI"]
[Thu Apr 23 08:57:20.607587 2026] [proxy_fcgi:error] [pid 42971:tid 43006] [client 194.61.40.67:53091] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:20.864932 2026] [:error] [pid 42972:tid 43034] [client 194.61.40.65:30151] [client 194.61.40.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aelucMOAb-3sOknsk4cz3wAAAFI"]
[Thu Apr 23 08:57:21.462810 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 194.61.40.56:36087] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:21.801878 2026] [:error] [pid 59700:tid 59713] [client 194.61.40.89:38887] [client 194.61.40.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aelucZXyGZJFeAIDWtl85gAAAUs"]
[Thu Apr 23 08:57:22.527342 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 194.61.40.55:22139] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:23.266437 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 194.61.40.94:23591] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:23.531858 2026] [:error] [pid 42973:tid 43046] [client 194.61.40.70:64949] [client 194.61.40.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aeluc26I0QqmmmLTHE3muQAAAIM"]
[Thu Apr 23 08:57:24.291309 2026] [proxy_fcgi:error] [pid 25635:tid 25650] [client 194.61.40.72:29479] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:25.071320 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 194.61.40.83:37995] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:25.958949 2026] [proxy_fcgi:error] [pid 59700:tid 59706] [client 194.61.40.83:58377] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:26.738614 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 194.61.40.69:20649] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:27.416310 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 194.61.40.101:64331] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:28.209959 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 194.61.40.92:23809] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:28.942542 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 194.61.40.54:61189] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:29.687674 2026] [proxy_fcgi:error] [pid 59700:tid 59707] [client 194.61.40.58:29245] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:29.997851 2026] [:error] [pid 65000:tid 65052] [client 194.61.40.103:46381] [client 194.61.40.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aelueb6vRb9j6psK2ZbaaAAAAhM"]
[Thu Apr 23 08:57:30.823163 2026] [:error] [pid 64998:tid 65024] [client 194.61.40.54:60587] [client 194.61.40.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aelueoV5EysYcTLjmwhGMwAAAdY"]
[Thu Apr 23 08:57:31.479963 2026] [proxy_fcgi:error] [pid 42971:tid 42995] [client 194.61.40.106:40837] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:31.974932 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 194.61.40.106:40837] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:32.743567 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 194.61.40.86:25387] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:33.046392 2026] [:error] [pid 64998:tid 65010] [client 194.61.40.87:47697] [client 194.61.40.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aelufYV5EysYcTLjmwhGOwAAAcg"]
[Thu Apr 23 08:57:33.367727 2026] [:error] [pid 65000:tid 65052] [client 194.61.40.78:58599] [client 194.61.40.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aelufb6vRb9j6psK2ZbadAAAAhM"]
[Thu Apr 23 08:57:33.955330 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 194.61.40.64:55837] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:34.607688 2026] [proxy_fcgi:error] [pid 43083:tid 43098] [client 194.61.40.86:59601] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:34.881133 2026] [:error] [pid 64998:tid 65018] [client 194.61.40.82:51523] [client 194.61.40.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aelufoV5EysYcTLjmwhGQwAAAdA"]
[Thu Apr 23 08:57:35.157989 2026] [:error] [pid 42973:tid 43059] [client 194.61.40.98:21893] [client 194.61.40.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aeluf26I0QqmmmLTHE3mugAAAJA"]
[Thu Apr 23 08:57:35.502257 2026] [:error] [pid 42971:tid 42988] [client 194.61.40.100:61327] [client 194.61.40.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.61.40.100, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aelufzEP2_5RswrH8bHHKAAAAAI"]
[Thu Apr 23 08:57:35.508059 2026] [proxy_fcgi:error] [pid 42971:tid 42988] [client 194.61.40.100:61327] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:57:35.662711 2026] [:error] [pid 42971:tid 42991] [client 194.61.40.100:61327] [client 194.61.40.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aelufzEP2_5RswrH8bHHKQAAAAU"]
[Thu Apr 23 08:57:37.408666 2026] [proxy_fcgi:error] [pid 43083:tid 43100] [client 194.61.40.66:45665] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:37.872137 2026] [proxy_fcgi:error] [pid 43083:tid 43091] [client 194.61.40.66:45665] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:38.256087 2026] [:error] [pid 42972:tid 43039] [client 194.61.40.54:59259] [client 194.61.40.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aelugsOAb-3sOknsk4cz5AAAAFc"]
[Thu Apr 23 08:57:38.669604 2026] [:error] [pid 43083:tid 43094] [client 194.61.40.59:40071] [client 194.61.40.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/network.php"] [unique_id "aelugjC5hrvNXosL83L57wAAAMk"]
[Thu Apr 23 08:57:39.343346 2026] [proxy_fcgi:error] [pid 43083:tid 43089] [client 194.61.40.63:53469] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:39.956639 2026] [proxy_fcgi:error] [pid 43083:tid 43105] [client 194.61.40.64:46387] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:40.540658 2026] [proxy_fcgi:error] [pid 43083:tid 43109] [client 194.61.40.64:46387] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:42.198043 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 194.61.40.72:59699] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:42.844715 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 194.61.40.63:31765] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:45.277294 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 194.61.40.73:44041] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:46.033383 2026] [proxy_fcgi:error] [pid 59700:tid 59711] [client 194.61.40.95:34085] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:46.335565 2026] [:error] [pid 42972:tid 43040] [client 194.61.40.56:22993] [client 194.61.40.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aeluisOAb-3sOknsk4cz5gAAAFg"]
[Thu Apr 23 08:57:46.635950 2026] [:error] [pid 64998:tid 65013] [client 194.61.40.63:50711] [client 194.61.40.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aeluioV5EysYcTLjmwhGWgAAAcs"]
[Thu Apr 23 08:57:47.279756 2026] [proxy_fcgi:error] [pid 25635:tid 25657] [client 194.61.40.54:35205] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:47.730111 2026] [proxy_fcgi:error] [pid 25635:tid 25652] [client 194.61.40.54:35205] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:47.902336 2026] [:error] [pid 25635:tid 25645] [client 194.61.40.54:35205] [client 194.61.40.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aelui8Rxv6UsgRGKB3LvMQAAAQY"]
[Thu Apr 23 08:57:49.282065 2026] [:error] [pid 42971:tid 42998] [client 194.61.40.57:43753] [client 194.61.40.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aelujTEP2_5RswrH8bHHLgAAAAw"]
[Thu Apr 23 08:57:49.662581 2026] [proxy_fcgi:error] [pid 59700:tid 59722] [client 194.61.40.95:24045] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:57:49.808304 2026] [:error] [pid 59700:tid 59708] [client 194.61.40.95:24045] [client 194.61.40.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.61.40.95, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aelujZXyGZJFeAIDWtl8_wAAAUY"]
[Thu Apr 23 08:57:50.155716 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 194.61.40.95:24045] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:50.774538 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 194.61.40.68:28525] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:51.090595 2026] [:error] [pid 65000:tid 65057] [client 194.61.40.60:29765] [client 194.61.40.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aeluj76vRb9j6psK2ZbafAAAAhg"]
[Thu Apr 23 08:57:51.710803 2026] [proxy_fcgi:error] [pid 42971:tid 43008] [client 194.61.40.65:38631] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:52.564653 2026] [proxy_fcgi:error] [pid 42971:tid 42995] [client 194.61.40.105:52187] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:53.244071 2026] [proxy_fcgi:error] [pid 42971:tid 43001] [client 194.61.40.105:52187] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:53.821450 2026] [:error] [pid 59700:tid 59723] [client 194.61.40.98:58087] [client 194.61.40.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aelukZXyGZJFeAIDWtl9CAAAAVU"]
[Thu Apr 23 08:57:54.736318 2026] [proxy_fcgi:error] [pid 42972:tid 43037] [client 194.61.40.66:42109] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:55.020043 2026] [:error] [pid 59700:tid 59718] [client 194.61.40.85:28821] [client 194.61.40.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aeluk5XyGZJFeAIDWtl9DAAAAVA"]
[Thu Apr 23 08:57:55.770897 2026] [:error] [pid 64967:tid 64969] [client 194.61.40.63:64013] [client 194.61.40.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aeluk4AV4GfOOdX8QzojCQAAAYA"]
[Thu Apr 23 08:57:56.410116 2026] [proxy_fcgi:error] [pid 25635:tid 25655] [client 194.61.40.82:43097] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:57.649032 2026] [proxy_fcgi:error] [pid 43083:tid 43107] [client 194.61.40.103:35657] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:58.614021 2026] [proxy_fcgi:error] [pid 42973:tid 43063] [client 194.61.40.63:21013] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:57:58.901761 2026] [:error] [pid 64967:tid 64985] [client 194.61.40.66:42189] [client 194.61.40.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aeluloAV4GfOOdX8QzojDAAAAZA"]
[Thu Apr 23 08:57:59.791900 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 194.61.40.85:55045] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:00.478823 2026] [proxy_fcgi:error] [pid 25635:tid 25639] [client 194.61.40.86:44067] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:01.094074 2026] [:error] [pid 43083:tid 43085] [client 194.61.40.70:62967] [client 194.61.40.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aelumTC5hrvNXosL83L6DgAAAMA"]
[Thu Apr 23 08:58:01.710820 2026] [proxy_fcgi:error] [pid 43083:tid 43088] [client 194.61.40.97:60759] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:02.604836 2026] [proxy_fcgi:error] [pid 42971:tid 42989] [client 194.61.40.99:24217] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:03.222619 2026] [proxy_fcgi:error] [pid 42971:tid 43007] [client 194.61.40.75:53969] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:04.993340 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 194.61.40.63:44317] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:05.617231 2026] [:error] [pid 25635:tid 25650] [client 194.61.40.74:45559] [client 194.61.40.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aeluncRxv6UsgRGKB3LvOAAAAQs"]
[Thu Apr 23 08:58:06.197505 2026] [:error] [pid 25635:tid 25649] [client 194.61.40.69:35765] [client 194.61.40.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/bypass.php"] [unique_id "aelunsRxv6UsgRGKB3LvOQAAAQo"]
[Thu Apr 23 08:58:06.914350 2026] [proxy_fcgi:error] [pid 59700:tid 59709] [client 194.61.40.100:54965] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:07.335443 2026] [:error] [pid 42973:tid 43059] [client 194.61.40.92:25637] [client 194.61.40.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/count.php"] [unique_id "aelun26I0QqmmmLTHE3mywAAAJA"]
[Thu Apr 23 08:58:08.306940 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 194.61.40.105:47631] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:08.972775 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 194.61.40.61:36183] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:09.826061 2026] [proxy_fcgi:error] [pid 42971:tid 42994] [client 194.61.40.92:35445] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:10.462062 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 194.61.40.98:24053] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:11.051001 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 194.61.40.105:35383] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:11.696751 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 194.61.40.72:36541] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:11.977450 2026] [:error] [pid 42972:tid 43035] [client 194.61.40.61:39343] [client 194.61.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aeluo8OAb-3sOknsk4cz9QAAAFM"]
[Thu Apr 23 08:58:12.655619 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 194.61.40.82:45177] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:13.300068 2026] [proxy_fcgi:error] [pid 42972:tid 43026] [client 194.61.40.78:24633] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:13.582817 2026] [:error] [pid 42972:tid 43030] [client 194.61.40.55:54021] [client 194.61.40.55] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "southerncrosscentre.au"] [uri "/images/stories/themes.php"] [unique_id "aelupcOAb-3sOknsk4cz_AAAAE4"]
[Thu Apr 23 08:58:13.764314 2026] [:error] [pid 42972:tid 43019] [client 194.61.40.55:54021] [client 194.61.40.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aelupcOAb-3sOknsk4cz_QAAAEM"]
[Thu Apr 23 08:58:14.447044 2026] [proxy_fcgi:error] [pid 42972:tid 43034] [client 194.61.40.65:31713] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:15.040033 2026] [proxy_fcgi:error] [pid 42972:tid 43020] [client 194.61.40.94:40905] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:15.356370 2026] [:error] [pid 43083:tid 43088] [client 194.61.40.72:30523] [client 194.61.40.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aelupzC5hrvNXosL83L6HwAAAMM"]
[Thu Apr 23 08:58:15.639556 2026] [:error] [pid 43083:tid 43096] [client 194.61.40.77:53283] [client 194.61.40.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aelupzC5hrvNXosL83L6IQAAAMs"]
[Thu Apr 23 08:58:16.385058 2026] [proxy_fcgi:error] [pid 42971:tid 43001] [client 194.61.40.69:58629] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:16.967102 2026] [proxy_fcgi:error] [pid 42972:tid 43039] [client 194.61.40.98:42535] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:17.768410 2026] [proxy_fcgi:error] [pid 42972:tid 43017] [client 194.61.40.98:42535] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:18.355666 2026] [proxy_fcgi:error] [pid 42971:tid 42999] [client 194.61.40.55:46351] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:19.126028 2026] [proxy_fcgi:error] [pid 42972:tid 43028] [client 194.61.40.95:21515] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:19.755114 2026] [proxy_fcgi:error] [pid 59700:tid 59709] [client 194.61.40.84:52737] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:20.134428 2026] [:error] [pid 42972:tid 43019] [client 194.61.40.99:53653] [client 194.61.40.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aelurMOAb-3sOknsk4c0CgAAAEM"]
[Thu Apr 23 08:58:20.909462 2026] [proxy_fcgi:error] [pid 42972:tid 43034] [client 194.61.40.64:43193] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:21.558747 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 194.61.40.102:65157] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:22.464461 2026] [:error] [pid 42972:tid 43036] [client 194.61.40.94:60065] [client 194.61.40.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aelursOAb-3sOknsk4c0DwAAAFQ"]
[Thu Apr 23 08:58:23.109636 2026] [proxy_fcgi:error] [pid 64967:tid 64982] [client 194.61.40.59:36287] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:23.417081 2026] [:error] [pid 43083:tid 43093] [client 194.61.40.67:34401] [client 194.61.40.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aelurzC5hrvNXosL83L6MQAAAMg"]
[Thu Apr 23 08:58:24.055814 2026] [proxy_fcgi:error] [pid 43083:tid 43100] [client 194.61.40.78:29005] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:24.778290 2026] [proxy_fcgi:error] [pid 43083:tid 43094] [client 194.61.40.83:47159] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:25.361005 2026] [proxy_fcgi:error] [pid 59700:tid 59718] [client 194.61.40.97:27321] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:26.024947 2026] [proxy_fcgi:error] [pid 59700:tid 59711] [client 194.61.40.72:47439] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:26.592990 2026] [proxy_fcgi:error] [pid 59700:tid 59722] [client 194.61.40.98:62865] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:26.852686 2026] [:error] [pid 43083:tid 43088] [client 194.61.40.68:54323] [client 194.61.40.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aelusjC5hrvNXosL83L6PQAAAMM"]
[Thu Apr 23 08:58:27.131004 2026] [:error] [pid 42971:tid 42991] [client 194.61.40.75:58591] [client 194.61.40.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/colour.php"] [unique_id "aeluszEP2_5RswrH8bHHWgAAAAU"]
[Thu Apr 23 08:58:27.704772 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 194.61.40.75:27793] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:28.235506 2026] [:error] [pid 25635:tid 25656] [client 194.61.40.82:57491] [client 194.61.40.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aelutMRxv6UsgRGKB3LvSAAAARE"]
[Thu Apr 23 08:58:28.528848 2026] [:error] [pid 43083:tid 43102] [client 194.61.40.59:21247] [client 194.61.40.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/include.php"] [unique_id "aelutDC5hrvNXosL83L6QQAAANE"]
[Thu Apr 23 08:58:29.338745 2026] [proxy_fcgi:error] [pid 25635:tid 25644] [client 194.61.40.87:44303] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:29.981173 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 194.61.40.69:56451] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:30.253522 2026] [:error] [pid 64998:tid 65008] [client 194.61.40.78:42855] [client 194.61.40.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aelutoV5EysYcTLjmwhGgAAAAcY"]
[Thu Apr 23 08:58:30.931840 2026] [proxy_fcgi:error] [pid 64967:tid 64978] [client 194.61.40.106:52471] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:31.555567 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 194.61.40.66:28775] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:31.870137 2026] [:error] [pid 64998:tid 65009] [client 194.61.40.98:21511] [client 194.61.40.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aelut4V5EysYcTLjmwhGigAAAcc"]
[Thu Apr 23 08:58:32.278487 2026] [:error] [pid 42973:tid 43054] [client 194.61.40.106:47185] [client 194.61.40.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aeluuG6I0QqmmmLTHE3m0QAAAIs"]
[Thu Apr 23 08:58:32.999791 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 194.61.40.97:51643] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:33.645212 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 194.61.40.95:52695] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:34.284662 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 194.61.40.102:20211] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:34.888192 2026] [proxy_fcgi:error] [pid 43083:tid 43090] [client 194.61.40.99:37659] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:35.225953 2026] [:error] [pid 64998:tid 65019] [client 194.61.40.101:64257] [client 194.61.40.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aeluu4V5EysYcTLjmwhGowAAAdE"]
[Thu Apr 23 08:58:35.872116 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 194.61.40.104:63859] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:36.753292 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 194.61.40.66:45407] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:37.025520 2026] [:error] [pid 64998:tid 65024] [client 194.61.40.78:45981] [client 194.61.40.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aeluvYV5EysYcTLjmwhGswAAAdY"]
[Thu Apr 23 08:58:37.615139 2026] [proxy_fcgi:error] [pid 59700:tid 59710] [client 194.61.40.83:30907] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:38.257819 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 194.61.40.103:43403] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:38.996670 2026] [proxy_fcgi:error] [pid 42973:tid 43063] [client 194.61.40.58:31315] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:39.432209 2026] [:error] [pid 42971:tid 42993] [client 194.61.40.92:59715] [client 194.61.40.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aeluvzEP2_5RswrH8bHHYwAAAAc"]
[Thu Apr 23 08:58:39.793322 2026] [:error] [pid 64998:tid 65014] [client 194.61.40.82:22393] [client 194.61.40.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aeluv4V5EysYcTLjmwhGuAAAAcw"]
[Thu Apr 23 08:58:40.122427 2026] [:error] [pid 64998:tid 65009] [client 194.61.40.62:24411] [client 194.61.40.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aeluwIV5EysYcTLjmwhGugAAAcc"]
[Thu Apr 23 08:58:40.701643 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 194.61.40.54:46483] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:41.275187 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 194.61.40.98:37511] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:41.596172 2026] [:error] [pid 43083:tid 43109] [client 194.61.40.106:61707] [client 194.61.40.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aeluwTC5hrvNXosL83L6TAAAANg"]
[Thu Apr 23 08:58:42.165424 2026] [proxy_fcgi:error] [pid 42972:tid 43030] [client 194.61.40.103:52705] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:42.723767 2026] [proxy_fcgi:error] [pid 43083:tid 43098] [client 194.61.40.92:59787] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:43.012039 2026] [:error] [pid 59700:tid 59716] [client 194.61.40.92:55751] [client 194.61.40.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aeluw5XyGZJFeAIDWtl9PwAAAU4"]
[Thu Apr 23 08:58:43.270774 2026] [:error] [pid 43083:tid 43094] [client 194.61.40.103:26799] [client 194.61.40.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aeluwzC5hrvNXosL83L6UQAAAMk"]
[Thu Apr 23 08:58:43.867457 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 194.61.40.87:48301] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:44.342423 2026] [:error] [pid 43083:tid 43095] [client 194.61.40.62:27493] [client 194.61.40.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aeluxDC5hrvNXosL83L6VAAAAMo"]
[Thu Apr 23 08:58:44.611289 2026] [:error] [pid 43083:tid 43087] [client 194.61.40.87:36917] [client 194.61.40.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aeluxDC5hrvNXosL83L6VQAAAMI"]
[Thu Apr 23 08:58:45.245090 2026] [proxy_fcgi:error] [pid 43083:tid 43097] [client 194.61.40.92:54415] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:45.964529 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 194.61.40.80:53399] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:46.231087 2026] [:error] [pid 64998:tid 65005] [client 194.61.40.57:24223] [client 194.61.40.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aeluxoV5EysYcTLjmwhGxwAAAcM"]
[Thu Apr 23 08:58:46.921077 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 194.61.40.62:40017] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:47.073744 2026] [:error] [pid 65000:tid 65049] [client 194.61.40.62:40017] [client 194.61.40.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aelux76vRb9j6psK2ZbavAAAAhA"]
[Thu Apr 23 08:58:47.401296 2026] [:error] [pid 65000:tid 65041] [client 194.61.40.63:50057] [client 194.61.40.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aelux76vRb9j6psK2ZbavQAAAgg"]
[Thu Apr 23 08:58:49.269307 2026] [:error] [pid 65000:tid 65039] [client 194.61.40.92:44191] [client 194.61.40.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aeluyb6vRb9j6psK2ZbaxQAAAgY"]
[Thu Apr 23 08:58:49.974314 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 194.61.40.87:39501] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:50.695152 2026] [proxy_fcgi:error] [pid 65000:tid 65041] [client 194.61.40.64:55215] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:51.022758 2026] [:error] [pid 64967:tid 64991] [client 194.61.40.86:40353] [client 194.61.40.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aeluy4AV4GfOOdX8QzojIQAAAZY"]
[Thu Apr 23 08:58:51.686549 2026] [proxy_fcgi:error] [pid 42971:tid 43010] [client 194.61.40.101:27321] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:52.262809 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 194.61.40.58:28153] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:52.543763 2026] [:error] [pid 42971:tid 42994] [client 194.61.40.80:30065] [client 194.61.40.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aeluzDEP2_5RswrH8bHHdAAAAAg"]
[Thu Apr 23 08:58:53.208532 2026] [proxy_fcgi:error] [pid 42971:tid 43004] [client 194.61.40.74:56887] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:53.503795 2026] [:error] [pid 59700:tid 59705] [client 194.61.40.56:50487] [client 194.61.40.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aeluzZXyGZJFeAIDWtl9RQAAAUM"]
[Thu Apr 23 08:58:53.772806 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 194.61.40.81:35737] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0; PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_locale() in /home/crosscen/public_html/wp-admin/includes/admin.php:16\nStack trace:\n#0 {main}\n  thrown in /home/crosscen/public_html/wp-admin/includes/admin.php on line 16'
[Thu Apr 23 08:58:54.169550 2026] [:error] [pid 64998:tid 65025] [client 194.61.40.102:21753] [client 194.61.40.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aeluzoV5EysYcTLjmwhGzgAAAdc"]
[Thu Apr 23 08:58:54.782088 2026] [proxy_fcgi:error] [pid 25635:tid 25644] [client 194.61.40.65:62609] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:55.407302 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 194.61.40.61:60357] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:55.938200 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 194.61.40.61:60357] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:56.580900 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 194.61.40.84:54681] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:57.333285 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 194.61.40.62:59711] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:57.962004 2026] [proxy_fcgi:error] [pid 64998:tid 65004] [client 194.61.40.94:47921] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:58.321018 2026] [:error] [pid 64998:tid 65012] [client 194.61.40.59:34975] [client 194.61.40.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/plugin.php"] [unique_id "aelu0oV5EysYcTLjmwhG3QAAAco"]
[Thu Apr 23 08:58:58.622581 2026] [:error] [pid 64998:tid 65007] [client 194.61.40.101:52247] [client 194.61.40.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aelu0oV5EysYcTLjmwhG3gAAAcU"]
[Thu Apr 23 08:58:59.280691 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 194.61.40.95:21289] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:58:59.891358 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 194.61.40.58:37867] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:00.275553 2026] [:error] [pid 65000:tid 65054] [client 194.61.40.72:37769] [client 194.61.40.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aelu1L6vRb9j6psK2ZbbBwAAAhU"]
[Thu Apr 23 08:59:01.123429 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 194.61.40.85:62433] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:01.613847 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 194.61.40.85:62433] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:02.342743 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 194.61.40.56:58447] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:02.990643 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 194.61.40.96:35237] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:04.218539 2026] [:error] [pid 65000:tid 65041] [client 194.61.40.61:25953] [client 194.61.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aelu2L6vRb9j6psK2ZbbGgAAAgg"]
[Thu Apr 23 08:59:04.856265 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 194.61.40.100:22901] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:05.508879 2026] [proxy_fcgi:error] [pid 42971:tid 42986] [client 194.61.40.64:41071] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:05.821532 2026] [:error] [pid 65000:tid 65047] [client 194.61.40.72:37949] [client 194.61.40.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aelu2b6vRb9j6psK2ZbbIwAAAg4"]
[Thu Apr 23 08:59:06.462841 2026] [proxy_fcgi:error] [pid 42971:tid 42991] [client 194.61.40.86:44333] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:07.036284 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 194.61.40.57:53453] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:07.169761 2026] [:error] [pid 59700:tid 59716] [client 194.61.40.57:53453] [client 194.61.40.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aelu25XyGZJFeAIDWtl9XgAAAU4"]
[Thu Apr 23 08:59:07.801815 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 194.61.40.101:60277] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:08.163855 2026] [:error] [pid 42973:tid 43062] [client 194.61.40.98:42965] [client 194.61.40.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aelu3G6I0QqmmmLTHE3m3QAAAJM"]
[Thu Apr 23 08:59:08.805892 2026] [proxy_fcgi:error] [pid 43083:tid 43098] [client 194.61.40.63:42695] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:09.432893 2026] [:error] [pid 64998:tid 65009] [client 194.61.40.78:53665] [client 194.61.40.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aelu3YV5EysYcTLjmwhG7gAAAcc"]
[Thu Apr 23 08:59:10.065307 2026] [proxy_fcgi:error] [pid 42973:tid 43043] [client 194.61.40.65:26817] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:10.787493 2026] [proxy_fcgi:error] [pid 65000:tid 65041] [client 194.61.40.60:58171] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:11.416921 2026] [proxy_fcgi:error] [pid 64967:tid 64990] [client 194.61.40.60:59681] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:12.326155 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 194.61.40.84:36831] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:13.278005 2026] [:error] [pid 64998:tid 65023] [client 194.61.40.77:50137] [client 194.61.40.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aelu4YV5EysYcTLjmwhG-AAAAdU"]
[Thu Apr 23 08:59:13.931844 2026] [proxy_fcgi:error] [pid 25635:tid 25659] [client 194.61.40.73:53189] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:14.634326 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 194.61.40.75:52447] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:15.252526 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 194.61.40.75:52447] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:15.631767 2026] [:error] [pid 64998:tid 65023] [client 194.61.40.82:31081] [client 194.61.40.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aelu44V5EysYcTLjmwhHBwAAAdU"]
[Thu Apr 23 08:59:15.955533 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 194.61.40.97:50583] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:59:16.119779 2026] [:error] [pid 64998:tid 65020] [client 194.61.40.97:50583] [client 194.61.40.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aelu5IV5EysYcTLjmwhHCwAAAdI"]
[Thu Apr 23 08:59:16.451645 2026] [:error] [pid 42971:tid 43007] [client 194.61.40.56:54267] [client 194.61.40.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aelu5DEP2_5RswrH8bHHjAAAABU"]
[Thu Apr 23 08:59:17.194024 2026] [proxy_fcgi:error] [pid 25635:tid 25652] [client 194.61.40.82:53233] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:17.778047 2026] [proxy_fcgi:error] [pid 42971:tid 43003] [client 194.61.40.79:52547] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:18.081542 2026] [:error] [pid 42971:tid 42988] [client 194.61.40.63:31257] [client 194.61.40.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aelu5jEP2_5RswrH8bHHjwAAAAI"]
[Thu Apr 23 08:59:18.434403 2026] [:error] [pid 42972:tid 43027] [client 194.61.40.103:37815] [client 194.61.40.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aelu5sOAb-3sOknsk4c0IwAAAEs"]
[Thu Apr 23 08:59:19.130542 2026] [proxy_fcgi:error] [pid 42973:tid 43047] [client 194.61.40.63:40055] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:19.728982 2026] [proxy_fcgi:error] [pid 59700:tid 59702] [client 194.61.40.63:32345] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:21.507160 2026] [proxy_fcgi:error] [pid 42971:tid 42999] [client 194.61.40.79:41713] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:22.397591 2026] [proxy_fcgi:error] [pid 42972:tid 43019] [client 194.61.40.105:31639] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:23.253592 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 194.61.40.56:49179] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:23.706811 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 194.61.40.56:49179] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:24.690502 2026] [:error] [pid 59700:tid 59724] [client 194.61.40.79:33413] [client 194.61.40.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aelu7JXyGZJFeAIDWtl9dQAAAVY"]
[Thu Apr 23 08:59:25.605463 2026] [:error] [pid 59700:tid 59704] [client 194.61.40.57:53863] [client 194.61.40.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aelu7ZXyGZJFeAIDWtl9dgAAAUI"]
[Thu Apr 23 08:59:26.955500 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 194.61.40.90:64741] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:27.260391 2026] [:error] [pid 64998:tid 65016] [client 194.61.40.102:40893] [client 194.61.40.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/log.php"] [unique_id "aelu74V5EysYcTLjmwhHLwAAAc4"]
[Thu Apr 23 08:59:27.556334 2026] [:error] [pid 64998:tid 65014] [client 194.61.40.98:45355] [client 194.61.40.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aelu74V5EysYcTLjmwhHMQAAAcw"]
[Thu Apr 23 08:59:27.821349 2026] [:error] [pid 64998:tid 65003] [client 194.61.40.74:36541] [client 194.61.40.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aelu74V5EysYcTLjmwhHMgAAAcE"]
[Thu Apr 23 08:59:28.137753 2026] [:error] [pid 64998:tid 65002] [client 194.61.40.80:56487] [client 194.61.40.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/aw.php"] [unique_id "aelu8IV5EysYcTLjmwhHMwAAAcA"]
[Thu Apr 23 08:59:28.799653 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 194.61.40.86:32573] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:29.465081 2026] [proxy_fcgi:error] [pid 43083:tid 43086] [client 194.61.40.82:45203] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:30.046358 2026] [proxy_fcgi:error] [pid 64998:tid 65007] [client 194.61.40.100:39693] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:30.652615 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 194.61.40.61:37333] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:30.930751 2026] [:error] [pid 43083:tid 43104] [client 194.61.40.105:65437] [client 194.61.40.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aelu8jC5hrvNXosL83L6gAAAANM"]
[Thu Apr 23 08:59:31.276712 2026] [:error] [pid 59700:tid 59722] [client 194.61.40.81:44801] [client 194.61.40.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/install.php"] [unique_id "aelu85XyGZJFeAIDWtl9gAAAAVQ"]
[Thu Apr 23 08:59:31.923971 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 194.61.40.69:33943] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:32.722438 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 194.61.40.69:33943] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:34.197752 2026] [:error] [pid 65000:tid 65040] [client 194.61.40.88:31079] [client 194.61.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aelu9r6vRb9j6psK2ZbbQgAAAgc"]
[Thu Apr 23 08:59:34.488776 2026] [:error] [pid 42973:tid 43056] [client 194.61.40.65:36099] [client 194.61.40.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aelu9m6I0QqmmmLTHE3m5QAAAI0"]
[Thu Apr 23 08:59:35.057943 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 194.61.40.105:21415] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:35.614274 2026] [proxy_fcgi:error] [pid 43083:tid 43107] [client 194.61.40.106:62743] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:35.974079 2026] [:error] [pid 25635:tid 25650] [client 194.61.40.74:59457] [client 194.61.40.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/template-less.php"] [unique_id "aelu98Rxv6UsgRGKB3LvbAAAAQs"]
[Thu Apr 23 08:59:36.404089 2026] [:error] [pid 25635:tid 25653] [client 194.61.40.94:57417] [client 194.61.40.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aelu-MRxv6UsgRGKB3LvbgAAAQ4"]
[Thu Apr 23 08:59:36.994434 2026] [proxy_fcgi:error] [pid 42973:tid 43044] [client 194.61.40.103:30231] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:38.293662 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 194.61.40.76:20601] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:38.910079 2026] [proxy_fcgi:error] [pid 43083:tid 43091] [client 194.61.40.59:30819] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:39.562108 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 194.61.40.104:32399] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:40.317708 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 194.61.40.85:62901] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:40.978739 2026] [proxy_fcgi:error] [pid 43083:tid 43103] [client 194.61.40.64:39585] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:41.669386 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 194.61.40.85:28693] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:42.020021 2026] [:error] [pid 42971:tid 42995] [client 194.61.40.73:44597] [client 194.61.40.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aelu_jEP2_5RswrH8bHHmwAAAAk"]
[Thu Apr 23 08:59:42.303140 2026] [:error] [pid 25635:tid 25657] [client 194.61.40.56:45897] [client 194.61.40.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aelu_sRxv6UsgRGKB3LvcAAAARI"]
[Thu Apr 23 08:59:43.065231 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 194.61.40.79:21037] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:44.460432 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 194.61.40.62:41259] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:44.927649 2026] [:error] [pid 43083:tid 43092] [client 194.61.40.81:37989] [client 194.61.40.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/file.php"] [unique_id "aelvADC5hrvNXosL83L6jwAAAMc"]
[Thu Apr 23 08:59:45.578968 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 194.61.40.88:20191] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:45.876646 2026] [:error] [pid 43083:tid 43100] [client 194.61.40.60:47989] [client 194.61.40.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aelvATC5hrvNXosL83L6nwAAAM8"]
[Thu Apr 23 08:59:46.591720 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 194.61.40.99:23553] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:46.864350 2026] [:error] [pid 65000:tid 65047] [client 194.61.40.86:53827] [client 194.61.40.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/load.php"] [unique_id "aelvAr6vRb9j6psK2ZbbTwAAAg4"]
[Thu Apr 23 08:59:47.174936 2026] [:error] [pid 64998:tid 65005] [client 194.61.40.104:50301] [client 194.61.40.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aelvA4V5EysYcTLjmwhHugAAAcM"]
[Thu Apr 23 08:59:48.514377 2026] [:error] [pid 43083:tid 43107] [client 194.61.40.58:30717] [client 194.61.40.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aelvBDC5hrvNXosL83L6pgAAANY"]
[Thu Apr 23 08:59:49.192942 2026] [proxy_fcgi:error] [pid 43083:tid 43091] [client 194.61.40.106:37691] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:49.879823 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 194.61.40.69:39355] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:50.571883 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 194.61.40.94:52617] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:50.870833 2026] [:error] [pid 65000:tid 65037] [client 194.61.40.77:27289] [client 194.61.40.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aelvBr6vRb9j6psK2ZbbYQAAAgQ"]
[Thu Apr 23 08:59:51.549484 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 194.61.40.92:36835] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:51.840784 2026] [:error] [pid 65000:tid 65050] [client 194.61.40.66:32897] [client 194.61.40.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aelvB76vRb9j6psK2ZbbZQAAAhE"]
[Thu Apr 23 08:59:52.470290 2026] [proxy_fcgi:error] [pid 42971:tid 43001] [client 194.61.40.99:63129] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:53.626776 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 194.61.40.55:22527] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:54.023339 2026] [:error] [pid 65000:tid 65042] [client 194.61.40.97:56999] [client 194.61.40.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aelvCr6vRb9j6psK2ZbbcwAAAgk"]
[Thu Apr 23 08:59:54.317299 2026] [:error] [pid 65000:tid 65047] [client 194.61.40.75:30013] [client 194.61.40.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aelvCr6vRb9j6psK2ZbbdwAAAg4"]
[Thu Apr 23 08:59:54.694331 2026] [:error] [pid 65000:tid 65038] [client 194.61.40.86:28031] [client 194.61.40.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aelvCr6vRb9j6psK2ZbbegAAAgU"]
[Thu Apr 23 08:59:55.599448 2026] [proxy_fcgi:error] [pid 42973:tid 43046] [client 194.61.40.59:24741] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:56.191784 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 194.61.40.108:57679] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:56.855085 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 194.61.40.90:62521] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:57.657103 2026] [proxy_fcgi:error] [pid 64967:tid 64985] [client 194.61.40.86:36813] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:59.055470 2026] [proxy_fcgi:error] [pid 42971:tid 42998] [client 194.61.40.89:62403] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 08:59:59.656253 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 194.61.40.87:54787] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:00.340832 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 194.61.40.95:28843] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:01.365086 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 194.61.40.86:57517] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:01.601645 2026] [:error] [pid 64998:tid 65007] [client 194.61.40.86:57517] [client 194.61.40.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aelvEYV5EysYcTLjmwhIBgAAAcU"]
[Thu Apr 23 09:00:02.687867 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 194.61.40.85:32261] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:02.881804 2026] [:error] [pid 64998:tid 65026] [client 194.61.40.85:32261] [client 194.61.40.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aelvEoV5EysYcTLjmwhICQAAAdg"]
[Thu Apr 23 09:00:04.805794 2026] [proxy_fcgi:error] [pid 43083:tid 43104] [client 194.61.40.70:46519] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:05.731971 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 194.61.40.94:25903] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:06.026988 2026] [:error] [pid 65000:tid 65054] [client 194.61.40.68:22323] [client 194.61.40.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aelvFr6vRb9j6psK2ZbbmQAAAhU"]
[Thu Apr 23 09:00:06.764206 2026] [:error] [pid 43083:tid 43106] [client 194.61.40.67:52619] [client 194.61.40.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aelvFjC5hrvNXosL83L6xAAAANU"]
[Thu Apr 23 09:00:07.160512 2026] [:error] [pid 42971:tid 42997] [client 194.61.40.65:48935] [client 194.61.40.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aelvFzEP2_5RswrH8bHHogAAAAs"]
[Thu Apr 23 09:00:08.552057 2026] [proxy_fcgi:error] [pid 42971:tid 42986] [client 194.61.40.103:20011] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:09.026473 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 194.61.40.103:20011] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:10.344511 2026] [:error] [pid 59700:tid 59710] [client 194.61.40.89:61609] [client 194.61.40.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aelvGpXyGZJFeAIDWtl9ogAAAUg"]
[Thu Apr 23 09:00:11.203518 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 194.61.40.61:44009] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:11.868019 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 194.61.40.56:21037] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:12.606898 2026] [proxy_fcgi:error] [pid 42972:tid 43021] [client 194.61.40.92:57365] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:13.932348 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 194.61.40.100:28841] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:15.385427 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 194.61.40.102:55747] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:16.190121 2026] [proxy_fcgi:error] [pid 59700:tid 59710] [client 194.61.40.54:58345] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:16.697549 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 194.61.40.54:58345] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:17.272648 2026] [:error] [pid 42972:tid 43033] [client 194.61.40.106:50865] [client 194.61.40.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "aelvIcOAb-3sOknsk4c0QwAAAFE"]
[Thu Apr 23 09:00:18.946986 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 194.61.40.88:64771] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:19.399724 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 194.61.40.88:64771] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:20.229700 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 194.61.40.61:58921] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:20.941790 2026] [proxy_fcgi:error] [pid 59700:tid 59704] [client 194.61.40.87:27225] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:21.211529 2026] [:error] [pid 43083:tid 43098] [client 194.61.40.73:31081] [client 194.61.40.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aelvJTC5hrvNXosL83L69AAAAM0"]
[Thu Apr 23 09:00:21.803494 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 194.61.40.94:57757] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:22.412115 2026] [proxy_fcgi:error] [pid 42972:tid 43039] [client 194.61.40.75:29035] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:22.827512 2026] [:error] [pid 64967:tid 64988] [client 194.61.40.78:45057] [client 194.61.40.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "aelvJoAV4GfOOdX8QzojPQAAAZM"]
[Thu Apr 23 09:00:23.203372 2026] [:error] [pid 64998:tid 65022] [client 194.61.40.58:56701] [client 194.61.40.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "aelvJ4V5EysYcTLjmwhITgAAAdQ"]
[Thu Apr 23 09:00:23.998930 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 194.61.40.64:31203] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:24.754777 2026] [proxy_fcgi:error] [pid 43083:tid 43103] [client 194.61.40.66:36667] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:25.569486 2026] [proxy_fcgi:error] [pid 43083:tid 43095] [client 194.61.40.55:39481] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:26.239348 2026] [proxy_fcgi:error] [pid 43083:tid 43088] [client 194.61.40.67:40149] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:26.810146 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 194.61.40.55:51139] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:27.432651 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 194.61.40.79:49417] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:28.376810 2026] [proxy_fcgi:error] [pid 25635:tid 25653] [client 194.61.40.98:20649] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:29.099987 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 194.61.40.101:35793] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:29.764182 2026] [proxy_fcgi:error] [pid 25635:tid 25649] [client 194.61.40.85:51651] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:30.503525 2026] [proxy_fcgi:error] [pid 42971:tid 43001] [client 194.61.40.75:47979] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:31.337299 2026] [proxy_fcgi:error] [pid 64998:tid 65008] [client 194.61.40.99:41203] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:32.937637 2026] [:error] [pid 64967:tid 64985] [client 194.61.40.84:60561] [client 194.61.40.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "aelvMIAV4GfOOdX8QzojQwAAAZA"]
[Thu Apr 23 09:00:33.629367 2026] [:error] [pid 64967:tid 64976] [client 194.61.40.79:51469] [client 194.61.40.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "aelvMYAV4GfOOdX8QzojRAAAAYc"]
[Thu Apr 23 09:00:34.065270 2026] [:error] [pid 42973:tid 43063] [client 194.61.40.89:31709] [client 194.61.40.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aelvMm6I0QqmmmLTHE3m9gAAAJQ"]
[Thu Apr 23 09:00:35.198232 2026] [proxy_fcgi:error] [pid 25635:tid 25651] [client 194.61.40.78:21129] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:35.819648 2026] [:error] [pid 59700:tid 59725] [client 194.61.40.87:57397] [client 194.61.40.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.61.40.87, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aelvM5XyGZJFeAIDWtl94AAAAVc"]
[Thu Apr 23 09:00:36.135643 2026] [proxy_fcgi:error] [pid 59700:tid 59725] [client 194.61.40.87:57397] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:36.724121 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 194.61.40.58:63483] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:37.535418 2026] [:error] [pid 42973:tid 43052] [client 194.61.40.77:23683] [client 194.61.40.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aelvNW6I0QqmmmLTHE3m-wAAAIk"]
[Thu Apr 23 09:00:37.821979 2026] [:error] [pid 43083:tid 43093] [client 194.61.40.76:44697] [client 194.61.40.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aelvNTC5hrvNXosL83L7EgAAAMg"]
[Thu Apr 23 09:00:38.213199 2026] [:error] [pid 43083:tid 43102] [client 194.61.40.94:40721] [client 194.61.40.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "aelvNjC5hrvNXosL83L7EwAAANE"]
[Thu Apr 23 09:00:38.864365 2026] [proxy_fcgi:error] [pid 64967:tid 64989] [client 194.61.40.64:33535] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:39.448904 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 194.61.40.105:42223] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:40.273896 2026] [proxy_fcgi:error] [pid 42972:tid 43029] [client 194.61.40.91:39839] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:40.746474 2026] [proxy_fcgi:error] [pid 42972:tid 43025] [client 194.61.40.91:39839] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:41.570391 2026] [proxy_fcgi:error] [pid 42971:tid 42999] [client 194.61.40.82:35489] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:42.195478 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 194.61.40.69:46019] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:42.692031 2026] [:error] [pid 64998:tid 65011] [client 194.61.40.91:37959] [client 194.61.40.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aelvOoV5EysYcTLjmwhIfQAAAck"]
[Thu Apr 23 09:00:43.555167 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 194.61.40.57:31113] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:44.197807 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 194.61.40.66:58419] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:45.932480 2026] [proxy_fcgi:error] [pid 42971:tid 43007] [client 194.61.40.95:30377] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:46.669328 2026] [proxy_fcgi:error] [pid 42971:tid 43006] [client 194.61.40.104:51873] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:47.744677 2026] [proxy_fcgi:error] [pid 64998:tid 65007] [client 194.61.40.97:38541] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:48.893795 2026] [proxy_fcgi:error] [pid 42971:tid 43000] [client 194.61.40.100:31183] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:49.573673 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 194.61.40.56:24059] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:50.043421 2026] [:error] [pid 65000:tid 65044] [client 194.61.40.66:36677] [client 194.61.40.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aelvQr6vRb9j6psK2Zbb1wAAAgs"]
[Thu Apr 23 09:00:50.809362 2026] [proxy_fcgi:error] [pid 43083:tid 43098] [client 194.61.40.76:45655] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:51.536720 2026] [proxy_fcgi:error] [pid 43083:tid 43091] [client 194.61.40.101:21219] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:52.313355 2026] [:error] [pid 65000:tid 65041] [client 194.61.40.59:50219] [client 194.61.40.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aelvRL6vRb9j6psK2Zbb2QAAAgg"]
[Thu Apr 23 09:00:53.316252 2026] [proxy_fcgi:error] [pid 42972:tid 43029] [client 194.61.40.82:64335] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:54.083503 2026] [proxy_fcgi:error] [pid 42973:tid 43049] [client 194.61.40.99:42727] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:54.996562 2026] [proxy_fcgi:error] [pid 42971:tid 42996] [client 194.61.40.65:48709] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:55.813013 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 194.61.40.70:26215] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:56.557918 2026] [proxy_fcgi:error] [pid 43083:tid 43087] [client 194.61.40.89:58209] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:57.261851 2026] [proxy_fcgi:error] [pid 43083:tid 43091] [client 194.61.40.92:47387] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:58.026480 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 194.61.40.64:38457] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:58.725554 2026] [proxy_fcgi:error] [pid 42971:tid 43008] [client 194.61.40.59:36427] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:00:59.452622 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 194.61.40.58:43325] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:00.068636 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 194.61.40.100:33945] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:00.873586 2026] [proxy_fcgi:error] [pid 42972:tid 43021] [client 194.61.40.70:24217] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:01.515089 2026] [proxy_fcgi:error] [pid 25635:tid 25641] [client 194.61.40.96:29673] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:01.818307 2026] [:error] [pid 65000:tid 65053] [client 194.61.40.85:45185] [client 194.61.40.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aelvTb6vRb9j6psK2Zbb6AAAAhQ"]
[Thu Apr 23 09:01:02.079456 2026] [:error] [pid 42973:tid 43046] [client 194.61.40.91:35687] [client 194.61.40.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aelvTm6I0QqmmmLTHE3nBAAAAIM"]
[Thu Apr 23 09:01:02.430374 2026] [:error] [pid 42973:tid 43047] [client 194.61.40.98:22887] [client 194.61.40.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aelvTm6I0QqmmmLTHE3nBgAAAIQ"]
[Thu Apr 23 09:01:02.723980 2026] [:error] [pid 65000:tid 65047] [client 194.61.40.67:49029] [client 194.61.40.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aelvTr6vRb9j6psK2Zbb6QAAAg4"]
[Thu Apr 23 09:01:03.449364 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 194.61.40.56:28359] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:05.675895 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 194.61.40.59:26045] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:06.825846 2026] [proxy_fcgi:error] [pid 43083:tid 43102] [client 194.61.40.74:62953] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:07.154907 2026] [:error] [pid 43083:tid 43098] [client 194.61.40.102:46015] [client 194.61.40.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aelvUzC5hrvNXosL83L7NgAAAM0"]
[Thu Apr 23 09:01:08.130134 2026] [:error] [pid 25635:tid 25662] [client 194.61.40.79:50769] [client 194.61.40.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "aelvVMRxv6UsgRGKB3LvyQAAARc"]
[Thu Apr 23 09:01:08.988059 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 194.61.40.91:59741] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:09.742806 2026] [proxy_fcgi:error] [pid 43083:tid 43091] [client 194.61.40.106:42003] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:10.419250 2026] [proxy_fcgi:error] [pid 42971:tid 42996] [client 194.61.40.80:44551] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:10.880196 2026] [proxy_fcgi:error] [pid 42971:tid 42986] [client 194.61.40.80:44551] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:11.466496 2026] [proxy_fcgi:error] [pid 59700:tid 59726] [client 194.61.40.108:26179] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:11.768324 2026] [:error] [pid 42973:tid 43054] [client 194.61.40.87:51921] [client 194.61.40.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aelvV26I0QqmmmLTHE3nCgAAAIs"]
[Thu Apr 23 09:01:12.389281 2026] [proxy_fcgi:error] [pid 42971:tid 43008] [client 194.61.40.61:41921] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:13.019170 2026] [proxy_fcgi:error] [pid 43083:tid 43089] [client 194.61.40.91:34317] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:13.585743 2026] [proxy_fcgi:error] [pid 42971:tid 43004] [client 194.61.40.61:57125] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:14.158051 2026] [proxy_fcgi:error] [pid 64967:tid 64973] [client 194.61.40.67:41139] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:14.493739 2026] [:error] [pid 42973:tid 43062] [client 194.61.40.58:35225] [client 194.61.40.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aelvWm6I0QqmmmLTHE3nDQAAAJM"]
[Thu Apr 23 09:01:14.774835 2026] [:error] [pid 59700:tid 59715] [client 194.61.40.57:43399] [client 194.61.40.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "aelvWpXyGZJFeAIDWtl-CQAAAU0"]
[Thu Apr 23 09:01:15.537444 2026] [proxy_fcgi:error] [pid 42973:tid 43066] [client 194.61.40.60:29371] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:15.845034 2026] [proxy_fcgi:error] [pid 42971:tid 42998] [client 194.61.40.68:39265] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:15.981293 2026] [autoindex:error] [pid 42971:tid 42997] [client 194.61.40.68:39265] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:16.425002 2026] [proxy_fcgi:error] [pid 42971:tid 43001] [client 194.61.40.68:39265] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:17.093000 2026] [proxy_fcgi:error] [pid 43083:tid 43095] [client 194.61.40.99:58877] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:17.531232 2026] [autoindex:error] [pid 65000:tid 65057] [client 194.61.40.77:27603] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:18.043344 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 194.61.40.77:27603] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:18.647685 2026] [proxy_fcgi:error] [pid 43083:tid 43089] [client 194.61.40.88:65269] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:19.209400 2026] [proxy_fcgi:error] [pid 25635:tid 25644] [client 194.61.40.85:61223] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:19.846824 2026] [proxy_fcgi:error] [pid 59700:tid 59703] [client 194.61.40.81:49939] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:20.633857 2026] [proxy_fcgi:error] [pid 43083:tid 43090] [client 194.61.40.63:61295] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:21.935828 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 194.61.40.54:52439] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:22.267635 2026] [autoindex:error] [pid 64998:tid 65011] [client 194.61.40.98:63333] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:22.796857 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 194.61.40.98:63333] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:23.104829 2026] [autoindex:error] [pid 43083:tid 43097] [client 194.61.40.57:24417] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:23.599036 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 194.61.40.57:24417] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:23.884736 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 194.61.40.64:38343] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:24.329478 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 194.61.40.64:38343] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:24.965681 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 194.61.40.85:38407] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:25.701364 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 194.61.40.81:45757] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:26.069722 2026] [autoindex:error] [pid 65000:tid 65048] [client 194.61.40.61:32959] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:26.316936 2026] [autoindex:error] [pid 65000:tid 65054] [client 194.61.40.61:32959] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:26.457658 2026] [autoindex:error] [pid 65000:tid 65045] [client 194.61.40.61:32959] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:26.631350 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 194.61.40.61:32959] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:27.086424 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 194.61.40.61:32959] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:27.415621 2026] [autoindex:error] [pid 43083:tid 43099] [client 194.61.40.74:59145] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:27.663918 2026] [autoindex:error] [pid 43083:tid 43091] [client 194.61.40.74:59145] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:28.241140 2026] [proxy_fcgi:error] [pid 43083:tid 43092] [client 194.61.40.74:59145] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:28.387807 2026] [autoindex:error] [pid 43083:tid 43100] [client 194.61.40.74:59145] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:28.527138 2026] [autoindex:error] [pid 43083:tid 43088] [client 194.61.40.74:59145] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:28.696375 2026] [autoindex:error] [pid 43083:tid 43095] [client 194.61.40.74:59145] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:29.152941 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 194.61.40.74:59145] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:29.919877 2026] [autoindex:error] [pid 65000:tid 65055] [client 194.61.40.65:34263] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:30.421115 2026] [autoindex:error] [pid 65000:tid 65043] [client 194.61.40.65:34263] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:30.805851 2026] [autoindex:error] [pid 65000:tid 65054] [client 194.61.40.65:34263] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:31.314936 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 194.61.40.65:34263] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:31.827398 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 194.61.40.65:34263] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:32.287890 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 194.61.40.65:34263] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:32.588576 2026] [autoindex:error] [pid 59700:tid 59706] [client 194.61.40.106:45991] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:32.778604 2026] [autoindex:error] [pid 59700:tid 59713] [client 194.61.40.106:45991] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:32.915255 2026] [autoindex:error] [pid 59700:tid 59719] [client 194.61.40.106:45991] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:33.058961 2026] [autoindex:error] [pid 59700:tid 59716] [client 194.61.40.106:45991] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:34.808660 2026] [autoindex:error] [pid 59700:tid 59721] [client 194.61.40.106:45991] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:35.125120 2026] [autoindex:error] [pid 59700:tid 59723] [client 194.61.40.106:45991] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:35.662639 2026] [proxy_fcgi:error] [pid 59700:tid 59709] [client 194.61.40.106:45991] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:36.133602 2026] [autoindex:error] [pid 64998:tid 65023] [client 194.61.40.54:53181] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:36.370754 2026] [autoindex:error] [pid 64998:tid 65017] [client 194.61.40.54:53181] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:36.908511 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 194.61.40.54:53181] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:37.548606 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 194.61.40.82:38601] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:38.368977 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 194.61.40.87:58419] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:38.666063 2026] [autoindex:error] [pid 65000:tid 65043] [client 194.61.40.80:65109] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:39.148909 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 194.61.40.80:65109] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:39.786989 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 194.61.40.72:26645] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:40.175081 2026] [autoindex:error] [pid 42971:tid 42992] [client 194.61.40.77:35063] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:40.382862 2026] [autoindex:error] [pid 42971:tid 43002] [client 194.61.40.77:35063] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:40.652285 2026] [autoindex:error] [pid 42971:tid 43001] [client 194.61.40.77:35063] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:41.259487 2026] [proxy_fcgi:error] [pid 42971:tid 42996] [client 194.61.40.77:35063] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:41.899830 2026] [proxy_fcgi:error] [pid 42973:tid 43059] [client 194.61.40.75:54211] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:42.354224 2026] [proxy_fcgi:error] [pid 42973:tid 43056] [client 194.61.40.75:54211] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:42.746827 2026] [autoindex:error] [pid 64998:tid 65019] [client 194.61.40.59:42107] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:42.918700 2026] [autoindex:error] [pid 64998:tid 65023] [client 194.61.40.59:42107] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:43.450726 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 194.61.40.59:42107] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:44.076142 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 194.61.40.91:35249] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:44.689134 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 194.61.40.95:28255] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:45.240081 2026] [autoindex:error] [pid 43083:tid 43087] [client 194.61.40.57:22577] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:45.832737 2026] [proxy_fcgi:error] [pid 43083:tid 43108] [client 194.61.40.57:22577] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:46.108568 2026] [autoindex:error] [pid 42973:tid 43048] [client 194.61.40.69:41297] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:46.799048 2026] [proxy_fcgi:error] [pid 42973:tid 43062] [client 194.61.40.69:41297] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:47.117018 2026] [autoindex:error] [pid 59700:tid 59717] [client 194.61.40.57:61441] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:47.601857 2026] [proxy_fcgi:error] [pid 59700:tid 59702] [client 194.61.40.57:61441] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:48.097068 2026] [autoindex:error] [pid 64998:tid 65005] [client 194.61.40.72:30807] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:48.307485 2026] [autoindex:error] [pid 64998:tid 65018] [client 194.61.40.72:30807] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:48.496684 2026] [autoindex:error] [pid 64998:tid 65024] [client 194.61.40.72:30807] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:48.937877 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 194.61.40.72:30807] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:49.500887 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 194.61.40.73:47401] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:49.831943 2026] [autoindex:error] [pid 59700:tid 59703] [client 194.61.40.62:54635] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:50.150598 2026] [autoindex:error] [pid 59700:tid 59716] [client 194.61.40.62:54635] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/random_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:50.669711 2026] [proxy_fcgi:error] [pid 59700:tid 59721] [client 194.61.40.62:54635] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:50.948688 2026] [autoindex:error] [pid 43083:tid 43097] [client 194.61.40.67:46801] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:51.084494 2026] [autoindex:error] [pid 43083:tid 43106] [client 194.61.40.67:46801] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:51.547020 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 194.61.40.67:46801] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:52.143251 2026] [proxy_fcgi:error] [pid 42972:tid 43035] [client 194.61.40.98:33027] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:52.734756 2026] [proxy_fcgi:error] [pid 42971:tid 42995] [client 194.61.40.96:44929] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:53.043890 2026] [autoindex:error] [pid 64998:tid 65017] [client 194.61.40.74:48011] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:53.557363 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 194.61.40.74:48011] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:53.831267 2026] [autoindex:error] [pid 42971:tid 43010] [client 194.61.40.100:34075] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:54.302507 2026] [proxy_fcgi:error] [pid 42971:tid 42996] [client 194.61.40.100:34075] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:54.928707 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 194.61.40.106:56641] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:55.216414 2026] [autoindex:error] [pid 65000:tid 65040] [client 194.61.40.76:25795] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:55.781957 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 194.61.40.76:25795] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:56.469605 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 194.61.40.103:28261] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:56.780776 2026] [autoindex:error] [pid 25635:tid 25658] [client 194.61.40.66:36003] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:57.278183 2026] [proxy_fcgi:error] [pid 25635:tid 25641] [client 194.61.40.66:36003] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:57.691660 2026] [autoindex:error] [pid 42971:tid 42993] [client 194.61.40.99:42823] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:57.837112 2026] [autoindex:error] [pid 42971:tid 42994] [client 194.61.40.99:42823] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:58.001207 2026] [autoindex:error] [pid 42971:tid 43003] [client 194.61.40.99:42823] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:01:58.499165 2026] [proxy_fcgi:error] [pid 42971:tid 43004] [client 194.61.40.99:42823] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:59.142713 2026] [proxy_fcgi:error] [pid 42973:tid 43045] [client 194.61.40.77:53141] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:01:59.784881 2026] [proxy_fcgi:error] [pid 59700:tid 59716] [client 194.61.40.87:37907] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:00.754863 2026] [proxy_fcgi:error] [pid 43083:tid 43090] [client 194.61.40.56:42721] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:01.028402 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 194.61.40.82:27817] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0; PHP message: PHP Fatal error:  Uncaught Error: Undefined constant "ABSPATH" in /home/crosscen/public_html/wp-includes/blocks/index.php:8\nStack trace:\n#0 {main}\n  thrown in /home/crosscen/public_html/wp-includes/blocks/index.php on line 8'
[Thu Apr 23 09:02:01.733723 2026] [proxy_fcgi:error] [pid 42971:tid 43006] [client 194.61.40.105:35653] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:02.392481 2026] [proxy_fcgi:error] [pid 43083:tid 43099] [client 194.61.40.56:39465] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:03.018006 2026] [proxy_fcgi:error] [pid 43083:tid 43089] [client 194.61.40.84:25229] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:03.335102 2026] [autoindex:error] [pid 42973:tid 43063] [client 194.61.40.82:63285] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:03.468852 2026] [autoindex:error] [pid 42973:tid 43046] [client 194.61.40.82:63285] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:03.601005 2026] [autoindex:error] [pid 42973:tid 43061] [client 194.61.40.82:63285] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:03.737112 2026] [autoindex:error] [pid 42973:tid 43047] [client 194.61.40.82:63285] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:04.240994 2026] [proxy_fcgi:error] [pid 42973:tid 43055] [client 194.61.40.82:63285] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:04.823591 2026] [proxy_fcgi:error] [pid 43083:tid 43104] [client 194.61.40.82:57457] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:05.836347 2026] [proxy_fcgi:error] [pid 42972:tid 43021] [client 194.61.40.78:51359] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:06.655484 2026] [proxy_fcgi:error] [pid 42971:tid 43003] [client 194.61.40.98:20459] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:07.059878 2026] [autoindex:error] [pid 43083:tid 43105] [client 194.61.40.80:63473] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2023/05/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:07.593649 2026] [proxy_fcgi:error] [pid 43083:tid 43098] [client 194.61.40.80:63473] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:07.924562 2026] [autoindex:error] [pid 42972:tid 43038] [client 194.61.40.79:38625] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:08.365570 2026] [autoindex:error] [pid 42972:tid 43020] [client 194.61.40.79:38625] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:08.498352 2026] [autoindex:error] [pid 42972:tid 43036] [client 194.61.40.79:38625] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:08.638270 2026] [autoindex:error] [pid 42972:tid 43039] [client 194.61.40.79:38625] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:08.797523 2026] [autoindex:error] [pid 42972:tid 43018] [client 194.61.40.79:38625] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:09.259031 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 194.61.40.79:38625] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:09.657389 2026] [autoindex:error] [pid 42972:tid 43028] [client 194.61.40.108:34099] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/Parse/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:10.088103 2026] [proxy_fcgi:error] [pid 42972:tid 43031] [client 194.61.40.108:34099] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:10.364499 2026] [autoindex:error] [pid 42971:tid 42988] [client 194.61.40.83:61761] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/Cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:10.570275 2026] [autoindex:error] [pid 42971:tid 43000] [client 194.61.40.83:61761] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:10.754370 2026] [autoindex:error] [pid 42971:tid 43008] [client 194.61.40.83:61761] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/languages/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:11.191016 2026] [proxy_fcgi:error] [pid 42971:tid 43007] [client 194.61.40.83:61761] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:11.906614 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 194.61.40.96:29397] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:12.538689 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 194.61.40.92:41123] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:13.240487 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 194.61.40.76:57005] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:13.841881 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 194.61.40.100:45237] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:14.389664 2026] [autoindex:error] [pid 64998:tid 65021] [client 194.61.40.80:46695] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:14.910893 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 194.61.40.80:46695] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:16.114782 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 194.61.40.82:25905] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:16.713695 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 194.61.40.106:52853] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:17.338190 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 194.61.40.91:34671] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:18.043312 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 194.61.40.104:43285] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:18.410257 2026] [autoindex:error] [pid 43083:tid 43088] [client 194.61.40.94:54003] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:18.567936 2026] [autoindex:error] [pid 43083:tid 43104] [client 194.61.40.94:54003] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:18.704360 2026] [autoindex:error] [pid 43083:tid 43103] [client 194.61.40.94:54003] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:18.840484 2026] [autoindex:error] [pid 43083:tid 43094] [client 194.61.40.94:54003] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:19.294810 2026] [proxy_fcgi:error] [pid 43083:tid 43106] [client 194.61.40.94:54003] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:19.983424 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 194.61.40.105:36133] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:20.585830 2026] [proxy_fcgi:error] [pid 64998:tid 65007] [client 194.61.40.73:65221] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:21.651866 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 194.61.40.56:52979] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:21.914507 2026] [autoindex:error] [pid 64998:tid 65005] [client 194.61.40.57:33047] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:22.358069 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 194.61.40.57:33047] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:23.114194 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 194.61.40.96:21307] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:23.962868 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 194.61.40.100:47311] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:24.492657 2026] [autoindex:error] [pid 65000:tid 65049] [client 194.61.40.99:32007] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:25.328291 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 194.61.40.99:32007] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:26.145283 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 194.61.40.68:36775] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:26.792899 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 194.61.40.105:35223] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:27.749654 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 194.61.40.62:51363] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:28.423557 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 194.61.40.97:41097] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:29.345883 2026] [proxy_fcgi:error] [pid 43083:tid 43091] [client 194.61.40.80:35423] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:29.981794 2026] [proxy_fcgi:error] [pid 42972:tid 43039] [client 194.61.40.104:62013] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:30.755770 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 194.61.40.98:28021] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:31.472612 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 194.61.40.65:29989] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:32.420204 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 194.61.40.87:40837] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:32.955274 2026] [autoindex:error] [pid 64998:tid 65015] [client 194.61.40.63:53963] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:33.422167 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 194.61.40.63:53963] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:34.009212 2026] [proxy_fcgi:error] [pid 59700:tid 59711] [client 194.61.40.91:26143] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:34.329805 2026] [autoindex:error] [pid 42973:tid 43046] [client 194.61.40.98:56485] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:34.574402 2026] [autoindex:error] [pid 42973:tid 43057] [client 194.61.40.98:56485] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:34.729487 2026] [autoindex:error] [pid 42973:tid 43047] [client 194.61.40.98:56485] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:35.181352 2026] [proxy_fcgi:error] [pid 42973:tid 43050] [client 194.61.40.98:56485] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:35.783267 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 194.61.40.69:48721] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:36.382783 2026] [autoindex:error] [pid 65000:tid 65032] [client 194.61.40.81:55431] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Requests/Auth/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:36.815577 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 194.61.40.81:55431] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:37.401297 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 194.61.40.98:56015] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:38.029992 2026] [proxy_fcgi:error] [pid 59700:tid 59720] [client 194.61.40.108:20741] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:38.650810 2026] [proxy_fcgi:error] [pid 43083:tid 43103] [client 194.61.40.89:25243] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:39.448025 2026] [proxy_fcgi:error] [pid 42973:tid 43064] [client 194.61.40.77:37177] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:40.041579 2026] [proxy_fcgi:error] [pid 43083:tid 43086] [client 194.61.40.78:36627] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:40.796767 2026] [proxy_fcgi:error] [pid 42971:tid 43009] [client 194.61.40.55:55863] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:41.372042 2026] [proxy_fcgi:error] [pid 64967:tid 64986] [client 194.61.40.87:54841] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:41.957686 2026] [proxy_fcgi:error] [pid 42971:tid 43010] [client 194.61.40.84:65205] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:42.600150 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 194.61.40.84:64817] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:43.672449 2026] [proxy_fcgi:error] [pid 64967:tid 64984] [client 194.61.40.90:49663] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:44.276716 2026] [proxy_fcgi:error] [pid 64967:tid 64991] [client 194.61.40.100:29169] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:44.557888 2026] [autoindex:error] [pid 64967:tid 64992] [client 194.61.40.94:25271] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Requests/Utility/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:45.022972 2026] [proxy_fcgi:error] [pid 64967:tid 64988] [client 194.61.40.94:25271] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:45.328117 2026] [autoindex:error] [pid 64998:tid 65006] [client 194.61.40.76:27485] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/languages/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:45.467627 2026] [autoindex:error] [pid 64998:tid 65017] [client 194.61.40.76:27485] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:46.018965 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 194.61.40.76:27485] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:46.475129 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 194.61.40.76:27485] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:46.752619 2026] [autoindex:error] [pid 64967:tid 64982] [client 194.61.40.64:55787] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:47.261271 2026] [proxy_fcgi:error] [pid 64967:tid 64993] [client 194.61.40.64:55787] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:47.730899 2026] [proxy_fcgi:error] [pid 64967:tid 64978] [client 194.61.40.64:55787] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:48.039815 2026] [autoindex:error] [pid 65000:tid 65032] [client 194.61.40.90:32693] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:48.868727 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 194.61.40.90:32693] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:49.310566 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 194.61.40.90:32693] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:49.597565 2026] [autoindex:error] [pid 43083:tid 43107] [client 194.61.40.95:40401] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:50.168837 2026] [proxy_fcgi:error] [pid 43083:tid 43086] [client 194.61.40.95:40401] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:50.548445 2026] [autoindex:error] [pid 42971:tid 43004] [client 194.61.40.67:59973] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:50.774835 2026] [autoindex:error] [pid 42971:tid 42988] [client 194.61.40.67:59973] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:50.912452 2026] [autoindex:error] [pid 42971:tid 42999] [client 194.61.40.67:59973] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/wlw/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:51.049443 2026] [autoindex:error] [pid 42971:tid 43000] [client 194.61.40.67:59973] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:51.189665 2026] [autoindex:error] [pid 42971:tid 43008] [client 194.61.40.67:59973] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:51.382970 2026] [autoindex:error] [pid 42971:tid 42991] [client 194.61.40.67:59973] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:51.876090 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 194.61.40.67:59973] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:52.477520 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 194.61.40.64:40791] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:53.201218 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 194.61.40.68:34119] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:53.480899 2026] [autoindex:error] [pid 65000:tid 65044] [client 194.61.40.98:54065] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:53.959828 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 194.61.40.98:54065] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:54.644052 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 194.61.40.103:20507] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:55.059039 2026] [autoindex:error] [pid 59700:tid 59721] [client 194.61.40.99:33411] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:02:55.563295 2026] [proxy_fcgi:error] [pid 59700:tid 59716] [client 194.61.40.99:33411] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:56.297628 2026] [proxy_fcgi:error] [pid 64998:tid 65008] [client 194.61.40.75:47709] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:56.937693 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 194.61.40.55:25045] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:57.584110 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 194.61.40.100:50513] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:58.258888 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 194.61.40.67:57215] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:58.881502 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 194.61.40.60:65183] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:02:59.474993 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 194.61.40.88:41589] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:00.117302 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 194.61.40.54:62235] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:00.944302 2026] [autoindex:error] [pid 64998:tid 65025] [client 194.61.40.102:37075] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:03:01.462353 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 194.61.40.102:37075] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:01.790530 2026] [autoindex:error] [pid 25635:tid 25660] [client 194.61.40.60:55095] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:03:02.372592 2026] [proxy_fcgi:error] [pid 25635:tid 25649] [client 194.61.40.60:55095] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:03.865523 2026] [autoindex:error] [pid 65000:tid 65045] [client 194.61.40.65:29703] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:03:04.472052 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 194.61.40.65:29703] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:05.048888 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 194.61.40.54:56247] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:05.802181 2026] [proxy_fcgi:error] [pid 59700:tid 59710] [client 194.61.40.105:55857] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:06.150014 2026] [autoindex:error] [pid 43083:tid 43100] [client 194.61.40.101:54915] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:03:06.828657 2026] [proxy_fcgi:error] [pid 43083:tid 43092] [client 194.61.40.101:54915] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:07.481296 2026] [proxy_fcgi:error] [pid 43083:tid 43097] [client 194.61.40.79:62375] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:08.159919 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 194.61.40.90:33995] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:08.769368 2026] [proxy_fcgi:error] [pid 43083:tid 43107] [client 194.61.40.85:33685] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:09.220163 2026] [autoindex:error] [pid 65000:tid 65057] [client 194.61.40.86:25127] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:03:09.849384 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 194.61.40.86:25127] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:10.493335 2026] [proxy_fcgi:error] [pid 59700:tid 59707] [client 194.61.40.106:23763] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:11.138343 2026] [proxy_fcgi:error] [pid 43083:tid 43102] [client 194.61.40.56:45765] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:11.681855 2026] [proxy_fcgi:error] [pid 43083:tid 43094] [client 194.61.40.56:45765] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:12.929317 2026] [proxy_fcgi:error] [pid 42971:tid 43008] [client 194.61.40.102:43911] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:13.224945 2026] [autoindex:error] [pid 42972:tid 43026] [client 194.61.40.83:33437] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:03:13.768790 2026] [proxy_fcgi:error] [pid 42972:tid 43033] [client 194.61.40.83:33437] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:14.430024 2026] [proxy_fcgi:error] [pid 64967:tid 64973] [client 194.61.40.77:65065] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:15.236303 2026] [proxy_fcgi:error] [pid 64967:tid 64992] [client 194.61.40.77:65065] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:03:15.604909 2026] [autoindex:error] [pid 64967:tid 64988] [client 194.61.40.77:65065] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:03:15.785033 2026] [autoindex:error] [pid 64967:tid 64991] [client 194.61.40.77:65065] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2026/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:03:16.281316 2026] [proxy_fcgi:error] [pid 64967:tid 64981] [client 194.61.40.77:65065] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:51:41.825302 2026] [proxy_fcgi:error] [pid 64967:tid 64974] [client 185.192.71.40:46931] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:51:43.716312 2026] [proxy_fcgi:error] [pid 42972:tid 43027] [client 185.192.71.36:33789] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:51:45.126732 2026] [proxy_fcgi:error] [pid 42972:tid 43017] [client 185.192.71.24:29295] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:51:46.529326 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 185.192.71.35:36943] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:51:47.988305 2026] [proxy_fcgi:error] [pid 59700:tid 59702] [client 185.192.71.25:22917] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:51:52.702529 2026] [proxy_fcgi:error] [pid 64967:tid 64976] [client 91.230.225.199:64927] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:51:53.785212 2026] [proxy_fcgi:error] [pid 42971:tid 42993] [client 91.230.225.209:55327] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:51:55.072883 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 91.230.225.198:61273] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:51:57.488347 2026] [proxy_fcgi:error] [pid 25635:tid 25645] [client 185.192.71.39:28775] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:51:58.878312 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 185.192.71.40:45979] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:00.202307 2026] [proxy_fcgi:error] [pid 25635:tid 25640] [client 185.192.71.27:31183] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:02.262612 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 185.192.71.37:39573] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:04.050307 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 185.192.71.30:41795] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:05.601322 2026] [proxy_fcgi:error] [pid 64967:tid 64990] [client 185.192.71.36:36971] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:07.230445 2026] [proxy_fcgi:error] [pid 42971:tid 42992] [client 185.192.71.22:21969] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:08.877310 2026] [proxy_fcgi:error] [pid 59700:tid 59721] [client 185.192.71.28:29235] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:11.333310 2026] [proxy_fcgi:error] [pid 64967:tid 64975] [client 185.192.71.25:54757] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:13.953613 2026] [proxy_fcgi:error] [pid 42972:tid 43025] [client 91.230.225.204:56919] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:16.282540 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 185.192.71.37:21799] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:18.479315 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 185.192.71.22:35799] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:19.698523 2026] [proxy_fcgi:error] [pid 25635:tid 25653] [client 91.230.225.16:48715] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:20.940753 2026] [proxy_fcgi:error] [pid 64967:tid 64987] [client 185.192.71.35:23291] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:22.575070 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 185.192.71.35:62765] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:24.522576 2026] [proxy_fcgi:error] [pid 42971:tid 42991] [client 91.230.225.18:65187] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:25.959045 2026] [proxy_fcgi:error] [pid 42972:tid 43029] [client 185.192.71.30:43307] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:28.305493 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 185.192.71.21:60723] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:30.936325 2026] [proxy_fcgi:error] [pid 42971:tid 42997] [client 185.192.71.36:26687] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:33.109897 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 91.230.225.16:34601] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:35.302308 2026] [proxy_fcgi:error] [pid 42971:tid 42988] [client 185.192.71.39:41131] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:37.117317 2026] [proxy_fcgi:error] [pid 59700:tid 59722] [client 91.230.225.16:40511] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:38.308320 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 91.230.225.195:25265] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:40.018302 2026] [proxy_fcgi:error] [pid 42973:tid 43055] [client 91.230.225.15:33255] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:40.567442 2026] [:error] [pid 43083:tid 43090] [client 91.230.225.13:40461] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ael7aDC5hrvNXosL83IPMgAAAMU"]
[Thu Apr 23 09:52:43.429671 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 185.192.71.28:32633] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:45.310352 2026] [proxy_fcgi:error] [pid 43083:tid 43098] [client 91.230.225.198:23529] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:48.509710 2026] [proxy_fcgi:error] [pid 43083:tid 43105] [client 91.230.225.11:24543] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:49.112627 2026] [:error] [pid 65000:tid 65049] [client 91.230.225.205:51789] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ael7cb6vRb9j6psK2Zb2IQAAAhA"]
[Thu Apr 23 09:52:50.797313 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 91.230.225.10:48511] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:52.793322 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 185.192.71.27:22231] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:54.021572 2026] [proxy_fcgi:error] [pid 59700:tid 59725] [client 185.92.25.113:24623] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:56.926349 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 185.192.71.27:60429] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:52:59.394429 2026] [proxy_fcgi:error] [pid 42971:tid 43007] [client 185.192.71.26:37199] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:02.904566 2026] [proxy_fcgi:error] [pid 42972:tid 43038] [client 91.230.225.13:64973] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:03.444534 2026] [:error] [pid 65000:tid 65052] [client 91.230.225.15:54179] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tinyfilemanager.php"] [unique_id "ael7f76vRb9j6psK2Zb2xQAAAhM"]
[Thu Apr 23 09:53:06.010294 2026] [proxy_fcgi:error] [pid 64967:tid 64990] [client 91.230.225.208:37313] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:07.613900 2026] [proxy_fcgi:error] [pid 42972:tid 43031] [client 185.192.71.38:26981] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:11.880308 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 185.192.71.38:53041] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:12.440564 2026] [:error] [pid 65000:tid 65049] [client 91.230.225.23:43077] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/index.php"] [unique_id "ael7iL6vRb9j6psK2Zb3VwAAAhA"]
[Thu Apr 23 09:53:16.360298 2026] [proxy_fcgi:error] [pid 42972:tid 43031] [client 185.192.71.32:34381] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:18.926306 2026] [proxy_fcgi:error] [pid 43083:tid 43099] [client 91.230.225.17:50577] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:21.827600 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 185.192.71.24:45637] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:24.970993 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 91.230.225.202:64787] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:27.746297 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 91.230.225.209:56303] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:31.888372 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 91.230.225.198:42985] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:32.441550 2026] [:error] [pid 64967:tid 64986] [client 91.230.225.202:37711] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "ael7nIAV4GfOOdX8Qzor4wAAAZE"]
[Thu Apr 23 09:53:34.607409 2026] [proxy_fcgi:error] [pid 64967:tid 64988] [client 91.230.225.200:64367] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:35.229940 2026] [:error] [pid 25635:tid 25641] [client 185.192.71.34:51283] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ael7n8Rxv6UsgRGKB3L2BQAAAQI"]
[Thu Apr 23 09:53:35.822710 2026] [:error] [pid 25635:tid 25651] [client 91.230.225.198:53833] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ael7n8Rxv6UsgRGKB3L2DgAAAQw"]
[Thu Apr 23 09:53:36.366561 2026] [:error] [pid 43083:tid 43106] [client 91.230.225.18:54801] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ael7oDC5hrvNXosL83IRNAAAANU"]
[Thu Apr 23 09:53:37.115342 2026] [:error] [pid 25635:tid 25659] [client 185.192.71.29:42467] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ael7ocRxv6UsgRGKB3L2GAAAARQ"]
[Thu Apr 23 09:53:37.704877 2026] [:error] [pid 59700:tid 59707] [client 185.192.71.37:35883] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ael7oZXyGZJFeAIDWtmPSAAAAUU"]
[Thu Apr 23 09:53:41.029691 2026] [proxy_fcgi:error] [pid 64967:tid 64990] [client 91.230.225.13:35711] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:41.323464 2026] [:error] [pid 64967:tid 64988] [client 91.230.225.13:35711] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ael7pYAV4GfOOdX8QzosJAAAAZM"]
[Thu Apr 23 09:53:43.871304 2026] [proxy_fcgi:error] [pid 64998:tid 65008] [client 91.230.225.203:25273] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:44.533315 2026] [proxy_fcgi:error] [pid 25635:tid 25662] [client 185.192.71.36:38555] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:44.889832 2026] [:error] [pid 25635:tid 25647] [client 185.192.71.36:38555] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "ael7qMRxv6UsgRGKB3L2UgAAAQg"]
[Thu Apr 23 09:53:48.501317 2026] [proxy_fcgi:error] [pid 42972:tid 43025] [client 185.192.71.37:56145] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:52.196822 2026] [proxy_fcgi:error] [pid 64967:tid 64972] [client 185.192.71.26:54081] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:52.776280 2026] [:error] [pid 43083:tid 43100] [client 185.192.71.34:26663] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ael7sDC5hrvNXosL83IR_wAAAM8"]
[Thu Apr 23 09:53:55.463322 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 91.230.225.23:31793] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:55.730964 2026] [:error] [pid 65000:tid 65057] [client 91.230.225.23:31793] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "ael7s76vRb9j6psK2Zb5VQAAAhg"]
[Thu Apr 23 09:53:58.376761 2026] [proxy_fcgi:error] [pid 42972:tid 43039] [client 91.230.225.196:34889] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:53:58.970395 2026] [:error] [pid 42971:tid 43007] [client 185.192.71.33:62391] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ael7tjEP2_5RswrH8bHXDwAAABU"]
[Thu Apr 23 09:54:00.642864 2026] [proxy_fcgi:error] [pid 42971:tid 42997] [client 185.192.71.29:43007] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:03.528526 2026] [proxy_fcgi:error] [pid 42971:tid 42992] [client 185.192.71.29:43007] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:08.066486 2026] [proxy_fcgi:error] [pid 64998:tid 65004] [client 91.230.225.20:33991] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:10.582476 2026] [proxy_fcgi:error] [pid 42973:tid 43047] [client 185.192.71.24:41049] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:12.775301 2026] [proxy_fcgi:error] [pid 25635:tid 25658] [client 91.230.225.195:40405] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:15.264336 2026] [proxy_fcgi:error] [pid 42973:tid 43048] [client 91.230.225.22:63975] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:15.911704 2026] [:error] [pid 42971:tid 42998] [client 91.230.225.200:58111] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "ael7xzEP2_5RswrH8bHXtQAAAAw"]
[Thu Apr 23 09:54:18.376684 2026] [proxy_fcgi:error] [pid 64998:tid 65004] [client 91.230.225.206:57001] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:18.928662 2026] [:error] [pid 42973:tid 43057] [client 91.230.225.204:62413] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "ael7ym6I0QqmmmLTHE3uygAAAI4"]
[Thu Apr 23 09:54:21.938325 2026] [proxy_fcgi:error] [pid 42971:tid 42999] [client 185.192.71.24:58329] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:24.780316 2026] [proxy_fcgi:error] [pid 42971:tid 42989] [client 91.230.225.17:44239] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:25.397778 2026] [:error] [pid 42972:tid 43033] [client 185.192.71.38:59991] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/defaults.php"] [unique_id "ael70cOAb-3sOknsk4dBcwAAAFE"]
[Thu Apr 23 09:54:27.467369 2026] [proxy_fcgi:error] [pid 42971:tid 43009] [client 91.230.225.13:59567] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:28.031436 2026] [:error] [pid 25635:tid 25652] [client 91.230.225.18:35789] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/index.php"] [unique_id "ael71MRxv6UsgRGKB3L32AAAAQ0"]
[Thu Apr 23 09:54:30.661333 2026] [proxy_fcgi:error] [pid 64998:tid 65004] [client 91.230.225.204:63343] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:33.501308 2026] [proxy_fcgi:error] [pid 64967:tid 64993] [client 91.230.225.203:40987] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:35.332300 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 185.192.71.36:21927] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:36.657310 2026] [proxy_fcgi:error] [pid 42972:tid 43033] [client 91.230.225.209:30475] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:37.230995 2026] [:error] [pid 25635:tid 25640] [client 91.230.225.201:23339] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ael73cRxv6UsgRGKB3L4KAAAAQE"]
[Thu Apr 23 09:54:40.422311 2026] [proxy_fcgi:error] [pid 65000:tid 65041] [client 185.192.71.35:63345] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:40.959690 2026] [:error] [pid 43083:tid 43101] [client 91.230.225.13:59731] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "ael74DC5hrvNXosL83IUjQAAANA"]
[Thu Apr 23 09:54:43.242463 2026] [proxy_fcgi:error] [pid 42972:tid 43024] [client 91.230.225.198:44841] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:43.789478 2026] [:error] [pid 65000:tid 65041] [client 91.230.225.200:23659] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "ael7476vRb9j6psK2Zb8IwAAAgg"]
[Thu Apr 23 09:54:44.334597 2026] [:error] [pid 42971:tid 42991] [client 91.230.225.202:26053] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "ael75DEP2_5RswrH8bHYsQAAAAU"]
[Thu Apr 23 09:54:44.877728 2026] [:error] [pid 64998:tid 65008] [client 91.230.225.12:62003] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ael75IV5EysYcTLjmwh2VwAAAcY"]
[Thu Apr 23 09:54:48.338413 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 185.192.71.26:29501] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:51.288576 2026] [proxy_fcgi:error] [pid 42972:tid 43022] [client 91.230.225.10:46425] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:53.310314 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 91.230.225.20:64093] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:53.869603 2026] [:error] [pid 25635:tid 25647] [client 185.192.71.32:41565] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/info.php"] [unique_id "ael77cRxv6UsgRGKB3L4zAAAAQg"]
[Thu Apr 23 09:54:54.430885 2026] [:error] [pid 64998:tid 65018] [client 185.192.71.38:33041] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class.api.php"] [unique_id "ael77oV5EysYcTLjmwh3EQAAAdA"]
[Thu Apr 23 09:54:54.969976 2026] [:error] [pid 65000:tid 65039] [client 91.230.225.201:23149] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ael77r6vRb9j6psK2Zb83QAAAgY"]
[Thu Apr 23 09:54:56.713295 2026] [proxy_fcgi:error] [pid 43083:tid 43107] [client 185.192.71.31:50657] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:54:59.960311 2026] [proxy_fcgi:error] [pid 42973:tid 43059] [client 91.230.225.10:63801] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:04.872988 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 91.230.225.200:56981] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:09.294698 2026] [proxy_fcgi:error] [pid 43083:tid 43104] [client 185.192.71.40:27261] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:12.892309 2026] [proxy_fcgi:error] [pid 42973:tid 43059] [client 185.192.71.32:29701] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:17.528671 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 185.192.71.36:20101] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:20.206302 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 185.192.71.37:56793] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:23.271439 2026] [proxy_fcgi:error] [pid 64967:tid 64987] [client 185.192.71.40:21603] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:24.898877 2026] [:error] [pid 42972:tid 43036] [client 91.230.225.20:63247] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/admin.php"] [unique_id "ael8DMOAb-3sOknsk4dD3gAAAFQ"]
[Thu Apr 23 09:55:27.630304 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 91.230.225.15:51557] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:30.977982 2026] [proxy_fcgi:error] [pid 64998:tid 65026] [client 91.230.225.22:63365] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:33.691298 2026] [proxy_fcgi:error] [pid 59700:tid 59704] [client 91.230.225.197:39193] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:33.968301 2026] [:error] [pid 59700:tid 59723] [client 91.230.225.197:39193] [client 91.230.225.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.197, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "ael8FZXyGZJFeAIDWtmUAwAAAVU"]
[Thu Apr 23 09:55:35.543116 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 91.230.225.197:39193] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:37.560316 2026] [proxy_fcgi:error] [pid 25635:tid 25650] [client 91.230.225.15:30869] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:40.260338 2026] [proxy_fcgi:error] [pid 25635:tid 25653] [client 91.230.225.10:63575] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:42.977317 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 91.230.225.209:25279] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:46.414513 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 91.230.225.196:58247] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:50.088309 2026] [proxy_fcgi:error] [pid 42973:tid 43056] [client 185.192.71.23:42529] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:51.743115 2026] [proxy_fcgi:error] [pid 42973:tid 43058] [client 185.192.71.23:42529] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:54.319261 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 91.230.225.201:61525] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:57.116311 2026] [proxy_fcgi:error] [pid 42972:tid 43022] [client 185.192.71.21:42649] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:55:59.062328 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 91.230.225.24:56705] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:56:01.701350 2026] [proxy_fcgi:error] [pid 64967:tid 64980] [client 91.230.225.18:45765] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:56:04.374306 2026] [proxy_fcgi:error] [pid 59700:tid 59722] [client 185.192.71.37:44895] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:56:04.914941 2026] [:error] [pid 42973:tid 43053] [client 91.230.225.23:53967] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ael8NG6I0QqmmmLTHE3zOAAAAIo"]
[Thu Apr 23 09:56:08.536624 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 91.230.225.199:51869] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:56:11.233385 2026] [proxy_fcgi:error] [pid 25635:tid 25640] [client 91.230.225.199:60167] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:56:11.771290 2026] [:error] [pid 64998:tid 65011] [client 185.192.71.30:34807] [client 185.192.71.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.30, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "ael8O4V5EysYcTLjmwh9OQAAAck"]
[Thu Apr 23 09:56:13.404554 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 185.192.71.30:34807] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:56:15.627626 2026] [proxy_fcgi:error] [pid 42971:tid 42995] [client 91.230.225.20:48523] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:56:16.160057 2026] [:error] [pid 64998:tid 65012] [client 91.230.225.206:43363] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/item.php"] [unique_id "ael8QIV5EysYcTLjmwh9pAAAAco"]
[Thu Apr 23 09:56:19.092181 2026] [proxy_fcgi:error] [pid 64967:tid 64971] [client 185.192.71.27:52945] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:56:22.424303 2026] [proxy_fcgi:error] [pid 64967:tid 64991] [client 185.192.71.27:52945] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:56:24.488608 2026] [proxy_fcgi:error] [pid 64967:tid 64982] [client 185.192.71.27:52945] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:56:28.276313 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 185.192.71.22:27167] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:56:30.344669 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 91.230.225.196:37851] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:56:33.597757 2026] [proxy_fcgi:error] [pid 42971:tid 43003] [client 185.192.71.34:44767] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:56:37.186370 2026] [proxy_fcgi:error] [pid 59700:tid 59711] [client 91.230.225.23:22295] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:56:41.801316 2026] [proxy_fcgi:error] [pid 42973:tid 43057] [client 91.230.225.22:62849] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:56:42.339132 2026] [:error] [pid 42972:tid 43029] [client 185.192.71.36:32439] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "ael8WsOAb-3sOknsk4dHWwAAAE0"]
[Thu Apr 23 09:56:46.797932 2026] [proxy_fcgi:error] [pid 43083:tid 43087] [client 185.192.71.35:65429] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:56:50.587772 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 91.230.225.205:30907] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:56:54.411651 2026] [proxy_fcgi:error] [pid 64998:tid 65004] [client 91.230.225.207:63041] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:56:57.702307 2026] [proxy_fcgi:error] [pid 42973:tid 43062] [client 185.192.71.32:60907] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:57:00.698598 2026] [proxy_fcgi:error] [pid 42972:tid 43023] [client 91.230.225.17:35065] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:57:04.406309 2026] [proxy_fcgi:error] [pid 42972:tid 43026] [client 185.192.71.25:61601] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:57:12.241948 2026] [proxy_fcgi:error] [pid 42972:tid 43036] [client 91.230.225.206:55325] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:57:16.498557 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 91.230.225.14:23197] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:57:17.029733 2026] [:error] [pid 43083:tid 43093] [client 91.230.225.22:57107] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "ael8fTC5hrvNXosL83IcGwAAAMg"]
[Thu Apr 23 09:57:19.160371 2026] [proxy_fcgi:error] [pid 25635:tid 25662] [client 91.230.225.10:59429] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:57:23.187309 2026] [proxy_fcgi:error] [pid 64967:tid 64981] [client 185.192.71.27:42797] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:57:23.717154 2026] [:error] [pid 59700:tid 59720] [client 91.230.225.10:27119] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "ael8g5XyGZJFeAIDWtmYiwAAAVI"]
[Thu Apr 23 09:57:27.367348 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 91.230.225.203:47037] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:57:31.052892 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 91.230.225.200:43867] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:57:33.493899 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 91.230.225.10:33375] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:57:34.042483 2026] [:error] [pid 25635:tid 25657] [client 91.230.225.16:33671] [client 91.230.225.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.16, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/wp-login.php"] [unique_id "ael8jsRxv6UsgRGKB3L_4gAAARI"]
[Thu Apr 23 09:57:36.125504 2026] [proxy_fcgi:error] [pid 25635:tid 25657] [client 91.230.225.16:33671] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:57:36.672617 2026] [:error] [pid 65000:tid 65029] [client 91.230.225.22:30359] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "ael8kL6vRb9j6psK2ZYFyQAAAgA"]
[Thu Apr 23 09:57:39.791346 2026] [proxy_fcgi:error] [pid 25635:tid 25641] [client 91.230.225.196:21323] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:57:41.195671 2026] [proxy_fcgi:error] [pid 43083:tid 43105] [client 91.230.225.207:46513] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:57:43.400321 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 185.192.71.21:37883] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:57:46.425299 2026] [proxy_fcgi:error] [pid 43083:tid 43103] [client 91.230.225.203:42693] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:57:50.383325 2026] [proxy_fcgi:error] [pid 43083:tid 43089] [client 91.230.225.197:20857] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:57:53.889760 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 91.230.225.15:42501] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:57:57.838303 2026] [proxy_fcgi:error] [pid 43083:tid 43089] [client 91.230.225.14:34665] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:00.935558 2026] [proxy_fcgi:error] [pid 43083:tid 43105] [client 91.230.225.14:34665] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:05.000307 2026] [proxy_fcgi:error] [pid 64967:tid 64991] [client 91.230.225.198:20909] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:08.083342 2026] [proxy_fcgi:error] [pid 42973:tid 43065] [client 185.92.25.114:64571] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:10.057323 2026] [proxy_fcgi:error] [pid 64967:tid 64984] [client 91.230.225.208:30531] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:10.592547 2026] [:error] [pid 59700:tid 59704] [client 185.192.71.30:39839] [client 185.192.71.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "ael8spXyGZJFeAIDWtma4AAAAUI"]
[Thu Apr 23 09:58:13.582314 2026] [proxy_fcgi:error] [pid 43083:tid 43105] [client 185.192.71.28:31179] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:16.009521 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 185.192.71.22:53267] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:17.406554 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 185.192.71.22:53267] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:19.623538 2026] [proxy_fcgi:error] [pid 42973:tid 43053] [client 185.192.71.33:24957] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:21.786297 2026] [proxy_fcgi:error] [pid 64967:tid 64978] [client 185.192.71.27:41135] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:24.134324 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 91.230.225.14:58501] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:24.414769 2026] [:error] [pid 64998:tid 65019] [client 91.230.225.14:58501] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "ael8wIV5EysYcTLjmwiH2QAAAdE"]
[Thu Apr 23 09:58:27.017319 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 185.192.71.33:28113] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:29.805324 2026] [proxy_fcgi:error] [pid 42971:tid 43001] [client 185.192.71.33:32703] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:31.191371 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 91.230.225.22:48739] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:31.747497 2026] [:error] [pid 42972:tid 43021] [client 185.192.71.31:45397] [client 185.192.71.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.31, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "ael8x8OAb-3sOknsk4dMwgAAAEU"]
[Thu Apr 23 09:58:33.470312 2026] [proxy_fcgi:error] [pid 42972:tid 43021] [client 185.192.71.31:45397] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:35.203307 2026] [proxy_fcgi:error] [pid 43083:tid 43090] [client 185.192.71.22:45171] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:37.387356 2026] [proxy_fcgi:error] [pid 42973:tid 43055] [client 91.230.225.17:63871] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:40.348303 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 91.230.225.17:25003] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:40.898375 2026] [:error] [pid 64998:tid 65013] [client 91.230.225.199:42579] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/about.php"] [unique_id "ael80IV5EysYcTLjmwiIxgAAAcs"]
[Thu Apr 23 09:58:43.759316 2026] [proxy_fcgi:error] [pid 64998:tid 65004] [client 91.230.225.21:47271] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:44.293583 2026] [:error] [pid 59700:tid 59708] [client 91.230.225.11:55447] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/infi.php"] [unique_id "ael81JXyGZJFeAIDWtmcTAAAAUY"]
[Thu Apr 23 09:58:46.048787 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 91.230.225.11:26245] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:48.247676 2026] [proxy_fcgi:error] [pid 59700:tid 59725] [client 91.230.225.11:26245] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:48.802347 2026] [:error] [pid 42971:tid 42992] [client 185.192.71.31:40277] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "ael82DEP2_5RswrH8bHi1QAAAAY"]
[Thu Apr 23 09:58:51.948346 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 91.230.225.10:64319] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:53.748302 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 91.230.225.10:64319] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:55.777121 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 91.230.225.24:58981] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:58:56.323409 2026] [:error] [pid 64998:tid 65011] [client 185.192.71.33:40067] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "ael84IV5EysYcTLjmwiJmQAAAck"]
[Thu Apr 23 09:58:56.854389 2026] [:error] [pid 65000:tid 65032] [client 185.92.25.113:26525] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "ael84L6vRb9j6psK2ZYJegAAAgM"]
[Thu Apr 23 09:58:58.906315 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 91.230.225.23:22957] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:01.157298 2026] [proxy_fcgi:error] [pid 59700:tid 59704] [client 91.230.225.195:59981] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:02.529315 2026] [proxy_fcgi:error] [pid 59700:tid 59720] [client 91.230.225.199:33355] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:06.005312 2026] [proxy_fcgi:error] [pid 64998:tid 65007] [client 185.192.71.27:44223] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:08.158518 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 185.192.71.27:44223] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:08.693817 2026] [:error] [pid 42972:tid 43016] [client 91.230.225.206:56571] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "ael87MOAb-3sOknsk4dOLgAAAEA"]
[Thu Apr 23 09:59:11.350951 2026] [proxy_fcgi:error] [pid 59700:tid 59702] [client 91.230.225.196:30401] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:11.893743 2026] [:error] [pid 64998:tid 65004] [client 91.230.225.203:37731] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "ael874V5EysYcTLjmwiKbgAAAcI"]
[Thu Apr 23 09:59:13.752329 2026] [proxy_fcgi:error] [pid 42972:tid 43017] [client 91.230.225.23:27129] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:15.377311 2026] [proxy_fcgi:error] [pid 42973:tid 43065] [client 91.230.225.208:29093] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:17.736348 2026] [proxy_fcgi:error] [pid 42973:tid 43059] [client 91.230.225.208:29093] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:18.271855 2026] [:error] [pid 42971:tid 43010] [client 185.92.25.114:43101] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/edit.php"] [unique_id "ael89jEP2_5RswrH8bHjvAAAABg"]
[Thu Apr 23 09:59:20.006309 2026] [proxy_fcgi:error] [pid 43083:tid 43097] [client 91.230.225.21:62641] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:21.899402 2026] [proxy_fcgi:error] [pid 42973:tid 43061] [client 91.230.225.195:62499] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:24.626655 2026] [proxy_fcgi:error] [pid 42972:tid 43033] [client 91.230.225.13:38371] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:25.160528 2026] [:error] [pid 42972:tid 43026] [client 91.230.225.199:30245] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "ael8_cOAb-3sOknsk4dOuwAAAEo"]
[Thu Apr 23 09:59:27.083311 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 91.230.225.202:61615] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:29.403316 2026] [proxy_fcgi:error] [pid 25635:tid 25658] [client 185.192.71.39:31555] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:29.941482 2026] [:error] [pid 64998:tid 65006] [client 185.192.71.37:56219] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/click.php"] [unique_id "ael9AYV5EysYcTLjmwiLmAAAAcQ"]
[Thu Apr 23 09:59:31.574197 2026] [proxy_fcgi:error] [pid 42973:tid 43058] [client 185.192.71.27:53999] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:33.991306 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 91.230.225.200:32295] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:36.437314 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 91.230.225.20:56069] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:36.981513 2026] [:error] [pid 64967:tid 64969] [client 91.230.225.198:34089] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "ael9CIAV4GfOOdX8Qzo7PQAAAYA"]
[Thu Apr 23 09:59:39.795338 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 91.230.225.198:22577] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:41.622795 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 91.230.225.198:22577] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:44.636803 2026] [proxy_fcgi:error] [pid 25635:tid 25649] [client 91.230.225.20:62587] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:46.593512 2026] [proxy_fcgi:error] [pid 25635:tid 25639] [client 91.230.225.20:62587] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:48.545324 2026] [proxy_fcgi:error] [pid 25635:tid 25649] [client 91.230.225.198:38029] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:49.801333 2026] [proxy_fcgi:error] [pid 25635:tid 25655] [client 91.230.225.198:38029] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:51.506327 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 185.192.71.32:49555] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:52.053300 2026] [:error] [pid 64998:tid 65013] [client 185.192.71.21:50535] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "ael9GIV5EysYcTLjmwiMRAAAAcs"]
[Thu Apr 23 09:59:52.609215 2026] [:error] [pid 42971:tid 42986] [client 91.230.225.206:25497] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/xl2023.php"] [unique_id "ael9GDEP2_5RswrH8bHk8wAAAAA"]
[Thu Apr 23 09:59:53.162523 2026] [:error] [pid 59700:tid 59706] [client 91.230.225.17:53409] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "ael9GZXyGZJFeAIDWtmfeQAAAUQ"]
[Thu Apr 23 09:59:53.697489 2026] [:error] [pid 42973:tid 43058] [client 91.230.225.18:48775] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "ael9GW6I0QqmmmLTHE38oAAAAI8"]
[Thu Apr 23 09:59:55.253301 2026] [proxy_fcgi:error] [pid 46953:tid 46975] [client 185.192.71.28:49061] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:55.796642 2026] [:error] [pid 64967:tid 64985] [client 91.230.225.201:22321] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "ael9G4AV4GfOOdX8Qzo78QAAAZA"]
[Thu Apr 23 09:59:56.337386 2026] [:error] [pid 59700:tid 59702] [client 91.230.225.198:65381] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ael9HJXyGZJFeAIDWtmffAAAAUA"]
[Thu Apr 23 09:59:57.985306 2026] [proxy_fcgi:error] [pid 42972:tid 43036] [client 185.92.25.113:32163] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:59.142941 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 91.230.225.13:60339] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 09:59:59.701494 2026] [:error] [pid 42973:tid 43066] [client 91.230.225.14:28393] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/index.php"] [unique_id "ael9H26I0QqmmmLTHE384wAAAJc"]
[Thu Apr 23 10:00:00.252376 2026] [:error] [pid 64998:tid 65006] [client 185.92.25.113:62689] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ael9IIV5EysYcTLjmwiMawAAAcQ"]
[Thu Apr 23 10:00:00.797091 2026] [:error] [pid 42973:tid 43066] [client 91.230.225.22:62873] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "ael9IG6I0QqmmmLTHE389gAAAJc"]
[Thu Apr 23 10:00:01.340644 2026] [:error] [pid 64998:tid 65005] [client 185.92.25.113:62577] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "ael9IYV5EysYcTLjmwiMcAAAAcM"]
[Thu Apr 23 10:00:04.096334 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 91.230.225.23:51099] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:04.649677 2026] [:error] [pid 42971:tid 42994] [client 185.192.71.35:42969] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "ael9JDEP2_5RswrH8bHlaAAAAAg"]
[Thu Apr 23 10:00:16.651312 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 185.192.71.38:29375] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:17.216309 2026] [proxy_fcgi:error] [pid 42971:tid 43006] [client 185.192.71.22:61131] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:17.500001 2026] [autoindex:error] [pid 42971:tid 42991] [client 185.192.71.22:61131] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:00:19.351308 2026] [proxy_fcgi:error] [pid 42971:tid 43007] [client 185.192.71.22:61131] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:21.885307 2026] [proxy_fcgi:error] [pid 59700:tid 59704] [client 185.192.71.37:58195] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:22.448480 2026] [autoindex:error] [pid 42973:tid 43046] [client 185.192.71.22:32809] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:00:24.648551 2026] [proxy_fcgi:error] [pid 42973:tid 43048] [client 185.192.71.22:32809] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:26.732328 2026] [proxy_fcgi:error] [pid 42972:tid 43036] [client 185.192.71.40:54409] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:28.365305 2026] [proxy_fcgi:error] [pid 46953:tid 46976] [client 91.230.225.12:47463] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:29.753327 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 91.230.225.207:30045] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:31.231787 2026] [proxy_fcgi:error] [pid 43083:tid 43094] [client 91.230.225.204:29077] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:33.485737 2026] [proxy_fcgi:error] [pid 64967:tid 64988] [client 91.230.225.199:40027] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:34.023959 2026] [autoindex:error] [pid 25635:tid 25645] [client 185.192.71.24:26039] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:00:36.270361 2026] [proxy_fcgi:error] [pid 25635:tid 25651] [client 185.192.71.24:26039] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:36.821807 2026] [autoindex:error] [pid 65000:tid 65052] [client 185.192.71.23:25637] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:00:38.410330 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 185.192.71.23:25637] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:38.949765 2026] [proxy_fcgi:error] [pid 42972:tid 43024] [client 185.192.71.30:47537] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:40.490352 2026] [proxy_fcgi:error] [pid 42972:tid 43031] [client 185.192.71.30:47537] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:43.774532 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 185.192.71.22:20875] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:46.600317 2026] [proxy_fcgi:error] [pid 46953:tid 46961] [client 91.230.225.20:33481] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:47.153079 2026] [autoindex:error] [pid 43083:tid 43088] [client 91.230.225.12:31689] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:00:47.439582 2026] [autoindex:error] [pid 43083:tid 43097] [client 91.230.225.12:31689] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:00:47.717760 2026] [autoindex:error] [pid 43083:tid 43096] [client 91.230.225.12:31689] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:00:47.997536 2026] [proxy_fcgi:error] [pid 43083:tid 43100] [client 91.230.225.12:31689] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:50.234275 2026] [proxy_fcgi:error] [pid 43083:tid 43091] [client 91.230.225.12:31689] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:50.802061 2026] [autoindex:error] [pid 59700:tid 59716] [client 91.230.225.206:43333] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:00:51.100621 2026] [autoindex:error] [pid 59700:tid 59710] [client 91.230.225.206:43333] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:00:52.372010 2026] [proxy_fcgi:error] [pid 59700:tid 59707] [client 91.230.225.206:43333] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:52.647028 2026] [autoindex:error] [pid 59700:tid 59713] [client 91.230.225.206:43333] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:00:52.933902 2026] [autoindex:error] [pid 59700:tid 59717] [client 91.230.225.206:43333] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:00:53.220405 2026] [autoindex:error] [pid 59700:tid 59710] [client 91.230.225.206:43333] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:00:55.637758 2026] [proxy_fcgi:error] [pid 59700:tid 59724] [client 91.230.225.206:43333] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:00:56.594466 2026] [autoindex:error] [pid 25635:tid 25640] [client 185.192.71.21:44635] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:00:56.882545 2026] [autoindex:error] [pid 25635:tid 25652] [client 185.192.71.21:44635] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:00:57.302482 2026] [autoindex:error] [pid 25635:tid 25660] [client 185.192.71.21:44635] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:00:59.060646 2026] [proxy_fcgi:error] [pid 25635:tid 25644] [client 185.192.71.21:44635] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:00.332526 2026] [proxy_fcgi:error] [pid 25635:tid 25641] [client 185.192.71.21:44635] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:01.344107 2026] [proxy_fcgi:error] [pid 25635:tid 25642] [client 185.192.71.21:44635] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:02.060382 2026] [autoindex:error] [pid 46953:tid 46969] [client 185.192.71.21:46601] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:02.335801 2026] [autoindex:error] [pid 46953:tid 46970] [client 185.192.71.21:46601] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:02.468317 2026] [proxy_fcgi:error] [pid 64998:tid 65026] [client 167.71.81.114:56386] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:02.613872 2026] [autoindex:error] [pid 46953:tid 46965] [client 185.192.71.21:46601] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:02.888776 2026] [autoindex:error] [pid 46953:tid 46958] [client 185.192.71.21:46601] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:03.185537 2026] [autoindex:error] [pid 46953:tid 46956] [client 185.192.71.21:46601] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:03.582849 2026] [autoindex:error] [pid 46953:tid 46963] [client 185.192.71.21:46601] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:04.150324 2026] [proxy_fcgi:error] [pid 59700:tid 59713] [client 167.71.81.114:56400] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:04.941818 2026] [proxy_fcgi:error] [pid 46953:tid 46966] [client 185.192.71.21:46601] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:05.687892 2026] [autoindex:error] [pid 65000:tid 65032] [client 91.230.225.207:54793] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:05.976035 2026] [autoindex:error] [pid 65000:tid 65030] [client 91.230.225.207:54793] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:06.343692 2026] [proxy_fcgi:error] [pid 42973:tid 43065] [client 167.71.81.114:56404] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:07.313586 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 91.230.225.207:54793] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:07.365993 2026] [authz_core:error] [pid 65000:tid 65047] [client 167.71.81.114:56418] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Thu Apr 23 10:01:09.511934 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 167.71.81.114:56424] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:10.815615 2026] [proxy_fcgi:error] [pid 46953:tid 46965] [client 91.230.225.197:32589] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:11.374718 2026] [proxy_fcgi:error] [pid 64967:tid 64986] [client 167.71.81.114:56434] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:13.000317 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 185.192.71.24:22263] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:13.559345 2026] [autoindex:error] [pid 42971:tid 42999] [client 185.192.71.38:35873] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:13.718428 2026] [proxy_fcgi:error] [pid 42971:tid 42998] [client 167.71.81.114:54420] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:15.531304 2026] [proxy_fcgi:error] [pid 42971:tid 42987] [client 167.71.81.114:54424] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:15.879319 2026] [proxy_fcgi:error] [pid 42971:tid 43005] [client 185.192.71.38:35873] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:16.241110 2026] [:error] [pid 25635:tid 25641] [client 167.71.81.114:54440] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "ael9bMRxv6UsgRGKB3IG0gAAAQI"]
[Thu Apr 23 10:01:17.353319 2026] [proxy_fcgi:error] [pid 25635:tid 25642] [client 185.192.71.30:21499] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:17.909249 2026] [autoindex:error] [pid 59700:tid 59720] [client 91.230.225.198:65003] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:18.197563 2026] [autoindex:error] [pid 59700:tid 59724] [client 91.230.225.198:65003] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:18.487768 2026] [autoindex:error] [pid 59700:tid 59713] [client 91.230.225.198:65003] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:19.957298 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 91.230.225.198:65003] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:20.840610 2026] [proxy_fcgi:error] [pid 43083:tid 43104] [client 167.71.81.114:54446] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:23.234335 2026] [proxy_fcgi:error] [pid 42971:tid 42987] [client 91.230.225.10:52673] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:24.584449 2026] [:error] [pid 42972:tid 43018] [client 167.71.81.114:60038] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ael9dMOAb-3sOknsk4dRHwAAAEI"]
[Thu Apr 23 10:01:25.050616 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 91.230.225.10:52673] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:25.634115 2026] [autoindex:error] [pid 42973:tid 43058] [client 91.230.225.205:30939] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:25.985359 2026] [autoindex:error] [pid 42973:tid 43061] [client 91.230.225.205:30939] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:27.118655 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 167.71.81.114:60050] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:27.295127 2026] [proxy_fcgi:error] [pid 42973:tid 43055] [client 91.230.225.205:30939] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:28.558308 2026] [proxy_fcgi:error] [pid 64998:tid 65007] [client 185.192.71.26:23089] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:28.717885 2026] [proxy_fcgi:error] [pid 42973:tid 43048] [client 167.71.81.114:60058] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:30.322325 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 185.192.71.25:38447] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:31.019410 2026] [proxy_fcgi:error] [pid 46953:tid 46960] [client 167.71.81.114:60068] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:31.152461 2026] [autoindex:error] [pid 42973:tid 43061] [client 91.230.225.21:57873] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:31.886873 2026] [proxy_fcgi:error] [pid 42973:tid 43045] [client 91.230.225.21:57873] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:32.453751 2026] [autoindex:error] [pid 65000:tid 65038] [client 91.230.225.20:65099] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:32.516682 2026] [proxy_fcgi:error] [pid 42973:tid 43063] [client 167.71.81.114:56960] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:33.519292 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 91.230.225.20:65099] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:34.695330 2026] [proxy_fcgi:error] [pid 46953:tid 46972] [client 167.71.81.114:56976] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:35.240043 2026] [autoindex:error] [pid 42973:tid 43045] [client 91.230.225.202:35855] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:36.291331 2026] [proxy_fcgi:error] [pid 42973:tid 43047] [client 91.230.225.202:35855] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:36.702711 2026] [proxy_fcgi:error] [pid 65000:tid 65041] [client 167.71.81.114:56984] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:36.841647 2026] [autoindex:error] [pid 42972:tid 43032] [client 185.192.71.30:30341] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:37.174432 2026] [autoindex:error] [pid 42972:tid 43028] [client 185.192.71.30:30341] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:37.459364 2026] [autoindex:error] [pid 42972:tid 43029] [client 185.192.71.30:30341] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:38.277359 2026] [proxy_fcgi:error] [pid 42972:tid 43031] [client 167.71.81.114:56986] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:39.413324 2026] [proxy_fcgi:error] [pid 42972:tid 43022] [client 185.192.71.30:30341] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:40.630915 2026] [proxy_fcgi:error] [pid 46953:tid 46956] [client 167.71.81.114:57000] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:41.393276 2026] [:error] [pid 42973:tid 43054] [client 167.71.81.114:34734] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ael9hW6I0QqmmmLTHE0AMgAAAIs"]
[Thu Apr 23 10:01:41.402615 2026] [proxy_fcgi:error] [pid 46953:tid 46980] [client 185.192.71.40:26109] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:41.962170 2026] [autoindex:error] [pid 59700:tid 59703] [client 185.192.71.23:60279] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:42.247119 2026] [autoindex:error] [pid 59700:tid 59706] [client 185.192.71.23:60279] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/random_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:43.868325 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 185.192.71.23:60279] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:43.931532 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 167.71.81.114:34740] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:44.421668 2026] [autoindex:error] [pid 46953:tid 46965] [client 185.192.71.24:40893] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:44.710229 2026] [autoindex:error] [pid 46953:tid 46974] [client 185.192.71.24:40893] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:01:45.788330 2026] [proxy_fcgi:error] [pid 46953:tid 46970] [client 185.192.71.24:40893] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:46.960307 2026] [proxy_fcgi:error] [pid 64967:tid 64985] [client 167.71.81.114:34754] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:49.150587 2026] [proxy_fcgi:error] [pid 25635:tid 25653] [client 167.71.81.114:34762] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:52.030013 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 167.71.81.114:50300] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:53.277356 2026] [proxy_fcgi:error] [pid 42973:tid 43044] [client 167.71.81.114:50316] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:54.610819 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 167.71.81.114:50322] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:56.215376 2026] [proxy_fcgi:error] [pid 46953:tid 46970] [client 167.71.81.114:50338] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:58.131639 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 167.71.81.114:50350] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:01:59.406378 2026] [proxy_fcgi:error] [pid 59700:tid 59706] [client 167.71.81.114:50358] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:02:01.309611 2026] [proxy_fcgi:error] [pid 42973:tid 43053] [client 167.71.81.114:50374] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:02:02.967701 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 167.71.81.114:50862] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:02:05.537302 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 167.71.81.114:50870] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:02:07.430420 2026] [proxy_fcgi:error] [pid 46953:tid 46975] [client 167.71.81.114:50876] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:02:08.057747 2026] [:error] [pid 42973:tid 43062] [client 167.71.81.114:50884] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "ael9oG6I0QqmmmLTHE0BQAAAAJM"]
[Thu Apr 23 10:02:10.700213 2026] [proxy_fcgi:error] [pid 42973:tid 43043] [client 167.71.81.114:50892] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:02:12.397057 2026] [proxy_fcgi:error] [pid 43083:tid 43104] [client 167.71.81.114:50252] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:02:14.526480 2026] [proxy_fcgi:error] [pid 59700:tid 59707] [client 167.71.81.114:50266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:02:16.070307 2026] [proxy_fcgi:error] [pid 42973:tid 43043] [client 167.71.81.114:50280] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 10:02:17.519555 2026] [proxy_fcgi:error] [pid 46953:tid 46965] [client 167.71.81.114:50290] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 15:43:26.191790 2026] [proxy_fcgi:error] [pid 42973:tid 43055] [client 84.17.47.114:48804] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: http://southerncrosscentre.au/
[Thu Apr 23 18:56:53.265179 2026] [proxy_fcgi:error] [pid 42973:tid 43061] [client 209.38.248.17:59136] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:56:54.082429 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 209.38.248.17:59146] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:56:55.057197 2026] [proxy_fcgi:error] [pid 42972:tid 43037] [client 209.38.248.17:59152] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:56:55.834937 2026] [authz_core:error] [pid 64998:tid 65009] [client 209.38.248.17:59164] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Thu Apr 23 18:56:58.055597 2026] [proxy_fcgi:error] [pid 42972:tid 43017] [client 209.38.248.17:59168] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:56:59.065470 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 209.38.248.17:59184] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:00.118907 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 209.38.248.17:59194] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:00.929041 2026] [proxy_fcgi:error] [pid 42972:tid 43030] [client 209.38.248.17:42524] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:01.638920 2026] [:error] [pid 43083:tid 43105] [client 209.38.248.17:42532] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aen6_TC5hrvNXosL83JkHAAAANQ"]
[Thu Apr 23 18:57:03.943362 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 209.38.248.17:42542] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:05.611959 2026] [:error] [pid 65000:tid 65055] [client 209.38.248.17:42556] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aen7Ab6vRb9j6psK2ZYbmQAAAhY"]
[Thu Apr 23 18:57:06.961407 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 209.38.248.17:42558] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:07.753150 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 209.38.248.17:42574] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:08.545121 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 209.38.248.17:42584] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:09.331832 2026] [proxy_fcgi:error] [pid 59700:tid 59718] [client 209.38.248.17:42588] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:10.167285 2026] [proxy_fcgi:error] [pid 42973:tid 43049] [client 209.38.248.17:42604] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:10.981211 2026] [proxy_fcgi:error] [pid 42972:tid 43022] [client 209.38.248.17:53460] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:11.960651 2026] [proxy_fcgi:error] [pid 42972:tid 43026] [client 209.38.248.17:53474] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:13.970819 2026] [proxy_fcgi:error] [pid 42971:tid 43006] [client 209.38.248.17:53488] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:14.521716 2026] [:error] [pid 64998:tid 65003] [client 209.38.248.17:53502] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aen7CoV5EysYcTLjmwgxSAAAAcE"]
[Thu Apr 23 18:57:15.823572 2026] [proxy_fcgi:error] [pid 64998:tid 65026] [client 209.38.248.17:53506] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:16.800949 2026] [proxy_fcgi:error] [pid 59700:tid 59710] [client 209.38.248.17:53508] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:17.804432 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 209.38.248.17:53518] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:19.805946 2026] [proxy_fcgi:error] [pid 65000:tid 65041] [client 209.38.248.17:53530] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:20.791119 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 209.38.248.17:53540] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:21.800095 2026] [proxy_fcgi:error] [pid 42972:tid 43034] [client 209.38.248.17:33382] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:22.827671 2026] [proxy_fcgi:error] [pid 42971:tid 43009] [client 209.38.248.17:33390] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:23.795052 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 209.38.248.17:33400] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:24.803835 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 209.38.248.17:33410] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:25.827152 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 209.38.248.17:33424] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:26.820119 2026] [proxy_fcgi:error] [pid 25635:tid 25654] [client 209.38.248.17:33430] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:27.846699 2026] [proxy_fcgi:error] [pid 42973:tid 43055] [client 209.38.248.17:33440] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:28.864782 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 209.38.248.17:33444] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:29.594780 2026] [:error] [pid 42971:tid 42999] [client 209.38.248.17:33448] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "aen7GTEP2_5RswrH8bEabQAAAA0"]
[Thu Apr 23 18:57:30.818786 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 209.38.248.17:33452] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:31.912738 2026] [proxy_fcgi:error] [pid 43083:tid 43103] [client 209.38.248.17:40584] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:32.876003 2026] [proxy_fcgi:error] [pid 64998:tid 65008] [client 209.38.248.17:40600] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:33.959499 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 209.38.248.17:40602] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 18:57:35.071619 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 209.38.248.17:40614] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 21:16:14.126048 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 52.167.144.58:14107] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 21:16:43.465101 2026] [proxy_fcgi:error] [pid 59700:tid 59713] [client 17.246.15.142:35920] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 21:16:44.101545 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 17.246.15.142:35920] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 21:16:52.408508 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 40.77.167.57:18900] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:07:28.315326 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 51.103.174.167:29205] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:07:30.854938 2026] [proxy_fcgi:error] [pid 25635:tid 25652] [client 51.103.174.167:56617] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:07:36.222528 2026] [proxy_fcgi:error] [pid 42972:tid 43021] [client 51.103.174.167:35335] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:07:39.971089 2026] [proxy_fcgi:error] [pid 42973:tid 43063] [client 51.103.174.167:34252] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:07:43.457355 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 51.103.174.167:33712] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:07:47.333184 2026] [proxy_fcgi:error] [pid 42971:tid 43008] [client 51.103.174.167:35679] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:07:49.905899 2026] [proxy_fcgi:error] [pid 46953:tid 46956] [client 51.103.174.167:34280] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:07:52.061807 2026] [proxy_fcgi:error] [pid 46953:tid 46974] [client 51.103.174.167:57167] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:07:56.725453 2026] [proxy_fcgi:error] [pid 43083:tid 43107] [client 51.103.174.167:40242] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:01.353292 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 51.103.174.167:56613] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:03.837347 2026] [proxy_fcgi:error] [pid 42972:tid 43029] [client 51.103.174.167:33678] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:05.481903 2026] [proxy_fcgi:error] [pid 42972:tid 43025] [client 51.103.174.167:57200] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:07.875587 2026] [proxy_fcgi:error] [pid 25635:tid 25642] [client 51.103.174.167:34259] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:10.789951 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 51.103.174.167:39151] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:12.470426 2026] [proxy_fcgi:error] [pid 42973:tid 43066] [client 51.103.174.167:37879] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:15.169216 2026] [proxy_fcgi:error] [pid 42971:tid 43003] [client 51.103.174.167:57159] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:16.839318 2026] [proxy_fcgi:error] [pid 46953:tid 46971] [client 51.103.174.167:29607] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:19.179094 2026] [proxy_fcgi:error] [pid 46953:tid 46980] [client 51.103.174.167:61416] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:22.790703 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 51.103.174.167:55664] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:24.771016 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 51.103.174.167:29936] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:26.088388 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 51.103.174.167:29174] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:29.614392 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 51.103.174.167:6077] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:32.403750 2026] [proxy_fcgi:error] [pid 43083:tid 43091] [client 51.103.174.167:55346] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:33.279612 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 51.103.174.167:45830] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:34.629670 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 51.103.174.167:50432] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:37.845430 2026] [proxy_fcgi:error] [pid 42972:tid 43024] [client 51.103.174.167:5378] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:39.727084 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 51.103.174.167:62010] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:41.019931 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 51.103.174.167:41911] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:42.267189 2026] [proxy_fcgi:error] [pid 42972:tid 43038] [client 51.103.174.167:31264] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:43.973407 2026] [proxy_fcgi:error] [pid 46953:tid 46966] [client 51.103.174.167:41880] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:48.367773 2026] [proxy_fcgi:error] [pid 43083:tid 43088] [client 51.103.174.167:61398] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:51.495001 2026] [proxy_fcgi:error] [pid 46953:tid 46963] [client 51.103.174.167:35286] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:53.780571 2026] [proxy_fcgi:error] [pid 42972:tid 43019] [client 51.103.174.167:31724] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:55.344574 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 51.103.174.167:5606] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:56.715251 2026] [proxy_fcgi:error] [pid 43083:tid 43092] [client 51.103.174.167:5150] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:08:59.278554 2026] [proxy_fcgi:error] [pid 59700:tid 59724] [client 51.103.174.167:45774] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:09:01.409731 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 51.103.174.167:41053] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:09:03.797486 2026] [proxy_fcgi:error] [pid 25635:tid 25648] [client 51.103.174.167:5556] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:09:06.471036 2026] [proxy_fcgi:error] [pid 64967:tid 64980] [client 51.103.174.167:5964] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:09:09.327586 2026] [proxy_fcgi:error] [pid 42972:tid 43035] [client 51.103.174.167:5529] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:09:14.945524 2026] [proxy_fcgi:error] [pid 25635:tid 25653] [client 51.103.174.167:41086] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:09:19.602827 2026] [proxy_fcgi:error] [pid 43083:tid 43099] [client 51.103.174.167:5128] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:09:22.376467 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 51.103.174.167:55247] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:09:24.507747 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 51.103.174.167:34793] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:09:28.366529 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 51.103.174.167:5167] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:09:31.899863 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 51.103.174.167:5536] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:09:35.347445 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 51.103.174.167:30838] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:09:38.368976 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 51.103.174.167:31185] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:09:42.691109 2026] [proxy_fcgi:error] [pid 42972:tid 43032] [client 51.103.174.167:56574] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:09:44.759308 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 51.103.174.167:30788] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:09:46.756982 2026] [proxy_fcgi:error] [pid 42972:tid 43016] [client 51.103.174.167:30828] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:09:48.956718 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 51.103.174.167:6006] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:09:57.851142 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 51.103.174.167:56516] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:02.936546 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 51.103.174.167:5235] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:06.020929 2026] [proxy_fcgi:error] [pid 59700:tid 59718] [client 51.103.174.167:45821] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:07.783135 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 51.103.174.167:49954] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:09.899274 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 51.103.174.167:40258] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:12.476558 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 51.103.174.167:41067] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:13.826385 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 51.103.174.167:31176] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:15.345496 2026] [proxy_fcgi:error] [pid 42973:tid 43058] [client 51.103.174.167:45804] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:19.745083 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 51.103.174.167:49923] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:22.488801 2026] [proxy_fcgi:error] [pid 43083:tid 43092] [client 51.103.174.167:40883] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:23.467727 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 51.103.174.167:60811] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:25.789355 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 51.103.174.167:37434] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:27.733162 2026] [proxy_fcgi:error] [pid 25635:tid 25662] [client 51.103.174.167:28853] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:28.857504 2026] [proxy_fcgi:error] [pid 42971:tid 43003] [client 51.103.174.167:38638] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:30.863469 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 51.103.174.167:38649] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:33.984315 2026] [proxy_fcgi:error] [pid 46953:tid 46956] [client 51.103.174.167:38639] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:39.043169 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 51.103.174.167:41799] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:46.373514 2026] [proxy_fcgi:error] [pid 42972:tid 43016] [client 51.103.174.167:30849] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:50.640697 2026] [proxy_fcgi:error] [pid 42973:tid 43062] [client 51.103.174.167:47122] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:10:57.851075 2026] [proxy_fcgi:error] [pid 42972:tid 43024] [client 51.103.174.167:39532] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:11:00.441301 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 51.103.174.167:49866] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:11:03.877809 2026] [proxy_fcgi:error] [pid 59700:tid 59709] [client 51.103.174.167:41114] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:11:07.801058 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 51.103.174.167:31797] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:11:12.680563 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 51.103.174.167:60740] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:11:16.659919 2026] [proxy_fcgi:error] [pid 43083:tid 43091] [client 51.103.174.167:38153] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:11:22.096605 2026] [proxy_fcgi:error] [pid 42971:tid 42987] [client 51.103.174.167:56076] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:11:24.124668 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 51.103.174.167:55707] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:11:25.542980 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 51.103.174.167:28586] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:11:28.283042 2026] [proxy_fcgi:error] [pid 64998:tid 65008] [client 51.103.174.167:46423] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:11:29.582333 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 51.103.174.167:42301] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:11:30.753825 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 51.103.174.167:39818] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 22:11:33.259932 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 51.103.174.167:56127] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 23:06:22.718802 2026] [proxy_fcgi:error] [pid 46953:tid 46956] [client 74.7.228.11:49268] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 23:06:23.934860 2026] [proxy_fcgi:error] [pid 46953:tid 46962] [client 74.7.243.224:45034] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 23 23:08:01.075135 2026] [proxy_fcgi:error] [pid 43083:tid 43093] [client 192.175.111.228:12090] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 01:53:12.524989 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 66.249.79.224:35878] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 03:56:24.155747 2026] [proxy_fcgi:error] [pid 19101:tid 19155] [client 17.22.237.240:40192] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 03:56:24.884249 2026] [proxy_fcgi:error] [pid 19101:tid 19145] [client 17.22.237.240:40192] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 04:04:16.020536 2026] [proxy_fcgi:error] [pid 19100:tid 19134] [client 46.32.228.46:54398] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 04:04:54.126799 2026] [proxy_fcgi:error] [pid 19100:tid 19128] [client 209.50.240.123:60390] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 04:05:13.657560 2026] [proxy_fcgi:error] [pid 19101:tid 19160] [client 51.254.34.62:44950] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 04:05:31.151686 2026] [proxy_fcgi:error] [pid 19200:tid 19227] [client 137.220.63.95:40336] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 04:05:43.118955 2026] [proxy_fcgi:error] [pid 19102:tid 19185] [client 31.216.137.18:49310] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 06:08:43.761573 2026] [proxy_fcgi:error] [pid 52129:tid 52140] [client 138.246.253.24:45918] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:16.032168 2026] [proxy_fcgi:error] [pid 19200:tid 19212] [client 167.99.181.249:40018] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:17.205425 2026] [proxy_fcgi:error] [pid 19101:tid 19152] [client 167.99.181.249:40022] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:18.158391 2026] [proxy_fcgi:error] [pid 19101:tid 19137] [client 167.99.181.249:40036] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:18.891422 2026] [authz_core:error] [pid 52129:tid 52155] [client 167.99.181.249:40042] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Fri Apr 24 07:29:21.225378 2026] [proxy_fcgi:error] [pid 19101:tid 19146] [client 167.99.181.249:58006] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:22.348255 2026] [proxy_fcgi:error] [pid 19101:tid 19137] [client 167.99.181.249:58014] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:23.313763 2026] [proxy_fcgi:error] [pid 52129:tid 52137] [client 167.99.181.249:58030] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:24.303372 2026] [proxy_fcgi:error] [pid 19102:tid 19182] [client 167.99.181.249:58034] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:24.967958 2026] [:error] [pid 52129:tid 52141] [client 167.99.181.249:58036] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aeqrVOKCZKf8_u2LKiCz9QAAAQg"]
[Fri Apr 24 07:29:27.326848 2026] [proxy_fcgi:error] [pid 19200:tid 19218] [client 167.99.181.249:58044] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:28.963938 2026] [:error] [pid 52129:tid 52149] [client 167.99.181.249:58056] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aeqrWOKCZKf8_u2LKiC0FAAAARA"]
[Fri Apr 24 07:29:30.273081 2026] [proxy_fcgi:error] [pid 19101:tid 19157] [client 167.99.181.249:58072] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:31.210066 2026] [proxy_fcgi:error] [pid 19101:tid 19153] [client 167.99.181.249:47656] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:32.158321 2026] [proxy_fcgi:error] [pid 52129:tid 52151] [client 167.99.181.249:47666] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:33.103336 2026] [proxy_fcgi:error] [pid 52129:tid 52155] [client 167.99.181.249:47670] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:34.068226 2026] [proxy_fcgi:error] [pid 19102:tid 19180] [client 167.99.181.249:47674] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:35.019489 2026] [proxy_fcgi:error] [pid 19101:tid 19140] [client 167.99.181.249:47688] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:36.009927 2026] [proxy_fcgi:error] [pid 19102:tid 19171] [client 167.99.181.249:47694] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:38.027448 2026] [proxy_fcgi:error] [pid 19200:tid 19217] [client 167.99.181.249:47704] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:38.700217 2026] [:error] [pid 19102:tid 19178] [client 167.99.181.249:47714] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aeqrYgDSgrbLEZbkqD7w5QAAAI4"]
[Fri Apr 24 07:29:39.958728 2026] [proxy_fcgi:error] [pid 19200:tid 19228] [client 167.99.181.249:47726] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:40.960043 2026] [proxy_fcgi:error] [pid 19102:tid 19173] [client 167.99.181.249:55316] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:41.955811 2026] [proxy_fcgi:error] [pid 52129:tid 52157] [client 167.99.181.249:55332] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:43.980857 2026] [proxy_fcgi:error] [pid 19102:tid 19167] [client 167.99.181.249:55346] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:44.990661 2026] [proxy_fcgi:error] [pid 52129:tid 52139] [client 167.99.181.249:55362] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:45.977212 2026] [proxy_fcgi:error] [pid 19200:tid 19225] [client 167.99.181.249:55376] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:47.002880 2026] [proxy_fcgi:error] [pid 19200:tid 19222] [client 167.99.181.249:55388] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:47.985761 2026] [proxy_fcgi:error] [pid 52129:tid 52144] [client 167.99.181.249:55394] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:48.981821 2026] [proxy_fcgi:error] [pid 19102:tid 19164] [client 167.99.181.249:55396] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:49.989823 2026] [proxy_fcgi:error] [pid 52129:tid 52140] [client 167.99.181.249:55406] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:51.004017 2026] [proxy_fcgi:error] [pid 19100:tid 19112] [client 167.99.181.249:39546] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:51.979910 2026] [proxy_fcgi:error] [pid 19100:tid 19115] [client 167.99.181.249:39554] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:52.967868 2026] [proxy_fcgi:error] [pid 19200:tid 19227] [client 167.99.181.249:39562] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:53.658403 2026] [:error] [pid 19200:tid 19218] [client 167.99.181.249:39570] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "aeqrcTQ--M3-tsKAnhHX9QAAAMo"]
[Fri Apr 24 07:29:54.942660 2026] [proxy_fcgi:error] [pid 19200:tid 19222] [client 167.99.181.249:39580] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:55.958845 2026] [proxy_fcgi:error] [pid 19100:tid 19127] [client 167.99.181.249:39582] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:56.968496 2026] [proxy_fcgi:error] [pid 52129:tid 52157] [client 167.99.181.249:39584] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:58.088652 2026] [proxy_fcgi:error] [pid 19200:tid 19210] [client 167.99.181.249:39586] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 07:29:59.050449 2026] [proxy_fcgi:error] [pid 52129:tid 52153] [client 167.99.181.249:39592] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 09:37:09.071395 2026] [:error] [pid 19100:tid 19128] [client 185.198.240.115:44061] [client 185.198.240.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aerJRbF_hzQs4Cqbifdo5QAAABI"]
[Fri Apr 24 09:44:59.274687 2026] [proxy_fcgi:error] [pid 19200:tid 19211] [client 43.165.5.252:63583] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 10:32:05.866334 2026] [proxy_fcgi:error] [pid 17720:tid 17763] [client 194.26.192.182:59379] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 13:09:29.166432 2026] [proxy_fcgi:error] [pid 17808:tid 17810] [client 17.246.19.226:53794] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 13:09:29.837423 2026] [proxy_fcgi:error] [pid 17808:tid 17813] [client 17.246.19.226:53794] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 17:03:36.255036 2026] [proxy_fcgi:error] [pid 17720:tid 17761] [client 35.173.188.184:59404] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 17:03:36.566157 2026] [proxy_fcgi:error] [pid 17720:tid 17755] [client 35.173.188.184:44498] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 17:11:41.292632 2026] [proxy_fcgi:error] [pid 17720:tid 17763] [client 167.99.43.162:35344] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 17:11:42.127918 2026] [proxy_fcgi:error] [pid 17720:tid 17774] [client 167.99.43.162:57684] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: http://southerncrosscentre.au/
[Fri Apr 24 17:11:43.459352 2026] [proxy_fcgi:error] [pid 17720:tid 17767] [client 167.99.43.162:48524] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 17:11:49.830134 2026] [proxy_fcgi:error] [pid 17721:tid 17794] [client 167.99.43.162:48624] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/
[Fri Apr 24 17:58:42.102015 2026] [proxy_fcgi:error] [pid 17719:tid 17736] [client 34.58.239.158:58045] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:20.596356 2026] [proxy_fcgi:error] [pid 17721:tid 17797] [client 20.240.248.51:62895] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:23.052732 2026] [proxy_fcgi:error] [pid 17808:tid 17818] [client 20.240.248.51:50276] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:24.922661 2026] [proxy_fcgi:error] [pid 14531:tid 14550] [client 20.240.248.51:50220] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:26.479147 2026] [proxy_fcgi:error] [pid 17808:tid 17829] [client 20.240.248.51:42925] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:27.799081 2026] [proxy_fcgi:error] [pid 17719:tid 17728] [client 20.240.248.51:43935] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:29.336193 2026] [proxy_fcgi:error] [pid 17719:tid 17730] [client 20.240.248.51:50226] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:30.945245 2026] [proxy_fcgi:error] [pid 17719:tid 17729] [client 20.240.248.51:50255] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:32.985018 2026] [proxy_fcgi:error] [pid 17719:tid 17727] [client 20.240.248.51:59664] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:34.142288 2026] [proxy_fcgi:error] [pid 17721:tid 17805] [client 20.240.248.51:42892] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:35.572687 2026] [proxy_fcgi:error] [pid 4177:tid 4199] [client 20.240.248.51:40325] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:37.204302 2026] [proxy_fcgi:error] [pid 17808:tid 17831] [client 20.240.248.51:48960] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:38.783727 2026] [proxy_fcgi:error] [pid 17719:tid 17747] [client 20.240.248.51:55764] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:40.705786 2026] [proxy_fcgi:error] [pid 4177:tid 4208] [client 20.240.248.51:36636] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:42.073283 2026] [proxy_fcgi:error] [pid 17720:tid 17767] [client 20.240.248.51:51587] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:43.524272 2026] [proxy_fcgi:error] [pid 17720:tid 17771] [client 20.240.248.51:36656] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:46.618290 2026] [proxy_fcgi:error] [pid 17720:tid 17777] [client 20.240.248.51:50177] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:49.890144 2026] [proxy_fcgi:error] [pid 17721:tid 17785] [client 20.240.248.51:56358] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:51.112319 2026] [proxy_fcgi:error] [pid 17721:tid 17791] [client 20.240.248.51:40322] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:52.878445 2026] [proxy_fcgi:error] [pid 17808:tid 17815] [client 20.240.248.51:48967] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:54.747169 2026] [proxy_fcgi:error] [pid 4177:tid 4205] [client 20.240.248.51:62353] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:56.561405 2026] [proxy_fcgi:error] [pid 22114:tid 22134] [client 20.240.248.51:49017] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:58:58.270332 2026] [proxy_fcgi:error] [pid 17721:tid 17785] [client 20.240.248.51:36608] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:00.195383 2026] [proxy_fcgi:error] [pid 17808:tid 17823] [client 20.240.248.51:62904] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:01.801654 2026] [proxy_fcgi:error] [pid 17808:tid 17827] [client 20.240.248.51:43936] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:04.283453 2026] [proxy_fcgi:error] [pid 17808:tid 17812] [client 20.240.248.51:42937] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:07.751097 2026] [proxy_fcgi:error] [pid 22114:tid 22117] [client 20.240.248.51:62893] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:09.744561 2026] [proxy_fcgi:error] [pid 4177:tid 4202] [client 20.240.248.51:49008] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:10.860370 2026] [proxy_fcgi:error] [pid 17808:tid 17821] [client 20.240.248.51:55781] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:12.383667 2026] [proxy_fcgi:error] [pid 4177:tid 4199] [client 20.240.248.51:50283] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:15.932152 2026] [proxy_fcgi:error] [pid 22114:tid 22139] [client 20.240.248.51:50290] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:17.210878 2026] [proxy_fcgi:error] [pid 17720:tid 17778] [client 20.240.248.51:51612] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:21.256850 2026] [proxy_fcgi:error] [pid 4177:tid 4202] [client 20.240.248.51:36651] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:26.974906 2026] [proxy_fcgi:error] [pid 22114:tid 22118] [client 20.240.248.51:49007] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:28.610821 2026] [proxy_fcgi:error] [pid 17720:tid 17777] [client 20.240.248.51:36615] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:30.352409 2026] [proxy_fcgi:error] [pid 4177:tid 4206] [client 20.240.248.51:46326] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:33.448056 2026] [proxy_fcgi:error] [pid 4177:tid 4205] [client 20.240.248.51:64271] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:35.806176 2026] [proxy_fcgi:error] [pid 14531:tid 14555] [client 20.240.248.51:56336] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:37.059300 2026] [proxy_fcgi:error] [pid 17720:tid 17775] [client 20.240.248.51:42938] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:38.445930 2026] [proxy_fcgi:error] [pid 14531:tid 14556] [client 20.240.248.51:42895] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:42.256946 2026] [proxy_fcgi:error] [pid 17720:tid 17762] [client 20.240.248.51:50208] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:44.371058 2026] [proxy_fcgi:error] [pid 4177:tid 4194] [client 20.240.248.51:43953] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:46.093017 2026] [proxy_fcgi:error] [pid 14531:tid 14537] [client 20.240.248.51:36629] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:47.152744 2026] [proxy_fcgi:error] [pid 22114:tid 22135] [client 20.240.248.51:50192] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:48.323421 2026] [proxy_fcgi:error] [pid 17808:tid 17814] [client 20.240.248.51:56357] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 18:59:57.226353 2026] [proxy_fcgi:error] [pid 14531:tid 14552] [client 20.240.248.51:3635] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:15.366803 2026] [proxy_fcgi:error] [pid 17721:tid 17803] [client 20.240.248.51:62346] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:17.223668 2026] [proxy_fcgi:error] [pid 4177:tid 4206] [client 20.240.248.51:50280] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:20.662949 2026] [proxy_fcgi:error] [pid 4177:tid 4198] [client 20.240.248.51:48998] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:22.334889 2026] [proxy_fcgi:error] [pid 17720:tid 17754] [client 20.240.248.51:56370] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:23.809704 2026] [proxy_fcgi:error] [pid 4177:tid 4201] [client 20.240.248.51:59693] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:25.611221 2026] [proxy_fcgi:error] [pid 4177:tid 4196] [client 20.240.248.51:55769] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:26.888822 2026] [proxy_fcgi:error] [pid 17808:tid 17830] [client 20.240.248.51:36624] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:28.194008 2026] [proxy_fcgi:error] [pid 14531:tid 14550] [client 20.240.248.51:55793] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:29.326989 2026] [proxy_fcgi:error] [pid 17808:tid 17831] [client 20.240.248.51:50232] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:29.936485 2026] [proxy_fcgi:error] [pid 17808:tid 17824] [client 20.240.248.51:50232] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:32.172698 2026] [proxy_fcgi:error] [pid 17721:tid 17788] [client 20.240.248.51:59707] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:33.838733 2026] [proxy_fcgi:error] [pid 17720:tid 17766] [client 20.240.248.51:64288] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:35.444854 2026] [proxy_fcgi:error] [pid 22114:tid 22139] [client 20.240.248.51:44612] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:38.071627 2026] [proxy_fcgi:error] [pid 17808:tid 17819] [client 20.240.248.51:64289] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:39.585917 2026] [proxy_fcgi:error] [pid 4177:tid 4188] [client 20.240.248.51:50286] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:42.339987 2026] [proxy_fcgi:error] [pid 17719:tid 17729] [client 20.240.248.51:40334] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:44.162631 2026] [proxy_fcgi:error] [pid 17721:tid 17796] [client 20.240.248.51:43923] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:46.251316 2026] [proxy_fcgi:error] [pid 4177:tid 4193] [client 20.240.248.51:56324] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:47.719114 2026] [proxy_fcgi:error] [pid 14531:tid 14534] [client 20.240.248.51:40368] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:50.831657 2026] [proxy_fcgi:error] [pid 17721:tid 17794] [client 20.240.248.51:64258] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:52.104584 2026] [proxy_fcgi:error] [pid 17720:tid 17758] [client 20.240.248.51:50270] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:53.986659 2026] [proxy_fcgi:error] [pid 4177:tid 4196] [client 20.240.248.51:62973] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:55.197818 2026] [proxy_fcgi:error] [pid 4177:tid 4198] [client 20.240.248.51:40339] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:56.636761 2026] [proxy_fcgi:error] [pid 4177:tid 4209] [client 20.240.248.51:50284] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:00:58.164385 2026] [proxy_fcgi:error] [pid 17719:tid 17745] [client 20.240.248.51:62854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:01.721672 2026] [proxy_fcgi:error] [pid 17808:tid 17827] [client 20.240.248.51:62898] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:04.249407 2026] [proxy_fcgi:error] [pid 17719:tid 17740] [client 20.240.248.51:42885] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:06.218336 2026] [proxy_fcgi:error] [pid 17808:tid 17825] [client 20.240.248.51:62874] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:07.710781 2026] [proxy_fcgi:error] [pid 17808:tid 17811] [client 20.240.248.51:44654] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:09.655444 2026] [proxy_fcgi:error] [pid 4177:tid 4199] [client 20.240.248.51:43906] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:13.265146 2026] [proxy_fcgi:error] [pid 17808:tid 17826] [client 20.240.248.51:42911] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:14.888975 2026] [proxy_fcgi:error] [pid 22114:tid 22127] [client 20.240.248.51:50271] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:22.111142 2026] [proxy_fcgi:error] [pid 4177:tid 4204] [client 20.240.248.51:64312] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:24.737314 2026] [proxy_fcgi:error] [pid 4177:tid 4198] [client 20.240.248.51:44649] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:26.910273 2026] [proxy_fcgi:error] [pid 4177:tid 4202] [client 20.240.248.51:3758] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:31.434603 2026] [proxy_fcgi:error] [pid 14531:tid 14549] [client 20.240.248.51:40320] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:32.737653 2026] [proxy_fcgi:error] [pid 22114:tid 22130] [client 20.240.248.51:50282] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:38.401092 2026] [proxy_fcgi:error] [pid 14531:tid 14554] [client 20.240.248.51:47101] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:40.052904 2026] [proxy_fcgi:error] [pid 17721:tid 17789] [client 20.240.248.51:59685] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:42.268311 2026] [proxy_fcgi:error] [pid 17720:tid 17773] [client 20.240.248.51:3775] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:48.878077 2026] [proxy_fcgi:error] [pid 17808:tid 17826] [client 20.240.248.51:64275] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:51.705366 2026] [proxy_fcgi:error] [pid 17808:tid 17828] [client 20.240.248.51:62952] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:53.682175 2026] [proxy_fcgi:error] [pid 17719:tid 17739] [client 20.240.248.51:47082] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:01:59.743451 2026] [proxy_fcgi:error] [pid 4177:tid 4190] [client 20.240.248.51:58260] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:02:02.133566 2026] [proxy_fcgi:error] [pid 17808:tid 17824] [client 20.240.248.51:50253] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:02:07.474417 2026] [proxy_fcgi:error] [pid 17719:tid 17727] [client 20.240.248.51:62177] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:02:08.884486 2026] [proxy_fcgi:error] [pid 17808:tid 17833] [client 20.240.248.51:62901] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:02:09.825510 2026] [:error] [pid 17720:tid 17761] [client 20.240.248.51:50179] [client 20.240.248.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "aetNsehlUs6BS3Ng7_V4lAAAAMc"]
[Fri Apr 24 19:02:11.171831 2026] [proxy_fcgi:error] [pid 17719:tid 17748] [client 20.240.248.51:44670] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:02:12.282916 2026] [proxy_fcgi:error] [pid 17720:tid 17758] [client 20.240.248.51:40355] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:02:17.976233 2026] [proxy_fcgi:error] [pid 17720:tid 17758] [client 20.240.248.51:50229] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:02:25.438742 2026] [proxy_fcgi:error] [pid 17808:tid 17822] [client 20.240.248.51:59669] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:00.351053 2026] [proxy_fcgi:error] [pid 17808:tid 17817] [client 20.240.248.51:64316] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:01.622719 2026] [proxy_fcgi:error] [pid 17808:tid 17824] [client 20.240.248.51:45154] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:03.299107 2026] [proxy_fcgi:error] [pid 17720:tid 17768] [client 20.240.248.51:64315] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:05.178807 2026] [proxy_fcgi:error] [pid 4177:tid 4201] [client 20.240.248.51:45177] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:06.549398 2026] [proxy_fcgi:error] [pid 4177:tid 4204] [client 20.240.248.51:64283] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:08.013062 2026] [proxy_fcgi:error] [pid 4177:tid 4205] [client 20.240.248.51:3728] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:09.393599 2026] [proxy_fcgi:error] [pid 17719:tid 17742] [client 20.240.248.51:43945] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:10.677206 2026] [proxy_fcgi:error] [pid 17808:tid 17817] [client 20.240.248.51:47057] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:12.380812 2026] [proxy_fcgi:error] [pid 4177:tid 4186] [client 20.240.248.51:62167] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:13.851373 2026] [proxy_fcgi:error] [pid 14531:tid 14547] [client 20.240.248.51:50303] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:15.784553 2026] [proxy_fcgi:error] [pid 17720:tid 17774] [client 20.240.248.51:47030] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:20.377322 2026] [proxy_fcgi:error] [pid 17720:tid 17767] [client 20.240.248.51:46315] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:21.592822 2026] [proxy_fcgi:error] [pid 4177:tid 4197] [client 20.240.248.51:50223] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:23.089957 2026] [proxy_fcgi:error] [pid 17720:tid 17777] [client 20.240.248.51:62933] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:25.696550 2026] [proxy_fcgi:error] [pid 17721:tid 17786] [client 20.240.248.51:43922] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:27.164736 2026] [proxy_fcgi:error] [pid 4177:tid 4190] [client 20.240.248.51:41171] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:28.847306 2026] [proxy_fcgi:error] [pid 17720:tid 17774] [client 20.240.248.51:47023] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:31.580871 2026] [proxy_fcgi:error] [pid 17721:tid 17781] [client 20.240.248.51:55615] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:33.501452 2026] [proxy_fcgi:error] [pid 22114:tid 22140] [client 20.240.248.51:50240] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:48.596258 2026] [proxy_fcgi:error] [pid 17719:tid 17731] [client 20.240.248.51:58294] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:03:56.162849 2026] [proxy_fcgi:error] [pid 17808:tid 17828] [client 20.240.248.51:45140] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:00.399694 2026] [proxy_fcgi:error] [pid 14531:tid 14543] [client 20.240.248.51:47075] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:04.304461 2026] [proxy_fcgi:error] [pid 17719:tid 17751] [client 20.240.248.51:3920] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:09.736169 2026] [proxy_fcgi:error] [pid 17808:tid 17811] [client 20.240.248.51:55935] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:11.925966 2026] [proxy_fcgi:error] [pid 17719:tid 17747] [client 20.240.248.51:3911] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:15.300426 2026] [proxy_fcgi:error] [pid 17808:tid 17819] [client 20.240.248.51:35973] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:16.558043 2026] [proxy_fcgi:error] [pid 17720:tid 17772] [client 20.240.248.51:55574] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:21.316615 2026] [proxy_fcgi:error] [pid 17721:tid 17781] [client 20.240.248.51:3957] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:23.740879 2026] [proxy_fcgi:error] [pid 17720:tid 17765] [client 20.240.248.51:47027] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:28.039103 2026] [proxy_fcgi:error] [pid 4177:tid 4204] [client 20.240.248.51:62155] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:30.701194 2026] [proxy_fcgi:error] [pid 4177:tid 4209] [client 20.240.248.51:3990] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:33.220134 2026] [proxy_fcgi:error] [pid 4177:tid 4208] [client 20.240.248.51:57730] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:34.769411 2026] [proxy_fcgi:error] [pid 17721:tid 17802] [client 20.240.248.51:46985] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:35.922415 2026] [proxy_fcgi:error] [pid 17721:tid 17798] [client 20.240.248.51:3796] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:36.927661 2026] [proxy_fcgi:error] [pid 17808:tid 17822] [client 20.240.248.51:35987] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:38.336282 2026] [proxy_fcgi:error] [pid 17719:tid 17737] [client 20.240.248.51:36020] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:39.432617 2026] [proxy_fcgi:error] [pid 4177:tid 4193] [client 20.240.248.51:59643] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:41.434706 2026] [proxy_fcgi:error] [pid 4177:tid 4186] [client 20.240.248.51:3143] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:45.400879 2026] [proxy_fcgi:error] [pid 17808:tid 17834] [client 20.240.248.51:55883] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:46.811007 2026] [proxy_fcgi:error] [pid 4177:tid 4207] [client 20.240.248.51:64851] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:48.349982 2026] [proxy_fcgi:error] [pid 17721:tid 17805] [client 20.240.248.51:64841] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:49.775093 2026] [proxy_fcgi:error] [pid 17721:tid 17796] [client 20.240.248.51:55925] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:51.208617 2026] [proxy_fcgi:error] [pid 17721:tid 17783] [client 20.240.248.51:36013] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:04:52.961359 2026] [proxy_fcgi:error] [pid 4177:tid 4197] [client 20.240.248.51:55877] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:05:17.008881 2026] [proxy_fcgi:error] [pid 4177:tid 4192] [client 20.240.248.51:4018] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:05:18.661761 2026] [proxy_fcgi:error] [pid 4177:tid 4187] [client 20.240.248.51:35979] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:05:19.950155 2026] [proxy_fcgi:error] [pid 14531:tid 14557] [client 20.240.248.51:64862] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri Apr 24 19:49:44.868924 2026] [:error] [pid 17808:tid 17821] [client 4.235.74.173:45220] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aetY2OarbOEFI8qshvIkOgAAAEs"]
[Fri Apr 24 19:49:46.205057 2026] [:error] [pid 4177:tid 4198] [client 4.235.74.173:22069] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aetY2n2asKnvdrSe0x7q3gAAAY0"]
[Fri Apr 24 19:49:49.149409 2026] [:error] [pid 17721:tid 17801] [client 4.235.74.173:54183] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aetY3eFXXkLeyDnfk_8vMAAAABQ"]
[Fri Apr 24 19:49:52.075026 2026] [:error] [pid 14531:tid 14555] [client 4.235.74.173:45234] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aetY4HfLU2gw-6KR-Ga6jQAAAVY"]
[Fri Apr 24 19:52:02.843999 2026] [:error] [pid 4177:tid 4189] [client 195.178.110.241:41574] [client 195.178.110.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "aetZYn2asKnvdrSe0x7sOgAAAYQ"]
[Sat Apr 25 00:14:58.597043 2026] [:error] [pid 42792:tid 42836] [client 45.131.195.109:32007] [client 45.131.195.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aeuXAtNi9qR4GtafpfG9FwAAAg4"]
[Sat Apr 25 01:09:27.886308 2026] [proxy_fcgi:error] [pid 42755:tid 42773] [client 74.248.100.218:35185] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:09:30.706719 2026] [proxy_fcgi:error] [pid 42792:tid 42831] [client 74.248.100.218:35169] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:09:33.692095 2026] [proxy_fcgi:error] [pid 42791:tid 42798] [client 74.248.100.218:36389] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:09:37.716335 2026] [proxy_fcgi:error] [pid 14989:tid 14992] [client 74.248.100.218:31338] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:09:41.590265 2026] [proxy_fcgi:error] [pid 42755:tid 42762] [client 74.248.100.218:31333] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:09:44.063682 2026] [proxy_fcgi:error] [pid 42792:tid 42845] [client 74.248.100.218:37435] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:09:46.526488 2026] [proxy_fcgi:error] [pid 42852:tid 42864] [client 74.248.100.218:49948] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:09:49.349657 2026] [proxy_fcgi:error] [pid 42792:tid 42835] [client 74.248.100.218:45227] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:10:18.487921 2026] [proxy_fcgi:error] [pid 42791:tid 42800] [client 74.248.100.218:35527] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:10:21.550829 2026] [proxy_fcgi:error] [pid 14989:tid 14997] [client 74.248.100.218:5741] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:10:23.281711 2026] [proxy_fcgi:error] [pid 42755:tid 42775] [client 74.248.100.218:50702] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:10:25.226084 2026] [proxy_fcgi:error] [pid 14989:tid 15014] [client 74.248.100.218:35531] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:10:27.043978 2026] [proxy_fcgi:error] [pid 14989:tid 15003] [client 74.248.100.218:35952] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:10:30.396923 2026] [proxy_fcgi:error] [pid 14989:tid 15012] [client 74.248.100.218:31318] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:10:32.438020 2026] [proxy_fcgi:error] [pid 42791:tid 42814] [client 74.248.100.218:34545] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:10:35.012913 2026] [proxy_fcgi:error] [pid 42852:tid 42861] [client 74.248.100.218:49979] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:10:37.871693 2026] [proxy_fcgi:error] [pid 42792:tid 42834] [client 74.248.100.218:34008] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:10:41.141893 2026] [proxy_fcgi:error] [pid 14989:tid 15000] [client 74.248.100.218:35930] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:10:41.724179 2026] [proxy_fcgi:error] [pid 14989:tid 15004] [client 74.248.100.218:35930] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:10:45.835833 2026] [proxy_fcgi:error] [pid 14989:tid 14993] [client 74.248.100.218:39326] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:10:47.158165 2026] [proxy_fcgi:error] [pid 42852:tid 42874] [client 74.248.100.218:35911] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:10:49.084428 2026] [proxy_fcgi:error] [pid 14989:tid 15005] [client 74.248.100.218:35928] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:10:53.775093 2026] [proxy_fcgi:error] [pid 14989:tid 15004] [client 74.248.100.218:45190] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:10:55.673677 2026] [proxy_fcgi:error] [pid 42852:tid 42873] [client 74.248.100.218:35953] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:00.306802 2026] [proxy_fcgi:error] [pid 42791:tid 42817] [client 74.248.100.218:34500] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:01.827809 2026] [proxy_fcgi:error] [pid 42852:tid 42857] [client 74.248.100.218:41373] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:04.580019 2026] [proxy_fcgi:error] [pid 14989:tid 15015] [client 74.248.100.218:60401] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:09.267543 2026] [proxy_fcgi:error] [pid 14989:tid 15001] [client 74.248.100.218:49589] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:11.991931 2026] [proxy_fcgi:error] [pid 42791:tid 42815] [client 74.248.100.218:34795] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:14.617460 2026] [proxy_fcgi:error] [pid 14989:tid 15008] [client 74.248.100.218:34767] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:17.602295 2026] [proxy_fcgi:error] [pid 42792:tid 42846] [client 74.248.100.218:41312] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:22.401056 2026] [proxy_fcgi:error] [pid 42755:tid 42763] [client 74.248.100.218:34738] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:25.536677 2026] [proxy_fcgi:error] [pid 42852:tid 42856] [client 74.248.100.218:43207] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:27.757452 2026] [proxy_fcgi:error] [pid 42852:tid 42878] [client 74.248.100.218:48568] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:30.085332 2026] [proxy_fcgi:error] [pid 14989:tid 14993] [client 74.248.100.218:57833] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:32.227694 2026] [proxy_fcgi:error] [pid 42791:tid 42806] [client 74.248.100.218:5632] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:36.402183 2026] [proxy_fcgi:error] [pid 42791:tid 42815] [client 74.248.100.218:5647] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:41.080726 2026] [proxy_fcgi:error] [pid 14989:tid 15001] [client 74.248.100.218:52889] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:45.924405 2026] [proxy_fcgi:error] [pid 14989:tid 14998] [client 74.248.100.218:33511] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:48.594751 2026] [proxy_fcgi:error] [pid 42791:tid 42818] [client 74.248.100.218:37224] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:52.590202 2026] [proxy_fcgi:error] [pid 14989:tid 14991] [client 74.248.100.218:53739] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:54.242764 2026] [proxy_fcgi:error] [pid 42852:tid 42864] [client 74.248.100.218:31772] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:11:56.526200 2026] [proxy_fcgi:error] [pid 14989:tid 14998] [client 74.248.100.218:36154] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:12:00.997845 2026] [proxy_fcgi:error] [pid 14989:tid 15006] [client 74.248.100.218:52966] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:12:05.339243 2026] [proxy_fcgi:error] [pid 14989:tid 14998] [client 74.248.100.218:31798] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:12:12.804521 2026] [proxy_fcgi:error] [pid 14989:tid 14998] [client 74.248.100.218:33526] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:12:16.999320 2026] [proxy_fcgi:error] [pid 42852:tid 42878] [client 74.248.100.218:62815] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:12:20.786494 2026] [proxy_fcgi:error] [pid 42755:tid 42762] [client 74.248.100.218:36194] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:12:23.309188 2026] [proxy_fcgi:error] [pid 42791:tid 42804] [client 74.248.100.218:41716] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:12:26.262251 2026] [proxy_fcgi:error] [pid 14989:tid 15007] [client 74.248.100.218:36905] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:12:29.798499 2026] [proxy_fcgi:error] [pid 14989:tid 14999] [client 74.248.100.218:33020] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:12:32.782388 2026] [proxy_fcgi:error] [pid 42791:tid 42813] [client 74.248.100.218:45684] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:12:35.031201 2026] [proxy_fcgi:error] [pid 14989:tid 14999] [client 74.248.100.218:33020] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:12:38.826288 2026] [proxy_fcgi:error] [pid 42792:tid 42829] [client 74.248.100.218:44493] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:12:43.419960 2026] [proxy_fcgi:error] [pid 42791:tid 42816] [client 74.248.100.218:60377] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:12:44.035176 2026] [proxy_fcgi:error] [pid 42791:tid 42810] [client 74.248.100.218:60377] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:12:55.764637 2026] [proxy_fcgi:error] [pid 42792:tid 42834] [client 74.248.100.218:63149] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:12:57.329836 2026] [proxy_fcgi:error] [pid 14989:tid 15009] [client 74.248.100.218:30855] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:13:01.762546 2026] [proxy_fcgi:error] [pid 42852:tid 42862] [client 74.248.100.218:59476] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:13:03.881408 2026] [proxy_fcgi:error] [pid 14989:tid 14991] [client 74.248.100.218:57874] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:13:07.604396 2026] [proxy_fcgi:error] [pid 14989:tid 15014] [client 74.248.100.218:50403] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:13:11.537453 2026] [proxy_fcgi:error] [pid 42852:tid 42876] [client 74.248.100.218:38085] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:13:13.879980 2026] [proxy_fcgi:error] [pid 14989:tid 14992] [client 74.248.100.218:53693] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:13:14.534510 2026] [proxy_fcgi:error] [pid 14989:tid 15015] [client 74.248.100.218:53693] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:13:16.196865 2026] [proxy_fcgi:error] [pid 42852:tid 42872] [client 74.248.100.218:37604] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:13:22.911822 2026] [proxy_fcgi:error] [pid 42792:tid 42837] [client 74.248.100.218:60013] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:13:28.642094 2026] [proxy_fcgi:error] [pid 42792:tid 42827] [client 74.248.100.218:36450] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:13:30.584210 2026] [proxy_fcgi:error] [pid 42852:tid 42873] [client 74.248.100.218:35378] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:13:34.435687 2026] [proxy_fcgi:error] [pid 42791:tid 42797] [client 74.248.100.218:36750] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:13:48.199156 2026] [proxy_fcgi:error] [pid 42852:tid 42870] [client 74.248.100.218:32561] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:13:50.055657 2026] [proxy_fcgi:error] [pid 42792:tid 42835] [client 74.248.100.218:38561] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:13:54.184977 2026] [proxy_fcgi:error] [pid 42755:tid 42768] [client 74.248.100.218:5925] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:13:55.943866 2026] [proxy_fcgi:error] [pid 14989:tid 14991] [client 74.248.100.218:48630] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:13:57.522480 2026] [proxy_fcgi:error] [pid 42792:tid 42833] [client 74.248.100.218:48583] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:13:59.294837 2026] [proxy_fcgi:error] [pid 42852:tid 42874] [client 74.248.100.218:36837] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:14:03.144996 2026] [proxy_fcgi:error] [pid 14989:tid 15003] [client 74.248.100.218:53230] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:14:07.122305 2026] [proxy_fcgi:error] [pid 14989:tid 14995] [client 74.248.100.218:48630] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:14:10.412564 2026] [proxy_fcgi:error] [pid 42792:tid 42835] [client 74.248.100.218:37306] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:14:16.469989 2026] [proxy_fcgi:error] [pid 42792:tid 42842] [client 74.248.100.218:49660] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:14:19.432466 2026] [proxy_fcgi:error] [pid 14989:tid 15005] [client 74.248.100.218:37330] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:14:26.014784 2026] [proxy_fcgi:error] [pid 14989:tid 14992] [client 74.248.100.218:43158] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:14:28.893607 2026] [proxy_fcgi:error] [pid 42791:tid 42799] [client 74.248.100.218:49637] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:14:33.562122 2026] [proxy_fcgi:error] [pid 42792:tid 42842] [client 74.248.100.218:60446] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:14:36.420827 2026] [proxy_fcgi:error] [pid 42792:tid 42838] [client 74.248.100.218:49647] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:14:39.048874 2026] [proxy_fcgi:error] [pid 42792:tid 42834] [client 74.248.100.218:32636] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:14:41.125264 2026] [proxy_fcgi:error] [pid 14989:tid 14998] [client 74.248.100.218:33811] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:14:43.864601 2026] [proxy_fcgi:error] [pid 42792:tid 42833] [client 74.248.100.218:5853] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:14:46.673582 2026] [proxy_fcgi:error] [pid 14989:tid 14994] [client 74.248.100.218:5423] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:14:53.042777 2026] [proxy_fcgi:error] [pid 42791:tid 42795] [client 74.248.100.218:12280] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:14:58.713563 2026] [proxy_fcgi:error] [pid 42852:tid 42856] [client 74.248.100.218:34374] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:15:03.787150 2026] [proxy_fcgi:error] [pid 42792:tid 42824] [client 74.248.100.218:12267] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:15:06.631163 2026] [proxy_fcgi:error] [pid 42755:tid 42763] [client 74.248.100.218:34479] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:15:10.087158 2026] [proxy_fcgi:error] [pid 42791:tid 42806] [client 74.248.100.218:56828] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:15:13.157161 2026] [proxy_fcgi:error] [pid 42852:tid 42860] [client 74.248.100.218:5797] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:15:13.742097 2026] [proxy_fcgi:error] [pid 42852:tid 42862] [client 74.248.100.218:5797] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:15:16.681030 2026] [proxy_fcgi:error] [pid 42852:tid 42869] [client 74.248.100.218:34486] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:15:17.905644 2026] [proxy_fcgi:error] [pid 14989:tid 15002] [client 74.248.100.218:34458] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:15:20.298219 2026] [proxy_fcgi:error] [pid 42791:tid 42815] [client 74.248.100.218:44936] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:15:24.051464 2026] [proxy_fcgi:error] [pid 14989:tid 14995] [client 74.248.100.218:5822] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:15:27.438764 2026] [proxy_fcgi:error] [pid 42791:tid 42805] [client 74.248.100.218:32599] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:15:30.382592 2026] [proxy_fcgi:error] [pid 42792:tid 42824] [client 74.248.100.218:44948] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:15:32.881377 2026] [proxy_fcgi:error] [pid 14989:tid 15002] [client 74.248.100.218:38344] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:15:40.682065 2026] [proxy_fcgi:error] [pid 14989:tid 15001] [client 74.248.100.218:38507] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:15:44.072879 2026] [proxy_fcgi:error] [pid 14989:tid 15009] [client 74.248.100.218:60459] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:15:45.455514 2026] [proxy_fcgi:error] [pid 14989:tid 15015] [client 74.248.100.218:34493] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:15:49.882298 2026] [proxy_fcgi:error] [pid 14989:tid 15014] [client 74.248.100.218:38464] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 01:15:53.083335 2026] [proxy_fcgi:error] [pid 14989:tid 15011] [client 74.248.100.218:12252] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:37:29.479412 2026] [proxy_fcgi:error] [pid 40831:tid 40889] [client 91.134.35.95:57695] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:37:31.823013 2026] [proxy_fcgi:error] [pid 40829:tid 40845] [client 91.134.35.95:57917] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:46:58.166348 2026] [proxy_fcgi:error] [pid 44425:tid 44433] [client 74.248.149.197:22487] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:00.181207 2026] [proxy_fcgi:error] [pid 44319:tid 44341] [client 74.248.149.197:16704] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:02.644766 2026] [proxy_fcgi:error] [pid 44321:tid 44384] [client 74.248.149.197:25934] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:05.691080 2026] [proxy_fcgi:error] [pid 44320:tid 44365] [client 74.248.149.197:29136] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:07.043050 2026] [proxy_fcgi:error] [pid 44320:tid 44375] [client 74.248.149.197:12758] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:09.068921 2026] [proxy_fcgi:error] [pid 44319:tid 44338] [client 74.248.149.197:13465] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:11.421859 2026] [proxy_fcgi:error] [pid 44321:tid 44389] [client 74.248.149.197:15344] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:17.274897 2026] [proxy_fcgi:error] [pid 44319:tid 44344] [client 74.248.149.197:15359] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:21.209367 2026] [proxy_fcgi:error] [pid 44320:tid 44356] [client 74.248.149.197:25163] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:22.346019 2026] [proxy_fcgi:error] [pid 44319:tid 44338] [client 74.248.149.197:23531] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:25.658914 2026] [proxy_fcgi:error] [pid 44425:tid 44427] [client 74.248.149.197:37685] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:27.328012 2026] [proxy_fcgi:error] [pid 44321:tid 44388] [client 74.248.149.197:29452] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:28.561274 2026] [proxy_fcgi:error] [pid 44425:tid 44441] [client 74.248.149.197:17782] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:31.144064 2026] [proxy_fcgi:error] [pid 44425:tid 44439] [client 74.248.149.197:37680] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:33.631509 2026] [proxy_fcgi:error] [pid 44320:tid 44358] [client 74.248.149.197:25210] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:35.324965 2026] [proxy_fcgi:error] [pid 44425:tid 44432] [client 74.248.149.197:14346] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:37.001786 2026] [proxy_fcgi:error] [pid 44321:tid 44396] [client 74.248.149.197:29447] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:38.360482 2026] [proxy_fcgi:error] [pid 44425:tid 44440] [client 74.248.149.197:37686] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:40.491986 2026] [proxy_fcgi:error] [pid 44319:tid 44338] [client 74.248.149.197:18707] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:42.829690 2026] [proxy_fcgi:error] [pid 44319:tid 44342] [client 74.248.149.197:13497] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:44.365618 2026] [proxy_fcgi:error] [pid 44319:tid 44341] [client 74.248.149.197:25885] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:46.402398 2026] [proxy_fcgi:error] [pid 44321:tid 44391] [client 74.248.149.197:13285] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:47.495012 2026] [proxy_fcgi:error] [pid 44320:tid 44360] [client 74.248.149.197:19955] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:48.850066 2026] [proxy_fcgi:error] [pid 44321:tid 44407] [client 74.248.149.197:13191] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:50.376170 2026] [proxy_fcgi:error] [pid 44425:tid 44432] [client 74.248.149.197:15316] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:51.963120 2026] [proxy_fcgi:error] [pid 44425:tid 44437] [client 74.248.149.197:25977] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:53.315105 2026] [proxy_fcgi:error] [pid 44320:tid 44378] [client 74.248.149.197:29472] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:54.736344 2026] [proxy_fcgi:error] [pid 44320:tid 44357] [client 74.248.149.197:25168] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:56.049068 2026] [proxy_fcgi:error] [pid 44319:tid 44343] [client 74.248.149.197:19941] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:56.955082 2026] [proxy_fcgi:error] [pid 44425:tid 44441] [client 74.248.149.197:25698] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:58.491331 2026] [proxy_fcgi:error] [pid 44320:tid 44358] [client 74.248.149.197:25211] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:47:59.614659 2026] [proxy_fcgi:error] [pid 44320:tid 44368] [client 74.248.149.197:17217] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:48:01.094641 2026] [proxy_fcgi:error] [pid 44425:tid 44433] [client 74.248.149.197:25973] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:48:02.400613 2026] [proxy_fcgi:error] [pid 44321:tid 44390] [client 74.248.149.197:37644] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:48:03.610582 2026] [proxy_fcgi:error] [pid 44425:tid 44439] [client 74.248.149.197:17275] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:48:05.910636 2026] [proxy_fcgi:error] [pid 44425:tid 44441] [client 74.248.149.197:9579] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:48:08.896428 2026] [proxy_fcgi:error] [pid 44321:tid 44385] [client 74.248.149.197:13484] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:48:10.076102 2026] [proxy_fcgi:error] [pid 44425:tid 44448] [client 74.248.149.197:10289] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:48:11.252631 2026] [proxy_fcgi:error] [pid 44320:tid 44364] [client 74.248.149.197:17761] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:48:13.412011 2026] [proxy_fcgi:error] [pid 44320:tid 44373] [client 74.248.149.197:29476] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:48:16.077316 2026] [proxy_fcgi:error] [pid 44321:tid 44397] [client 74.248.149.197:17741] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:48:17.584915 2026] [proxy_fcgi:error] [pid 44320:tid 44363] [client 74.248.149.197:21895] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:48:20.560481 2026] [proxy_fcgi:error] [pid 44320:tid 44377] [client 74.248.149.197:8956] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:48:22.266054 2026] [proxy_fcgi:error] [pid 44425:tid 44434] [client 74.248.149.197:37633] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:48:26.234746 2026] [proxy_fcgi:error] [pid 44320:tid 44366] [client 74.248.149.197:8893] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:48:32.318694 2026] [proxy_fcgi:error] [pid 44319:tid 44349] [client 74.248.149.197:21891] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 03:48:34.410688 2026] [proxy_fcgi:error] [pid 44319:tid 44353] [client 74.248.149.197:14393] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 04:19:21.654490 2026] [proxy_fcgi:error] [pid 44425:tid 44430] [client 74.7.228.11:42110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 04:58:28.269843 2026] [proxy_fcgi:error] [pid 46083:tid 46097] [client 209.141.32.143:50012] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 06:26:34.293616 2026] [proxy_fcgi:error] [pid 44321:tid 44387] [client 74.7.175.165:49922] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 06:26:35.530401 2026] [proxy_fcgi:error] [pid 44425:tid 44428] [client 74.7.227.159:52474] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 06:32:55.116000 2026] [autoindex:error] [pid 44425:tid 44432] [client 213.136.67.3:55998] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Apr 25 08:48:38.469218 2026] [proxy_fcgi:error] [pid 44319:tid 44352] [client 192.175.111.242:7825] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 14:23:49.168770 2026] [proxy_fcgi:error] [pid 44320:tid 44380] [client 138.246.253.24:38940] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 18:12:34.164683 2026] [proxy_fcgi:error] [pid 16107:tid 16137] [client 62.141.44.236:37590] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:33:07.270663 2026] [proxy_fcgi:error] [pid 59985:tid 60003] [client 74.7.228.11:40218] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:11.306254 2026] [proxy_fcgi:error] [pid 3212:tid 3231] [client 158.158.100.177:43002] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:14.246184 2026] [proxy_fcgi:error] [pid 59897:tid 59937] [client 158.158.100.177:51943] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:16.394653 2026] [proxy_fcgi:error] [pid 59896:tid 59919] [client 158.158.100.177:57792] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:18.960327 2026] [proxy_fcgi:error] [pid 59896:tid 59922] [client 158.158.100.177:46784] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:21.161833 2026] [proxy_fcgi:error] [pid 3212:tid 3221] [client 158.158.100.177:18532] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:23.837526 2026] [proxy_fcgi:error] [pid 59897:tid 59932] [client 158.158.100.177:2628] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:25.661273 2026] [proxy_fcgi:error] [pid 3212:tid 3231] [client 158.158.100.177:21102] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:27.336665 2026] [proxy_fcgi:error] [pid 3212:tid 3223] [client 158.158.100.177:59791] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:29.250028 2026] [proxy_fcgi:error] [pid 3212:tid 3218] [client 158.158.100.177:51935] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:33.063158 2026] [proxy_fcgi:error] [pid 3212:tid 3227] [client 158.158.100.177:42998] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:34.542056 2026] [proxy_fcgi:error] [pid 3212:tid 3217] [client 158.158.100.177:21092] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:35.783091 2026] [proxy_fcgi:error] [pid 59985:tid 59995] [client 158.158.100.177:23679] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:38.229835 2026] [proxy_fcgi:error] [pid 59896:tid 59915] [client 158.158.100.177:13350] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:40.165341 2026] [proxy_fcgi:error] [pid 3212:tid 3230] [client 158.158.100.177:23636] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:41.680672 2026] [proxy_fcgi:error] [pid 59898:tid 59974] [client 158.158.100.177:19086] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:43.940769 2026] [proxy_fcgi:error] [pid 3212:tid 3229] [client 158.158.100.177:46814] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:45.658374 2026] [proxy_fcgi:error] [pid 3212:tid 3230] [client 158.158.100.177:44254] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:48.501168 2026] [proxy_fcgi:error] [pid 59897:tid 59943] [client 158.158.100.177:13959] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:51.169139 2026] [proxy_fcgi:error] [pid 3212:tid 3220] [client 158.158.100.177:51924] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:53.751897 2026] [proxy_fcgi:error] [pid 3212:tid 3223] [client 158.158.100.177:21060] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:56.519779 2026] [proxy_fcgi:error] [pid 3212:tid 3222] [client 158.158.100.177:61086] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:58.088597 2026] [proxy_fcgi:error] [pid 59897:tid 59950] [client 158.158.100.177:19134] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:55:59.564430 2026] [proxy_fcgi:error] [pid 59897:tid 59949] [client 158.158.100.177:42999] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:01.028331 2026] [proxy_fcgi:error] [pid 59985:tid 60003] [client 158.158.100.177:35261] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:03.943289 2026] [proxy_fcgi:error] [pid 3212:tid 3233] [client 158.158.100.177:61102] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:07.332965 2026] [proxy_fcgi:error] [pid 3212:tid 3237] [client 158.158.100.177:30311] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:09.722857 2026] [proxy_fcgi:error] [pid 59985:tid 60010] [client 158.158.100.177:21056] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:12.677083 2026] [proxy_fcgi:error] [pid 3212:tid 3218] [client 158.158.100.177:46113] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:13.928785 2026] [proxy_fcgi:error] [pid 59896:tid 59906] [client 158.158.100.177:46791] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:16.841552 2026] [proxy_fcgi:error] [pid 3212:tid 3224] [client 158.158.100.177:19124] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:18.683959 2026] [proxy_fcgi:error] [pid 3212:tid 3221] [client 158.158.100.177:59806] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:23.288559 2026] [proxy_fcgi:error] [pid 59896:tid 59905] [client 158.158.100.177:46131] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:25.911928 2026] [proxy_fcgi:error] [pid 59898:tid 59965] [client 158.158.100.177:62118] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:28.354673 2026] [proxy_fcgi:error] [pid 3212:tid 3233] [client 158.158.100.177:26530] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:29.744857 2026] [proxy_fcgi:error] [pid 59898:tid 59970] [client 158.158.100.177:18556] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:31.588849 2026] [proxy_fcgi:error] [pid 59896:tid 59906] [client 158.158.100.177:18510] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:33.364587 2026] [proxy_fcgi:error] [pid 59985:tid 59994] [client 158.158.100.177:17233] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:34.791276 2026] [proxy_fcgi:error] [pid 59898:tid 59969] [client 158.158.100.177:34143] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:38.507349 2026] [proxy_fcgi:error] [pid 59898:tid 59968] [client 158.158.100.177:18517] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:40.996097 2026] [proxy_fcgi:error] [pid 59896:tid 59903] [client 158.158.100.177:15313] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:41.933834 2026] [proxy_fcgi:error] [pid 59985:tid 60001] [client 158.158.100.177:15329] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:44.129604 2026] [proxy_fcgi:error] [pid 59896:tid 59906] [client 158.158.100.177:22308] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:46.321417 2026] [proxy_fcgi:error] [pid 59985:tid 60000] [client 158.158.100.177:26506] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:47.916174 2026] [proxy_fcgi:error] [pid 3212:tid 3217] [client 158.158.100.177:28519] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:50.018605 2026] [proxy_fcgi:error] [pid 59897:tid 59943] [client 158.158.100.177:2638] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:53.771950 2026] [proxy_fcgi:error] [pid 59896:tid 59903] [client 158.158.100.177:28510] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:55.662305 2026] [proxy_fcgi:error] [pid 59897:tid 59931] [client 158.158.100.177:26509] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:56:58.621754 2026] [proxy_fcgi:error] [pid 59897:tid 59928] [client 158.158.100.177:64826] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:01.302744 2026] [proxy_fcgi:error] [pid 59896:tid 59901] [client 158.158.100.177:49366] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:02.943877 2026] [proxy_fcgi:error] [pid 59898:tid 59964] [client 158.158.100.177:49346] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:04.449891 2026] [proxy_fcgi:error] [pid 59896:tid 59915] [client 158.158.100.177:62131] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:06.601278 2026] [proxy_fcgi:error] [pid 59897:tid 59935] [client 158.158.100.177:18536] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:09.320272 2026] [proxy_fcgi:error] [pid 59896:tid 59912] [client 158.158.100.177:62100] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:13.052157 2026] [proxy_fcgi:error] [pid 59896:tid 59900] [client 158.158.100.177:46806] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:16.290628 2026] [proxy_fcgi:error] [pid 3212:tid 3214] [client 158.158.100.177:17246] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:16.805295 2026] [proxy_fcgi:error] [pid 3212:tid 3215] [client 158.158.100.177:17246] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:18.666444 2026] [proxy_fcgi:error] [pid 59985:tid 60001] [client 158.158.100.177:34147] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:20.413330 2026] [proxy_fcgi:error] [pid 59896:tid 59918] [client 158.158.100.177:26516] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:22.073876 2026] [proxy_fcgi:error] [pid 59897:tid 59928] [client 158.158.100.177:34130] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:23.486680 2026] [proxy_fcgi:error] [pid 3212:tid 3221] [client 158.158.100.177:17266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:26.467727 2026] [proxy_fcgi:error] [pid 3212:tid 3215] [client 158.158.100.177:22286] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:27.636403 2026] [proxy_fcgi:error] [pid 3212:tid 3237] [client 158.158.100.177:22304] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:30.168932 2026] [proxy_fcgi:error] [pid 59896:tid 59921] [client 158.158.100.177:62109] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:33.430542 2026] [proxy_fcgi:error] [pid 59985:tid 60008] [client 158.158.100.177:61667] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:34.887116 2026] [proxy_fcgi:error] [pid 59897:tid 59942] [client 158.158.100.177:23607] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:36.850898 2026] [proxy_fcgi:error] [pid 59896:tid 59920] [client 158.158.100.177:61652] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:38.621656 2026] [proxy_fcgi:error] [pid 3212:tid 3232] [client 158.158.100.177:34136] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:39.873545 2026] [proxy_fcgi:error] [pid 59985:tid 60007] [client 158.158.100.177:64831] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:43.052889 2026] [proxy_fcgi:error] [pid 59897:tid 59943] [client 158.158.100.177:26559] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:45.196309 2026] [proxy_fcgi:error] [pid 3212:tid 3226] [client 158.158.100.177:26508] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:47.628539 2026] [proxy_fcgi:error] [pid 59985:tid 60002] [client 158.158.100.177:61687] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:50.122456 2026] [proxy_fcgi:error] [pid 59897:tid 59939] [client 158.158.100.177:23600] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:52.570756 2026] [proxy_fcgi:error] [pid 59898:tid 59961] [client 158.158.100.177:53240] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:54.719759 2026] [proxy_fcgi:error] [pid 59985:tid 59994] [client 158.158.100.177:61682] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:57:57.109494 2026] [proxy_fcgi:error] [pid 3212:tid 3220] [client 158.158.100.177:41033] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:01.287307 2026] [proxy_fcgi:error] [pid 59896:tid 59919] [client 158.158.100.177:2671] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:03.712249 2026] [proxy_fcgi:error] [pid 3212:tid 3220] [client 158.158.100.177:62095] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:05.783383 2026] [proxy_fcgi:error] [pid 59985:tid 60001] [client 158.158.100.177:26515] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:07.216431 2026] [proxy_fcgi:error] [pid 59985:tid 60005] [client 158.158.100.177:62129] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:08.989583 2026] [proxy_fcgi:error] [pid 59985:tid 60006] [client 158.158.100.177:64830] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:12.809399 2026] [proxy_fcgi:error] [pid 59985:tid 59996] [client 158.158.100.177:41076] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:15.341097 2026] [proxy_fcgi:error] [pid 3212:tid 3237] [client 158.158.100.177:53184] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:17.008003 2026] [proxy_fcgi:error] [pid 59897:tid 59943] [client 158.158.100.177:18558] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:19.272154 2026] [proxy_fcgi:error] [pid 59897:tid 59939] [client 158.158.100.177:26503] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:20.936792 2026] [proxy_fcgi:error] [pid 59896:tid 59908] [client 158.158.100.177:2433] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:22.787511 2026] [proxy_fcgi:error] [pid 59896:tid 59920] [client 158.158.100.177:64199] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:24.272547 2026] [proxy_fcgi:error] [pid 59985:tid 60010] [client 158.158.100.177:64795] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:26.488618 2026] [proxy_fcgi:error] [pid 59896:tid 59920] [client 158.158.100.177:23571] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:28.048790 2026] [proxy_fcgi:error] [pid 59896:tid 59905] [client 158.158.100.177:17833] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:30.350492 2026] [proxy_fcgi:error] [pid 59896:tid 59900] [client 158.158.100.177:64796] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:31.713953 2026] [proxy_fcgi:error] [pid 59985:tid 59992] [client 158.158.100.177:61640] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:33.378541 2026] [proxy_fcgi:error] [pid 59985:tid 59996] [client 158.158.100.177:61668] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:34.215412 2026] [:error] [pid 3212:tid 3235] [client 158.158.100.177:17808] [client 158.158.100.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "aezIivg-28TY8_YLtUdE2QAAARU"]
[Sat Apr 25 21:58:36.617295 2026] [proxy_fcgi:error] [pid 59896:tid 59904] [client 158.158.100.177:41050] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:38.620878 2026] [proxy_fcgi:error] [pid 59896:tid 59924] [client 158.158.100.177:12683] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:42.098397 2026] [proxy_fcgi:error] [pid 3212:tid 3224] [client 158.158.100.177:64780] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:43.450953 2026] [proxy_fcgi:error] [pid 3212:tid 3238] [client 158.158.100.177:2634] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:45.849136 2026] [proxy_fcgi:error] [pid 59898:tid 59969] [client 158.158.100.177:23588] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:49.435187 2026] [proxy_fcgi:error] [pid 59985:tid 60008] [client 158.158.100.177:53211] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:50.716854 2026] [proxy_fcgi:error] [pid 59896:tid 59919] [client 158.158.100.177:64803] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:52.255734 2026] [proxy_fcgi:error] [pid 3212:tid 3228] [client 158.158.100.177:21665] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:53.642539 2026] [proxy_fcgi:error] [pid 59896:tid 59921] [client 158.158.100.177:12728] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:55.619065 2026] [proxy_fcgi:error] [pid 59898:tid 59977] [client 158.158.100.177:23555] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:57.707936 2026] [proxy_fcgi:error] [pid 59896:tid 59915] [client 158.158.100.177:2459] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:58:58.895249 2026] [proxy_fcgi:error] [pid 3212:tid 3215] [client 158.158.100.177:46801] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:01.491025 2026] [proxy_fcgi:error] [pid 59985:tid 60001] [client 158.158.100.177:63023] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:03.829784 2026] [proxy_fcgi:error] [pid 59985:tid 59995] [client 158.158.100.177:64815] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:06.046548 2026] [proxy_fcgi:error] [pid 59896:tid 59908] [client 158.158.100.177:53245] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:07.737091 2026] [proxy_fcgi:error] [pid 59897:tid 59927] [client 158.158.100.177:25510] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:08.925417 2026] [proxy_fcgi:error] [pid 3212:tid 3226] [client 158.158.100.177:23553] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:10.005307 2026] [proxy_fcgi:error] [pid 3212:tid 3230] [client 158.158.100.177:17798] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:12.260583 2026] [proxy_fcgi:error] [pid 3212:tid 3216] [client 158.158.100.177:12709] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:14.694906 2026] [proxy_fcgi:error] [pid 3212:tid 3222] [client 158.158.100.177:2474] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:16.301797 2026] [proxy_fcgi:error] [pid 3212:tid 3220] [client 158.158.100.177:28520] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:17.644958 2026] [proxy_fcgi:error] [pid 3212:tid 3215] [client 158.158.100.177:2450] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:20.062698 2026] [proxy_fcgi:error] [pid 3212:tid 3231] [client 158.158.100.177:17851] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:21.632923 2026] [proxy_fcgi:error] [pid 59898:tid 59968] [client 158.158.100.177:64214] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:23.128732 2026] [proxy_fcgi:error] [pid 59897:tid 59934] [client 158.158.100.177:64220] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:24.547852 2026] [proxy_fcgi:error] [pid 59897:tid 59940] [client 158.158.100.177:23559] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:26.434961 2026] [proxy_fcgi:error] [pid 59898:tid 59976] [client 158.158.100.177:25534] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:28.350897 2026] [proxy_fcgi:error] [pid 3212:tid 3228] [client 158.158.100.177:46784] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:30.670718 2026] [proxy_fcgi:error] [pid 59896:tid 59912] [client 158.158.100.177:64793] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:31.719359 2026] [proxy_fcgi:error] [pid 59897:tid 59939] [client 158.158.100.177:53207] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:33.476580 2026] [proxy_fcgi:error] [pid 59985:tid 59995] [client 158.158.100.177:23608] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:40.511612 2026] [proxy_fcgi:error] [pid 59896:tid 59901] [client 158.158.100.177:64786] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:42.466107 2026] [proxy_fcgi:error] [pid 59896:tid 59910] [client 158.158.100.177:2978] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:44.075486 2026] [proxy_fcgi:error] [pid 59897:tid 59943] [client 158.158.100.177:2494] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:45.435926 2026] [proxy_fcgi:error] [pid 3212:tid 3222] [client 158.158.100.177:25519] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:47.362160 2026] [proxy_fcgi:error] [pid 59985:tid 60004] [client 158.158.100.177:2437] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:49.250366 2026] [proxy_fcgi:error] [pid 59896:tid 59910] [client 158.158.100.177:23562] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:52.104616 2026] [proxy_fcgi:error] [pid 59896:tid 59907] [client 158.158.100.177:64215] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:54.619438 2026] [proxy_fcgi:error] [pid 59897:tid 59936] [client 158.158.100.177:23561] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:56.867490 2026] [proxy_fcgi:error] [pid 59896:tid 59924] [client 158.158.100.177:61691] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 21:59:59.987909 2026] [proxy_fcgi:error] [pid 59897:tid 59931] [client 158.158.100.177:2481] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:00:01.485374 2026] [proxy_fcgi:error] [pid 59897:tid 59943] [client 158.158.100.177:15922] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:00:03.011800 2026] [proxy_fcgi:error] [pid 59897:tid 59935] [client 158.158.100.177:21645] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:00:06.325455 2026] [proxy_fcgi:error] [pid 3212:tid 3225] [client 158.158.100.177:29056] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:00:08.362271 2026] [proxy_fcgi:error] [pid 3212:tid 3232] [client 158.158.100.177:12736] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:00:11.454047 2026] [proxy_fcgi:error] [pid 59897:tid 59931] [client 158.158.100.177:2440] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:00:12.746930 2026] [proxy_fcgi:error] [pid 59896:tid 59912] [client 158.158.100.177:2758] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:00:13.801149 2026] [proxy_fcgi:error] [pid 59985:tid 59994] [client 158.158.100.177:13982] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:00:15.660822 2026] [proxy_fcgi:error] [pid 59896:tid 59907] [client 158.158.100.177:13345] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:00:17.631949 2026] [proxy_fcgi:error] [pid 3212:tid 3219] [client 158.158.100.177:64194] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:00:20.157980 2026] [proxy_fcgi:error] [pid 59898:tid 59959] [client 158.158.100.177:29112] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:00:21.650592 2026] [proxy_fcgi:error] [pid 59896:tid 59915] [client 158.158.100.177:25490] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:00:23.386394 2026] [proxy_fcgi:error] [pid 59896:tid 59908] [client 158.158.100.177:12675] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:00:37.008082 2026] [proxy_fcgi:error] [pid 59896:tid 59917] [client 192.36.109.99:45977] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:15:15.962319 2026] [proxy_fcgi:error] [pid 59985:tid 59997] [client 158.158.45.110:16706] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:15:16.776047 2026] [proxy_fcgi:error] [pid 59896:tid 59902] [client 158.158.45.110:5170] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:15:17.589872 2026] [proxy_fcgi:error] [pid 59985:tid 59998] [client 158.158.45.110:6047] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:15:18.372387 2026] [proxy_fcgi:error] [pid 59896:tid 59918] [client 158.158.45.110:16711] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:15:19.187300 2026] [proxy_fcgi:error] [pid 59985:tid 60004] [client 158.158.45.110:6042] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:15:20.009774 2026] [proxy_fcgi:error] [pid 59896:tid 59904] [client 158.158.45.110:5876] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:15:20.787793 2026] [proxy_fcgi:error] [pid 3212:tid 3214] [client 158.158.45.110:13508] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:15:21.554050 2026] [proxy_fcgi:error] [pid 59896:tid 59912] [client 158.158.45.110:5864] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:15:22.085629 2026] [proxy_fcgi:error] [pid 59896:tid 59900] [client 158.158.45.110:5864] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:15:22.850543 2026] [proxy_fcgi:error] [pid 59985:tid 60001] [client 158.158.45.110:13517] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 22:16:05.248343 2026] [proxy_fcgi:error] [pid 59896:tid 59922] [client 205.169.39.41:40857] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat Apr 25 23:33:35.445623 2026] [proxy_fcgi:error] [pid 3212:tid 3229] [client 74.7.175.165:36992] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:15.376935 2026] [proxy_fcgi:error] [pid 59896:tid 59910] [client 20.199.101.230:47746] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:16.514248 2026] [proxy_fcgi:error] [pid 59897:tid 59936] [client 20.199.101.230:12172] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:17.545755 2026] [proxy_fcgi:error] [pid 59898:tid 59968] [client 20.199.101.230:3551] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:18.579728 2026] [proxy_fcgi:error] [pid 59898:tid 59977] [client 20.199.101.230:12191] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:19.997349 2026] [proxy_fcgi:error] [pid 59896:tid 59914] [client 20.199.101.230:34190] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:21.219895 2026] [proxy_fcgi:error] [pid 59898:tid 59969] [client 20.199.101.230:11133] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:22.371865 2026] [proxy_fcgi:error] [pid 59897:tid 59951] [client 20.199.101.230:47742] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:23.425253 2026] [proxy_fcgi:error] [pid 3212:tid 3221] [client 20.199.101.230:16370] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:24.445494 2026] [proxy_fcgi:error] [pid 59896:tid 59921] [client 20.199.101.230:42916] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:25.022341 2026] [proxy_fcgi:error] [pid 59896:tid 59913] [client 20.199.101.230:42916] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:26.003288 2026] [proxy_fcgi:error] [pid 3212:tid 3237] [client 20.199.101.230:47807] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:26.859784 2026] [proxy_fcgi:error] [pid 59897:tid 59951] [client 20.199.101.230:47751] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:31.138572 2026] [proxy_fcgi:error] [pid 3212:tid 3230] [client 20.199.101.230:23862] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:32.467753 2026] [proxy_fcgi:error] [pid 59898:tid 59976] [client 20.199.101.230:16368] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:33.678523 2026] [proxy_fcgi:error] [pid 59898:tid 59972] [client 20.199.101.230:23834] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:34.710777 2026] [proxy_fcgi:error] [pid 59898:tid 59957] [client 20.199.101.230:3265] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:35.585178 2026] [proxy_fcgi:error] [pid 3212:tid 3216] [client 20.199.101.230:42899] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:36.629060 2026] [proxy_fcgi:error] [pid 59897:tid 59939] [client 20.199.101.230:20956] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:37.242419 2026] [proxy_fcgi:error] [pid 59897:tid 59951] [client 20.199.101.230:20956] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:38.243413 2026] [autoindex:error] [pid 3212:tid 3232] [client 20.199.101.230:25272] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 00:58:38.792879 2026] [proxy_fcgi:error] [pid 3212:tid 3215] [client 20.199.101.230:25272] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:40.219071 2026] [proxy_fcgi:error] [pid 59896:tid 59904] [client 20.199.101.230:3326] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:41.282421 2026] [proxy_fcgi:error] [pid 59896:tid 59924] [client 20.199.101.230:11126] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:42.415785 2026] [proxy_fcgi:error] [pid 3212:tid 3231] [client 20.199.101.230:12171] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:43.591961 2026] [proxy_fcgi:error] [pid 59985:tid 60010] [client 20.199.101.230:3281] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:44.532753 2026] [proxy_fcgi:error] [pid 59897:tid 59944] [client 20.199.101.230:12164] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:45.080548 2026] [proxy_fcgi:error] [pid 59897:tid 59936] [client 20.199.101.230:12164] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:46.061203 2026] [proxy_fcgi:error] [pid 59897:tid 59940] [client 20.199.101.230:11127] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:47.398524 2026] [proxy_fcgi:error] [pid 3212:tid 3238] [client 20.199.101.230:11107] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:48.524178 2026] [proxy_fcgi:error] [pid 59896:tid 59918] [client 20.199.101.230:42943] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:49.549199 2026] [autoindex:error] [pid 59898:tid 59957] [client 20.199.101.230:16703] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 00:58:50.124162 2026] [proxy_fcgi:error] [pid 59898:tid 59958] [client 20.199.101.230:16703] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:51.227760 2026] [proxy_fcgi:error] [pid 59898:tid 59976] [client 20.199.101.230:42891] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:52.286201 2026] [proxy_fcgi:error] [pid 59897:tid 59935] [client 20.199.101.230:47726] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:53.437695 2026] [proxy_fcgi:error] [pid 59896:tid 59901] [client 20.199.101.230:17238] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:54.409518 2026] [proxy_fcgi:error] [pid 59897:tid 59945] [client 20.199.101.230:42891] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:56.314305 2026] [proxy_fcgi:error] [pid 59896:tid 59903] [client 20.199.101.230:25273] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:57.573817 2026] [proxy_fcgi:error] [pid 59896:tid 59924] [client 20.199.101.230:47719] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:58:59.058891 2026] [proxy_fcgi:error] [pid 3212:tid 3219] [client 20.199.101.230:25277] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:00.119216 2026] [proxy_fcgi:error] [pid 59896:tid 59909] [client 20.199.101.230:16340] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:01.293300 2026] [proxy_fcgi:error] [pid 59985:tid 60000] [client 20.199.101.230:16344] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:01.648383 2026] [autoindex:error] [pid 59985:tid 59992] [client 20.199.101.230:16344] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 00:59:02.223983 2026] [proxy_fcgi:error] [pid 59985:tid 59999] [client 20.199.101.230:16344] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:03.445059 2026] [proxy_fcgi:error] [pid 59896:tid 59920] [client 20.199.101.230:31387] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:04.833195 2026] [proxy_fcgi:error] [pid 59898:tid 59959] [client 20.199.101.230:23831] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:06.148660 2026] [proxy_fcgi:error] [pid 59898:tid 59972] [client 20.199.101.230:3268] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:07.506983 2026] [proxy_fcgi:error] [pid 59898:tid 59956] [client 20.199.101.230:23830] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:08.068817 2026] [proxy_fcgi:error] [pid 59898:tid 59967] [client 20.199.101.230:23830] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:09.626250 2026] [proxy_fcgi:error] [pid 3212:tid 3227] [client 20.199.101.230:3278] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:10.925066 2026] [proxy_fcgi:error] [pid 59897:tid 59938] [client 20.199.101.230:23812] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:12.386426 2026] [proxy_fcgi:error] [pid 3212:tid 3216] [client 20.199.101.230:47714] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:13.730827 2026] [proxy_fcgi:error] [pid 59898:tid 59958] [client 20.199.101.230:39265] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:14.718044 2026] [proxy_fcgi:error] [pid 59985:tid 60001] [client 20.199.101.230:23825] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:15.716549 2026] [proxy_fcgi:error] [pid 3212:tid 3220] [client 20.199.101.230:16648] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:16.797888 2026] [proxy_fcgi:error] [pid 59898:tid 59968] [client 20.199.101.230:47806] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:17.712346 2026] [proxy_fcgi:error] [pid 59985:tid 60000] [client 20.199.101.230:12209] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:18.952196 2026] [proxy_fcgi:error] [pid 3212:tid 3237] [client 20.199.101.230:20957] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:20.116115 2026] [proxy_fcgi:error] [pid 3212:tid 3229] [client 20.199.101.230:25231] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:20.938928 2026] [autoindex:error] [pid 59898:tid 59959] [client 20.199.101.230:12173] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 00:59:21.478849 2026] [proxy_fcgi:error] [pid 59898:tid 59976] [client 20.199.101.230:12173] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:22.591452 2026] [proxy_fcgi:error] [pid 59898:tid 59965] [client 20.199.101.230:42886] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:23.111265 2026] [proxy_fcgi:error] [pid 59898:tid 59963] [client 20.199.101.230:42886] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:24.158471 2026] [proxy_fcgi:error] [pid 59896:tid 59909] [client 20.199.101.230:17220] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:25.083007 2026] [proxy_fcgi:error] [pid 59985:tid 59997] [client 20.199.101.230:25278] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:26.105749 2026] [proxy_fcgi:error] [pid 59898:tid 59978] [client 20.199.101.230:25265] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:27.209122 2026] [proxy_fcgi:error] [pid 59898:tid 59975] [client 20.199.101.230:16321] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:28.739225 2026] [proxy_fcgi:error] [pid 3212:tid 3214] [client 20.199.101.230:12206] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:29.879932 2026] [proxy_fcgi:error] [pid 3212:tid 3221] [client 20.199.101.230:11128] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:31.042780 2026] [proxy_fcgi:error] [pid 59897:tid 59934] [client 20.199.101.230:20952] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:32.159852 2026] [proxy_fcgi:error] [pid 59896:tid 59902] [client 20.199.101.230:47760] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:33.635098 2026] [proxy_fcgi:error] [pid 59896:tid 59903] [client 20.199.101.230:47762] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:34.888542 2026] [proxy_fcgi:error] [pid 59985:tid 59991] [client 20.199.101.230:42940] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:35.997501 2026] [proxy_fcgi:error] [pid 3212:tid 3233] [client 20.199.101.230:34324] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 00:59:36.926019 2026] [:error] [pid 3212:tid 3235] [client 20.199.101.230:25241] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/100.php"] [unique_id "aezy-Pg-28TY8_YLtUeteAAAARU"]
[Sun Apr 26 00:59:37.689583 2026] [:error] [pid 59898:tid 59958] [client 20.199.101.230:12176] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/100.php"] [unique_id "aezy-R-4vImxb0kbdzfXiAAAAMQ"]
[Sun Apr 26 00:59:38.645578 2026] [:error] [pid 3212:tid 3221] [client 20.199.101.230:12195] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/100.php"] [unique_id "aezy-vg-28TY8_YLtUetfgAAAQc"]
[Sun Apr 26 00:59:40.079085 2026] [:error] [pid 3212:tid 3222] [client 20.199.101.230:47777] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/100.php"] [unique_id "aezy_Pg-28TY8_YLtUetgAAAAQg"]
[Sun Apr 26 00:59:41.020713 2026] [:error] [pid 59896:tid 59920] [client 20.199.101.230:17230] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/nastar.php"] [unique_id "aezy_bLLzhtkd-OXUgBIQgAAAFQ"]
[Sun Apr 26 00:59:42.098383 2026] [:error] [pid 59985:tid 59995] [client 20.199.101.230:23860] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/nastar.php"] [unique_id "aezy_gF_zDvEhKvyTH703gAAAAg"]
[Sun Apr 26 00:59:42.834408 2026] [:error] [pid 59898:tid 59975] [client 20.199.101.230:16696] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/nastar.php"] [unique_id "aezy_h-4vImxb0kbdzfXjQAAANU"]
[Sun Apr 26 00:59:43.497357 2026] [:error] [pid 59898:tid 59962] [client 20.199.101.230:47784] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/nastar.php"] [unique_id "aezy_x-4vImxb0kbdzfXjwAAAMg"]
[Sun Apr 26 00:59:44.262397 2026] [:error] [pid 59896:tid 59906] [client 20.199.101.230:16356] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/2026w.php"] [unique_id "aezzALLLzhtkd-OXUgBIRwAAAEY"]
[Sun Apr 26 00:59:45.500418 2026] [:error] [pid 59896:tid 59911] [client 20.199.101.230:23832] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/2026w.php"] [unique_id "aezzAbLLzhtkd-OXUgBISwAAAEs"]
[Sun Apr 26 00:59:47.194513 2026] [:error] [pid 59898:tid 59965] [client 20.199.101.230:16380] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/2026w.php"] [unique_id "aezzAx-4vImxb0kbdzfXlAAAAMs"]
[Sun Apr 26 00:59:49.308345 2026] [:error] [pid 3212:tid 3235] [client 20.199.101.230:47793] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/2026w.php"] [unique_id "aezzBfg-28TY8_YLtUethgAAARU"]
[Sun Apr 26 00:59:50.910035 2026] [:error] [pid 59985:tid 60000] [client 20.199.101.230:42893] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xwpg.php"] [unique_id "aezzBgF_zDvEhKvyTH707QAAAA0"]
[Sun Apr 26 00:59:51.732464 2026] [:error] [pid 59985:tid 59993] [client 20.199.101.230:47776] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xwpg.php"] [unique_id "aezzBwF_zDvEhKvyTH708AAAAAY"]
[Sun Apr 26 00:59:52.884003 2026] [:error] [pid 59897:tid 59930] [client 20.199.101.230:11130] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xwpg.php"] [unique_id "aezzCPBrrkdzpEbmK4e5zwAAAIM"]
[Sun Apr 26 00:59:54.150779 2026] [:error] [pid 59896:tid 59906] [client 20.199.101.230:23840] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xwpg.php"] [unique_id "aezzCrLLzhtkd-OXUgBIUwAAAEY"]
[Sun Apr 26 00:59:55.303422 2026] [:error] [pid 59985:tid 59987] [client 20.199.101.230:3266] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ass.php"] [unique_id "aezzCwF_zDvEhKvyTH709QAAAAA"]
[Sun Apr 26 00:59:57.116477 2026] [:error] [pid 3212:tid 3227] [client 20.199.101.230:42903] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ass.php"] [unique_id "aezzDfg-28TY8_YLtUetlQAAAQ0"]
[Sun Apr 26 00:59:57.917659 2026] [:error] [pid 59985:tid 60009] [client 20.199.101.230:3315] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ass.php"] [unique_id "aezzDQF_zDvEhKvyTH709wAAABY"]
[Sun Apr 26 00:59:59.065911 2026] [:error] [pid 3212:tid 3229] [client 20.199.101.230:16381] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ass.php"] [unique_id "aezzD_g-28TY8_YLtUetnQAAAQ8"]
[Sun Apr 26 00:59:59.992536 2026] [:error] [pid 3212:tid 3226] [client 20.199.101.230:3277] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "aezzD_g-28TY8_YLtUetnwAAAQw"]
[Sun Apr 26 01:00:01.368228 2026] [:error] [pid 3212:tid 3227] [client 20.199.101.230:42897] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "aezzEfg-28TY8_YLtUetpAAAAQ0"]
[Sun Apr 26 01:00:02.112089 2026] [:error] [pid 3212:tid 3228] [client 20.199.101.230:12177] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "aezzEvg-28TY8_YLtUetpwAAAQ4"]
[Sun Apr 26 01:00:03.426931 2026] [:error] [pid 59985:tid 59999] [client 20.199.101.230:16322] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "aezzEwF_zDvEhKvyTH70_gAAAAw"]
[Sun Apr 26 01:00:04.272739 2026] [:error] [pid 59898:tid 59959] [client 20.199.101.230:23866] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/no18.php"] [unique_id "aezzFB-4vImxb0kbdzfXoAAAAMU"]
[Sun Apr 26 01:00:05.258305 2026] [:error] [pid 59897:tid 59935] [client 20.199.101.230:25218] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/no18.php"] [unique_id "aezzFfBrrkdzpEbmK4e52gAAAIg"]
[Sun Apr 26 01:00:06.060744 2026] [:error] [pid 59896:tid 59900] [client 20.199.101.230:47695] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/no18.php"] [unique_id "aezzFrLLzhtkd-OXUgBIWQAAAEA"]
[Sun Apr 26 01:00:07.082286 2026] [:error] [pid 3212:tid 3219] [client 20.199.101.230:17216] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/no18.php"] [unique_id "aezzF_g-28TY8_YLtUetvAAAAQU"]
[Sun Apr 26 01:00:07.777285 2026] [:error] [pid 59985:tid 59997] [client 20.199.101.230:23821] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fine.php"] [unique_id "aezzFwF_zDvEhKvyTH71AgAAAAo"]
[Sun Apr 26 01:00:09.298516 2026] [:error] [pid 59896:tid 59918] [client 20.199.101.230:47692] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fine.php"] [unique_id "aezzGbLLzhtkd-OXUgBIYAAAAFI"]
[Sun Apr 26 01:00:10.830086 2026] [:error] [pid 59896:tid 59911] [client 20.199.101.230:3547] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fine.php"] [unique_id "aezzGrLLzhtkd-OXUgBIaAAAAEs"]
[Sun Apr 26 01:00:11.641813 2026] [:error] [pid 59896:tid 59900] [client 20.199.101.230:47734] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fine.php"] [unique_id "aezzG7LLzhtkd-OXUgBIbQAAAEA"]
[Sun Apr 26 01:00:12.956199 2026] [:error] [pid 59897:tid 59930] [client 20.199.101.230:11112] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/hplfuns.php"] [unique_id "aezzHPBrrkdzpEbmK4e58QAAAIM"]
[Sun Apr 26 01:00:13.771813 2026] [:error] [pid 59896:tid 59912] [client 20.199.101.230:3521] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/hplfuns.php"] [unique_id "aezzHbLLzhtkd-OXUgBIcwAAAEw"]
[Sun Apr 26 01:00:14.730060 2026] [:error] [pid 3212:tid 3237] [client 20.199.101.230:25262] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/hplfuns.php"] [unique_id "aezzHvg-28TY8_YLtUetxAAAARc"]
[Sun Apr 26 01:00:15.788831 2026] [:error] [pid 59985:tid 59992] [client 20.199.101.230:3279] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/hplfuns.php"] [unique_id "aezzHwF_zDvEhKvyTH71CQAAAAU"]
[Sun Apr 26 01:00:17.013698 2026] [:error] [pid 59898:tid 59960] [client 20.199.101.230:11091] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xa.php"] [unique_id "aezzIR-4vImxb0kbdzfXwgAAAMY"]
[Sun Apr 26 01:00:17.996325 2026] [:error] [pid 3212:tid 3232] [client 20.199.101.230:16351] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xa.php"] [unique_id "aezzIfg-28TY8_YLtUetzAAAARI"]
[Sun Apr 26 01:00:19.105899 2026] [:error] [pid 59896:tid 59909] [client 20.199.101.230:23863] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xa.php"] [unique_id "aezzI7LLzhtkd-OXUgBIewAAAEk"]
[Sun Apr 26 01:00:19.950290 2026] [:error] [pid 59896:tid 59912] [client 20.199.101.230:11110] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xa.php"] [unique_id "aezzI7LLzhtkd-OXUgBIfQAAAEw"]
[Sun Apr 26 01:00:20.983500 2026] [:error] [pid 59896:tid 59915] [client 20.199.101.230:17244] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aezzJLLLzhtkd-OXUgBIfwAAAE8"]
[Sun Apr 26 01:00:21.764716 2026] [:error] [pid 3212:tid 3236] [client 20.199.101.230:16361] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aezzJfg-28TY8_YLtUet1wAAARY"]
[Sun Apr 26 01:00:22.651748 2026] [:error] [pid 59896:tid 59919] [client 20.199.101.230:11119] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aezzJrLLzhtkd-OXUgBIhQAAAFM"]
[Sun Apr 26 01:00:23.439050 2026] [:error] [pid 59985:tid 59995] [client 20.199.101.230:37038] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "aezzJwF_zDvEhKvyTH71EwAAAAg"]
[Sun Apr 26 01:00:24.391631 2026] [:error] [pid 59897:tid 59938] [client 20.199.101.230:11086] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/inege.php"] [unique_id "aezzKPBrrkdzpEbmK4e59AAAAIs"]
[Sun Apr 26 01:00:25.063583 2026] [:error] [pid 59896:tid 59907] [client 20.199.101.230:42896] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/inege.php"] [unique_id "aezzKbLLzhtkd-OXUgBIiAAAAEc"]
[Sun Apr 26 01:00:25.977132 2026] [:error] [pid 59898:tid 59955] [client 20.199.101.230:34310] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/inege.php"] [unique_id "aezzKR-4vImxb0kbdzfXwwAAAME"]
[Sun Apr 26 01:00:27.245686 2026] [:error] [pid 59985:tid 60006] [client 20.199.101.230:47773] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/inege.php"] [unique_id "aezzKwF_zDvEhKvyTH71GQAAABM"]
[Sun Apr 26 01:00:28.040512 2026] [:error] [pid 59896:tid 59913] [client 20.199.101.230:3301] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uuu.php"] [unique_id "aezzLLLLzhtkd-OXUgBIkQAAAE0"]
[Sun Apr 26 01:00:28.897186 2026] [:error] [pid 59896:tid 59911] [client 20.199.101.230:12190] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uuu.php"] [unique_id "aezzLLLLzhtkd-OXUgBIkgAAAEs"]
[Sun Apr 26 01:00:29.805379 2026] [:error] [pid 3212:tid 3235] [client 20.199.101.230:3689] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uuu.php"] [unique_id "aezzLfg-28TY8_YLtUet4gAAARU"]
[Sun Apr 26 01:00:30.620834 2026] [:error] [pid 59898:tid 59954] [client 20.199.101.230:42918] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uuu.php"] [unique_id "aezzLh-4vImxb0kbdzfXxgAAAMA"]
[Sun Apr 26 01:00:32.742028 2026] [:error] [pid 3212:tid 3222] [client 20.199.101.230:20955] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/no1.php"] [unique_id "aezzMPg-28TY8_YLtUet6AAAAQg"]
[Sun Apr 26 01:00:44.595538 2026] [proxy_fcgi:error] [pid 59896:tid 59901] [client 20.199.101.230:17278] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:00:46.519887 2026] [proxy_fcgi:error] [pid 59896:tid 59924] [client 20.199.101.230:12217] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:00:48.015539 2026] [proxy_fcgi:error] [pid 59897:tid 59936] [client 20.199.101.230:20959] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:00:49.903402 2026] [:error] [pid 59896:tid 59915] [client 20.199.101.230:25249] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a2.php"] [unique_id "aezzQbLLzhtkd-OXUgBIsAAAAE8"]
[Sun Apr 26 01:00:51.080673 2026] [:error] [pid 59896:tid 59912] [client 20.199.101.230:47772] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a2.php"] [unique_id "aezzQ7LLzhtkd-OXUgBItQAAAEw"]
[Sun Apr 26 01:00:52.277921 2026] [:error] [pid 59896:tid 59907] [client 20.199.101.230:11134] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a2.php"] [unique_id "aezzRLLLzhtkd-OXUgBIuQAAAEc"]
[Sun Apr 26 01:00:53.012030 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:11113] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a2.php"] [unique_id "aezzRfg-28TY8_YLtUet7QAAARg"]
[Sun Apr 26 01:00:53.885736 2026] [:error] [pid 3212:tid 3235] [client 20.199.101.230:34354] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/edit.php"] [unique_id "aezzRfg-28TY8_YLtUet7wAAARU"]
[Sun Apr 26 01:00:55.494258 2026] [:error] [pid 59985:tid 59996] [client 20.199.101.230:10754] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/edit.php"] [unique_id "aezzRwF_zDvEhKvyTH71NgAAAAk"]
[Sun Apr 26 01:00:56.345965 2026] [:error] [pid 3212:tid 3223] [client 20.199.101.230:11292] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/edit.php"] [unique_id "aezzSPg-28TY8_YLtUet9AAAAQk"]
[Sun Apr 26 01:00:57.117214 2026] [:error] [pid 59985:tid 60011] [client 20.199.101.230:16350] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/edit.php"] [unique_id "aezzSQF_zDvEhKvyTH71OgAAABg"]
[Sun Apr 26 01:00:58.557620 2026] [:error] [pid 59985:tid 59996] [client 20.199.101.230:47731] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ioxi-o.php"] [unique_id "aezzSgF_zDvEhKvyTH71QQAAAAk"]
[Sun Apr 26 01:00:59.666179 2026] [:error] [pid 3212:tid 3218] [client 20.199.101.230:16324] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ioxi-o.php"] [unique_id "aezzS_g-28TY8_YLtUet9wAAAQQ"]
[Sun Apr 26 01:01:01.166820 2026] [:error] [pid 59896:tid 59901] [client 20.199.101.230:16657] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ioxi-o.php"] [unique_id "aezzTbLLzhtkd-OXUgBI3AAAAEE"]
[Sun Apr 26 01:01:02.543166 2026] [:error] [pid 59985:tid 60010] [client 20.199.101.230:3667] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ioxi-o.php"] [unique_id "aezzTgF_zDvEhKvyTH71RQAAABc"]
[Sun Apr 26 01:01:03.494500 2026] [:error] [pid 59896:tid 59908] [client 20.199.101.230:17246] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/admin.php"] [unique_id "aezzT7LLzhtkd-OXUgBI4gAAAEg"]
[Sun Apr 26 01:01:04.572325 2026] [:error] [pid 3212:tid 3216] [client 20.199.101.230:42926] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/admin.php"] [unique_id "aezzUPg-28TY8_YLtUeuAAAAAQI"]
[Sun Apr 26 01:01:05.441157 2026] [:error] [pid 59897:tid 59948] [client 20.199.101.230:11089] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/admin.php"] [unique_id "aezzUfBrrkdzpEbmK4e6DQAAAJU"]
[Sun Apr 26 01:01:07.252722 2026] [:error] [pid 59897:tid 59935] [client 20.199.101.230:47745] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/admin.php"] [unique_id "aezzU_BrrkdzpEbmK4e6EwAAAIg"]
[Sun Apr 26 01:01:07.903480 2026] [:error] [pid 59985:tid 59999] [client 20.199.101.230:42931] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/66.php"] [unique_id "aezzUwF_zDvEhKvyTH71TwAAAAw"]
[Sun Apr 26 01:01:08.906248 2026] [:error] [pid 59896:tid 59910] [client 20.199.101.230:25252] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/66.php"] [unique_id "aezzVLLLzhtkd-OXUgBI5gAAAEo"]
[Sun Apr 26 01:01:09.554675 2026] [:error] [pid 59896:tid 59901] [client 20.199.101.230:16684] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/66.php"] [unique_id "aezzVbLLzhtkd-OXUgBI6QAAAEE"]
[Sun Apr 26 01:01:10.307366 2026] [:error] [pid 3212:tid 3229] [client 20.199.101.230:11078] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/66.php"] [unique_id "aezzVvg-28TY8_YLtUeuCwAAAQ8"]
[Sun Apr 26 01:01:11.088914 2026] [:error] [pid 59985:tid 60007] [client 20.199.101.230:3532] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a5.php"] [unique_id "aezzVwF_zDvEhKvyTH71VAAAABQ"]
[Sun Apr 26 01:01:11.953004 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:3302] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a5.php"] [unique_id "aezzV_g-28TY8_YLtUeuEAAAARQ"]
[Sun Apr 26 01:01:13.526558 2026] [:error] [pid 3212:tid 3236] [client 20.199.101.230:16367] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a5.php"] [unique_id "aezzWfg-28TY8_YLtUeuFAAAARY"]
[Sun Apr 26 01:01:14.402607 2026] [:error] [pid 3212:tid 3219] [client 20.199.101.230:47685] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a5.php"] [unique_id "aezzWvg-28TY8_YLtUeuFgAAAQU"]
[Sun Apr 26 01:01:15.067022 2026] [:error] [pid 3212:tid 3216] [client 20.199.101.230:10053] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ol.php"] [unique_id "aezzW_g-28TY8_YLtUeuGQAAAQI"]
[Sun Apr 26 01:01:16.118969 2026] [:error] [pid 3212:tid 3226] [client 20.199.101.230:20980] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ol.php"] [unique_id "aezzXPg-28TY8_YLtUeuGgAAAQw"]
[Sun Apr 26 01:01:17.232472 2026] [:error] [pid 3212:tid 3230] [client 20.199.101.230:12201] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ol.php"] [unique_id "aezzXfg-28TY8_YLtUeuHwAAARA"]
[Sun Apr 26 01:01:18.101421 2026] [:error] [pid 3212:tid 3225] [client 20.199.101.230:16329] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ol.php"] [unique_id "aezzXvg-28TY8_YLtUeuJQAAAQs"]
[Sun Apr 26 01:01:18.973027 2026] [:error] [pid 3212:tid 3229] [client 20.199.101.230:25436] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/f6.php"] [unique_id "aezzXvg-28TY8_YLtUeuKQAAAQ8"]
[Sun Apr 26 01:01:19.767658 2026] [:error] [pid 59898:tid 59975] [client 20.199.101.230:20991] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/f6.php"] [unique_id "aezzXx-4vImxb0kbdzfXzQAAANU"]
[Sun Apr 26 01:01:20.545739 2026] [:error] [pid 3212:tid 3231] [client 20.199.101.230:17228] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/f6.php"] [unique_id "aezzYPg-28TY8_YLtUeuLAAAARE"]
[Sun Apr 26 01:01:21.305127 2026] [:error] [pid 3212:tid 3233] [client 20.199.101.230:11085] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/f6.php"] [unique_id "aezzYfg-28TY8_YLtUeuLwAAARM"]
[Sun Apr 26 01:01:21.952777 2026] [:error] [pid 59898:tid 59959] [client 20.199.101.230:16347] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "aezzYR-4vImxb0kbdzfXzwAAAMU"]
[Sun Apr 26 01:01:22.558408 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:47803] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "aezzYvg-28TY8_YLtUeuMAAAARQ"]
[Sun Apr 26 01:01:23.534736 2026] [:error] [pid 3212:tid 3235] [client 20.199.101.230:34353] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "aezzY_g-28TY8_YLtUeuMgAAARU"]
[Sun Apr 26 01:01:24.306851 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:3334] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "aezzZPg-28TY8_YLtUeuNAAAARg"]
[Sun Apr 26 01:01:25.169934 2026] [:error] [pid 59897:tid 59950] [client 20.199.101.230:34335] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/style.php"] [unique_id "aezzZfBrrkdzpEbmK4e6GgAAAJc"]
[Sun Apr 26 01:01:25.814687 2026] [:error] [pid 3212:tid 3224] [client 20.199.101.230:11082] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/style.php"] [unique_id "aezzZfg-28TY8_YLtUeuNwAAAQo"]
[Sun Apr 26 01:01:26.545182 2026] [:error] [pid 59985:tid 59993] [client 20.199.101.230:12218] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/style.php"] [unique_id "aezzZgF_zDvEhKvyTH71XgAAAAY"]
[Sun Apr 26 01:01:27.243003 2026] [:error] [pid 3212:tid 3232] [client 20.199.101.230:11100] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/style.php"] [unique_id "aezzZ_g-28TY8_YLtUeuOAAAARI"]
[Sun Apr 26 01:01:27.820985 2026] [:error] [pid 59897:tid 59941] [client 20.199.101.230:17239] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/av.php"] [unique_id "aezzZ_BrrkdzpEbmK4e6HAAAAI4"]
[Sun Apr 26 01:01:28.619511 2026] [:error] [pid 59897:tid 59931] [client 20.199.101.230:17249] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/av.php"] [unique_id "aezzaPBrrkdzpEbmK4e6HQAAAIQ"]
[Sun Apr 26 01:01:29.423268 2026] [:error] [pid 3212:tid 3228] [client 20.199.101.230:20975] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/av.php"] [unique_id "aezzafg-28TY8_YLtUeuPQAAAQ4"]
[Sun Apr 26 01:01:29.989683 2026] [:error] [pid 59985:tid 60004] [client 20.199.101.230:23870] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/av.php"] [unique_id "aezzaQF_zDvEhKvyTH71YwAAABE"]
[Sun Apr 26 01:01:30.730225 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:3520] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aezzavg-28TY8_YLtUeuPgAAARg"]
[Sun Apr 26 01:01:31.933419 2026] [:error] [pid 3212:tid 3226] [client 20.199.101.230:16335] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aezza_g-28TY8_YLtUeuQgAAAQw"]
[Sun Apr 26 01:01:32.538330 2026] [:error] [pid 59897:tid 59927] [client 20.199.101.230:3269] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aezzbPBrrkdzpEbmK4e6IAAAAIA"]
[Sun Apr 26 01:01:33.361985 2026] [:error] [pid 59896:tid 59915] [client 20.199.101.230:34340] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aezzbbLLzhtkd-OXUgBI9AAAAE8"]
[Sun Apr 26 01:01:34.111561 2026] [:error] [pid 59897:tid 59928] [client 20.199.101.230:3303] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-act.php"] [unique_id "aezzbvBrrkdzpEbmK4e6IgAAAIE"]
[Sun Apr 26 01:01:35.031619 2026] [:error] [pid 59897:tid 59948] [client 20.199.101.230:11302] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-act.php"] [unique_id "aezzb_BrrkdzpEbmK4e6JAAAAJU"]
[Sun Apr 26 01:01:35.659648 2026] [:error] [pid 59898:tid 59978] [client 20.199.101.230:25254] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-act.php"] [unique_id "aezzbx-4vImxb0kbdzfX2gAAANg"]
[Sun Apr 26 01:01:36.494300 2026] [:error] [pid 59897:tid 59934] [client 20.199.101.230:23858] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-act.php"] [unique_id "aezzcPBrrkdzpEbmK4e6JwAAAIc"]
[Sun Apr 26 01:01:37.345819 2026] [:error] [pid 59898:tid 59959] [client 20.199.101.230:16379] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "aezzcR-4vImxb0kbdzfX5QAAAMU"]
[Sun Apr 26 01:01:38.195817 2026] [:error] [pid 3212:tid 3216] [client 20.199.101.230:42887] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "aezzcvg-28TY8_YLtUeuRwAAAQI"]
[Sun Apr 26 01:01:38.884319 2026] [:error] [pid 3212:tid 3214] [client 20.199.101.230:20976] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "aezzcvg-28TY8_YLtUeuSgAAAQA"]
[Sun Apr 26 01:01:39.755998 2026] [:error] [pid 59898:tid 59974] [client 20.199.101.230:34186] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "aezzcx-4vImxb0kbdzfX5wAAANQ"]
[Sun Apr 26 01:01:40.626895 2026] [:error] [pid 59896:tid 59911] [client 20.199.101.230:16694] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/index.php"] [unique_id "aezzdLLLzhtkd-OXUgBJEwAAAEs"]
[Sun Apr 26 01:01:41.300212 2026] [:error] [pid 59898:tid 59961] [client 20.199.101.230:16354] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/index.php"] [unique_id "aezzdR-4vImxb0kbdzfX6gAAAMc"]
[Sun Apr 26 01:01:41.945230 2026] [:error] [pid 3212:tid 3229] [client 20.199.101.230:16349] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/index.php"] [unique_id "aezzdfg-28TY8_YLtUeuTgAAAQ8"]
[Sun Apr 26 01:01:42.634879 2026] [:error] [pid 59896:tid 59901] [client 20.199.101.230:3267] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/index.php"] [unique_id "aezzdrLLzhtkd-OXUgBJHgAAAEE"]
[Sun Apr 26 01:01:43.491950 2026] [:error] [pid 3212:tid 3231] [client 20.199.101.230:23853] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sbhu.php"] [unique_id "aezzd_g-28TY8_YLtUeuUwAAARE"]
[Sun Apr 26 01:01:44.488207 2026] [:error] [pid 3212:tid 3224] [client 20.199.101.230:47684] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sbhu.php"] [unique_id "aezzePg-28TY8_YLtUeuVQAAAQo"]
[Sun Apr 26 01:01:45.391752 2026] [:error] [pid 59898:tid 59975] [client 20.199.101.230:11099] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sbhu.php"] [unique_id "aezzeR-4vImxb0kbdzfX7AAAANU"]
[Sun Apr 26 01:01:46.132114 2026] [:error] [pid 59897:tid 59929] [client 20.199.101.230:3546] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sbhu.php"] [unique_id "aezzevBrrkdzpEbmK4e6LgAAAII"]
[Sun Apr 26 01:01:47.078760 2026] [:error] [pid 59898:tid 59959] [client 20.199.101.230:11103] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-blog.php"] [unique_id "aezzex-4vImxb0kbdzfX7gAAAMU"]
[Sun Apr 26 01:01:47.985488 2026] [:error] [pid 59898:tid 59962] [client 20.199.101.230:36998] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-blog.php"] [unique_id "aezzex-4vImxb0kbdzfX7wAAAMg"]
[Sun Apr 26 01:01:48.890951 2026] [proxy_fcgi:error] [pid 59897:tid 59943] [client 20.199.101.230:17279] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:01:50.098637 2026] [autoindex:error] [pid 59896:tid 59906] [client 20.199.101.230:16679] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 01:01:50.760587 2026] [proxy_fcgi:error] [pid 59896:tid 59908] [client 20.199.101.230:16679] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:01:51.335635 2026] [proxy_fcgi:error] [pid 59896:tid 59907] [client 20.199.101.230:16679] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:01:52.233084 2026] [proxy_fcgi:error] [pid 59898:tid 59966] [client 20.199.101.230:47703] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:01:53.230284 2026] [proxy_fcgi:error] [pid 59898:tid 59965] [client 20.199.101.230:47740] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:01:53.783537 2026] [proxy_fcgi:error] [pid 59898:tid 59974] [client 20.199.101.230:47740] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:01:54.810890 2026] [proxy_fcgi:error] [pid 3212:tid 3237] [client 20.199.101.230:3549] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:01:55.757684 2026] [proxy_fcgi:error] [pid 59897:tid 59945] [client 20.199.101.230:23843] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:01:56.865359 2026] [proxy_fcgi:error] [pid 3212:tid 3221] [client 20.199.101.230:20968] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:01:57.827743 2026] [proxy_fcgi:error] [pid 3212:tid 3217] [client 20.199.101.230:16337] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:01:58.386093 2026] [proxy_fcgi:error] [pid 3212:tid 3219] [client 20.199.101.230:16337] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:01:59.192324 2026] [:error] [pid 3212:tid 3232] [client 20.199.101.230:3283] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fff.php"] [unique_id "aezzh_g-28TY8_YLtUeuYgAAARI"]
[Sun Apr 26 01:02:00.555882 2026] [:error] [pid 3212:tid 3218] [client 20.199.101.230:23828] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fff.php"] [unique_id "aezziPg-28TY8_YLtUeuZgAAAQQ"]
[Sun Apr 26 01:02:01.871621 2026] [:error] [pid 3212:tid 3237] [client 20.199.101.230:23818] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fff.php"] [unique_id "aezzifg-28TY8_YLtUeuagAAARc"]
[Sun Apr 26 01:02:02.629427 2026] [:error] [pid 3212:tid 3221] [client 20.199.101.230:39246] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fff.php"] [unique_id "aezzivg-28TY8_YLtUeubQAAAQc"]
[Sun Apr 26 01:02:03.500929 2026] [:error] [pid 59897:tid 59937] [client 20.199.101.230:12183] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/"] [unique_id "aezzi_BrrkdzpEbmK4e6MwAAAIo"]
[Sun Apr 26 01:02:04.175576 2026] [:error] [pid 59896:tid 59905] [client 20.199.101.230:17265] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/"] [unique_id "aezzjLLLzhtkd-OXUgBJiAAAAEU"]
[Sun Apr 26 01:02:05.130592 2026] [:error] [pid 59896:tid 59919] [client 20.199.101.230:34336] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/"] [unique_id "aezzjbLLzhtkd-OXUgBJigAAAFM"]
[Sun Apr 26 01:02:06.104324 2026] [:error] [pid 59897:tid 59942] [client 20.199.101.230:20936] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/"] [unique_id "aezzjvBrrkdzpEbmK4e6NQAAAI8"]
[Sun Apr 26 01:02:06.935096 2026] [:error] [pid 59985:tid 59994] [client 20.199.101.230:16364] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/makeasmtp.php"] [unique_id "aezzjgF_zDvEhKvyTH71awAAAAc"]
[Sun Apr 26 01:02:07.974333 2026] [:error] [pid 59985:tid 60010] [client 20.199.101.230:47749] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/makeasmtp.php"] [unique_id "aezzjwF_zDvEhKvyTH71bQAAABc"]
[Sun Apr 26 01:02:09.124512 2026] [:error] [pid 59896:tid 59908] [client 20.199.101.230:34355] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/makeasmtp.php"] [unique_id "aezzkbLLzhtkd-OXUgBJkAAAAEg"]
[Sun Apr 26 01:02:10.007068 2026] [:error] [pid 59897:tid 59931] [client 20.199.101.230:25226] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/makeasmtp.php"] [unique_id "aezzkvBrrkdzpEbmK4e6OgAAAIQ"]
[Sun Apr 26 01:02:10.858111 2026] [:error] [pid 3212:tid 3228] [client 20.199.101.230:47712] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin1.php"] [unique_id "aezzkvg-28TY8_YLtUeudgAAAQ4"]
[Sun Apr 26 01:02:11.657669 2026] [:error] [pid 3212:tid 3236] [client 20.199.101.230:3529] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin1.php"] [unique_id "aezzk_g-28TY8_YLtUeuewAAARY"]
[Sun Apr 26 01:02:12.476115 2026] [:error] [pid 59898:tid 59972] [client 20.199.101.230:47682] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin1.php"] [unique_id "aezzlB-4vImxb0kbdzfYHwAAANI"]
[Sun Apr 26 01:02:13.245017 2026] [:error] [pid 59896:tid 59923] [client 20.199.101.230:11118] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/admin1.php"] [unique_id "aezzlbLLzhtkd-OXUgBJkwAAAFc"]
[Sun Apr 26 01:02:14.069206 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:3295] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/"] [unique_id "aezzlvg-28TY8_YLtUeufQAAARg"]
[Sun Apr 26 01:02:15.186244 2026] [:error] [pid 59896:tid 59922] [client 20.199.101.230:34349] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/"] [unique_id "aezzl7LLzhtkd-OXUgBJlwAAAFY"]
[Sun Apr 26 01:02:16.090381 2026] [:error] [pid 59896:tid 59909] [client 20.199.101.230:47733] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/"] [unique_id "aezzmLLLzhtkd-OXUgBJmAAAAEk"]
[Sun Apr 26 01:02:17.432671 2026] [:error] [pid 59985:tid 59991] [client 20.199.101.230:21520] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/"] [unique_id "aezzmQF_zDvEhKvyTH71dAAAAAQ"]
[Sun Apr 26 01:02:18.473587 2026] [:error] [pid 59897:tid 59927] [client 20.199.101.230:23817] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/BDKR28WP.php"] [unique_id "aezzmvBrrkdzpEbmK4e6PgAAAIA"]
[Sun Apr 26 01:02:19.328535 2026] [:error] [pid 59896:tid 59918] [client 20.199.101.230:3311] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/BDKR28WP.php"] [unique_id "aezzm7LLzhtkd-OXUgBJngAAAFI"]
[Sun Apr 26 01:02:20.377920 2026] [:error] [pid 59896:tid 59901] [client 20.199.101.230:39290] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/BDKR28WP.php"] [unique_id "aezznLLLzhtkd-OXUgBJoAAAAEE"]
[Sun Apr 26 01:02:21.214108 2026] [:error] [pid 59896:tid 59915] [client 20.199.101.230:47759] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/BDKR28WP.php"] [unique_id "aezznbLLzhtkd-OXUgBJoQAAAE8"]
[Sun Apr 26 01:02:22.348283 2026] [:error] [pid 59896:tid 59920] [client 20.199.101.230:42925] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/l10n/"] [unique_id "aezznrLLzhtkd-OXUgBJogAAAFQ"]
[Sun Apr 26 01:02:23.083368 2026] [:error] [pid 59985:tid 59994] [client 20.199.101.230:3555] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/l10n/"] [unique_id "aezznwF_zDvEhKvyTH71fAAAAAc"]
[Sun Apr 26 01:02:24.111915 2026] [:error] [pid 59985:tid 60011] [client 20.199.101.230:17266] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/l10n/"] [unique_id "aezzoAF_zDvEhKvyTH71fwAAABg"]
[Sun Apr 26 01:02:25.410967 2026] [:error] [pid 59985:tid 60009] [client 20.199.101.230:16346] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/l10n/"] [unique_id "aezzoQF_zDvEhKvyTH71ggAAABY"]
[Sun Apr 26 01:02:26.114030 2026] [:error] [pid 3212:tid 3236] [client 20.199.101.230:34361] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/"] [unique_id "aezzovg-28TY8_YLtUeukwAAARY"]
[Sun Apr 26 01:02:26.864135 2026] [:error] [pid 59897:tid 59945] [client 20.199.101.230:21550] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/"] [unique_id "aezzovBrrkdzpEbmK4e6QAAAAJI"]
[Sun Apr 26 01:02:27.901474 2026] [:error] [pid 59897:tid 59940] [client 20.199.101.230:34351] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/"] [unique_id "aezzo_BrrkdzpEbmK4e6QQAAAI0"]
[Sun Apr 26 01:02:29.284758 2026] [:error] [pid 59985:tid 59996] [client 20.199.101.230:47790] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/"] [unique_id "aezzpQF_zDvEhKvyTH71igAAAAk"]
[Sun Apr 26 01:02:31.744078 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:47765] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "aezzp_g-28TY8_YLtUeumQAAARg"]
[Sun Apr 26 01:02:32.756036 2026] [:error] [pid 59897:tid 59937] [client 20.199.101.230:12223] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "aezzqPBrrkdzpEbmK4e6QgAAAIo"]
[Sun Apr 26 01:02:33.427976 2026] [:error] [pid 59896:tid 59921] [client 20.199.101.230:17263] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "aezzqbLLzhtkd-OXUgBJqwAAAFU"]
[Sun Apr 26 01:02:34.098268 2026] [:error] [pid 59897:tid 59951] [client 20.199.101.230:16685] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "aezzqvBrrkdzpEbmK4e6RQAAAJg"]
[Sun Apr 26 01:02:34.993468 2026] [:error] [pid 59898:tid 59966] [client 20.199.101.230:23855] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aezzqh-4vImxb0kbdzfYQAAAAMw"]
[Sun Apr 26 01:02:35.651839 2026] [:error] [pid 59896:tid 59906] [client 20.199.101.230:47700] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aezzq7LLzhtkd-OXUgBJrAAAAEY"]
[Sun Apr 26 01:02:36.543874 2026] [:error] [pid 3212:tid 3222] [client 20.199.101.230:34309] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aezzrPg-28TY8_YLtUeungAAAQg"]
[Sun Apr 26 01:02:37.491411 2026] [:error] [pid 59897:tid 59935] [client 20.199.101.230:20977] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aezzrfBrrkdzpEbmK4e6SAAAAIg"]
[Sun Apr 26 01:02:38.293002 2026] [:error] [pid 59898:tid 59960] [client 20.199.101.230:3673] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fe5.php"] [unique_id "aezzrh-4vImxb0kbdzfYQwAAAMY"]
[Sun Apr 26 01:02:38.991877 2026] [:error] [pid 59898:tid 59973] [client 20.199.101.230:20979] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fe5.php"] [unique_id "aezzrh-4vImxb0kbdzfYRgAAANM"]
[Sun Apr 26 01:02:39.651953 2026] [:error] [pid 59896:tid 59903] [client 20.199.101.230:23827] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fe5.php"] [unique_id "aezzr7LLzhtkd-OXUgBJsQAAAEM"]
[Sun Apr 26 01:02:40.319450 2026] [:error] [pid 59896:tid 59920] [client 20.199.101.230:42884] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/fe5.php"] [unique_id "aezzsLLLzhtkd-OXUgBJtQAAAFQ"]
[Sun Apr 26 01:02:40.907608 2026] [:error] [pid 3212:tid 3217] [client 20.199.101.230:17245] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aezzsPg-28TY8_YLtUeuowAAAQM"]
[Sun Apr 26 01:02:41.691506 2026] [:error] [pid 3212:tid 3230] [client 20.199.101.230:47780] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aezzsfg-28TY8_YLtUeupQAAARA"]
[Sun Apr 26 01:02:42.448599 2026] [:error] [pid 59897:tid 59949] [client 20.199.101.230:20982] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aezzsvBrrkdzpEbmK4e6TQAAAJY"]
[Sun Apr 26 01:02:43.186344 2026] [:error] [pid 59896:tid 59906] [client 20.199.101.230:20978] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aezzs7LLzhtkd-OXUgBJvwAAAEY"]
[Sun Apr 26 01:02:43.722414 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:47696] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/av.php"] [unique_id "aezzs_g-28TY8_YLtUeuqgAAARg"]
[Sun Apr 26 01:02:45.623876 2026] [:error] [pid 59898:tid 59958] [client 20.199.101.230:11088] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/av.php"] [unique_id "aezztR-4vImxb0kbdzfYSQAAAMQ"]
[Sun Apr 26 01:02:46.480193 2026] [:error] [pid 59897:tid 59932] [client 20.199.101.230:3284] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/av.php"] [unique_id "aezztvBrrkdzpEbmK4e6TwAAAIU"]
[Sun Apr 26 01:02:47.246632 2026] [:error] [pid 59897:tid 59943] [client 20.199.101.230:42928] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/av.php"] [unique_id "aezzt_BrrkdzpEbmK4e6UgAAAJA"]
[Sun Apr 26 01:02:48.052580 2026] [:error] [pid 3212:tid 3224] [client 20.199.101.230:47783] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "aezzuPg-28TY8_YLtUeurAAAAQo"]
[Sun Apr 26 01:02:48.825525 2026] [:error] [pid 59896:tid 59922] [client 20.199.101.230:12175] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "aezzuLLLzhtkd-OXUgBJxAAAAFY"]
[Sun Apr 26 01:02:49.465502 2026] [:error] [pid 3212:tid 3218] [client 20.199.101.230:12222] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "aezzufg-28TY8_YLtUeurgAAAQQ"]
[Sun Apr 26 01:02:50.310542 2026] [:error] [pid 59896:tid 59914] [client 20.199.101.230:42903] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "aezzurLLzhtkd-OXUgBJxQAAAE4"]
[Sun Apr 26 01:02:51.021657 2026] [:error] [pid 3212:tid 3217] [client 20.199.101.230:47787] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a1.php"] [unique_id "aezzu_g-28TY8_YLtUeutQAAAQM"]
[Sun Apr 26 01:02:51.761589 2026] [:error] [pid 3212:tid 3235] [client 20.199.101.230:47735] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a1.php"] [unique_id "aezzu_g-28TY8_YLtUeuugAAARU"]
[Sun Apr 26 01:02:52.303509 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:34357] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a1.php"] [unique_id "aezzvPg-28TY8_YLtUeuvwAAARg"]
[Sun Apr 26 01:02:53.042538 2026] [:error] [pid 59897:tid 59937] [client 20.199.101.230:10771] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/a1.php"] [unique_id "aezzvfBrrkdzpEbmK4e6VAAAAIo"]
[Sun Apr 26 01:02:53.995835 2026] [:error] [pid 59897:tid 59942] [client 20.199.101.230:47764] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/update/f35.php"] [unique_id "aezzvfBrrkdzpEbmK4e6VgAAAI8"]
[Sun Apr 26 01:02:54.713431 2026] [:error] [pid 59985:tid 60011] [client 20.199.101.230:3569] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/update/f35.php"] [unique_id "aezzvgF_zDvEhKvyTH71oQAAABg"]
[Sun Apr 26 01:02:55.355366 2026] [:error] [pid 3212:tid 3228] [client 20.199.101.230:3698] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/update/f35.php"] [unique_id "aezzv_g-28TY8_YLtUeuxAAAAQ4"]
[Sun Apr 26 01:02:56.264036 2026] [:error] [pid 59985:tid 60004] [client 20.199.101.230:16353] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/update/f35.php"] [unique_id "aezzwAF_zDvEhKvyTH71pQAAABE"]
[Sun Apr 26 01:02:57.008522 2026] [:error] [pid 59896:tid 59908] [client 20.199.101.230:3551] [client 20.199.101.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aezzwbLLzhtkd-OXUgBJyQAAAEg"]
[Sun Apr 26 01:02:57.794294 2026] [:error] [pid 59985:tid 59998] [client 20.199.101.230:3578] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/f35.php"] [unique_id "aezzwQF_zDvEhKvyTH71pgAAAAs"]
[Sun Apr 26 01:02:58.965678 2026] [proxy_fcgi:error] [pid 59896:tid 59924] [client 20.199.101.230:25257] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:03:00.272886 2026] [proxy_fcgi:error] [pid 3212:tid 3223] [client 20.199.101.230:23826] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:03:00.539652 2026] [autoindex:error] [pid 3212:tid 3227] [client 20.199.101.230:23826] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 01:03:00.811484 2026] [autoindex:error] [pid 3212:tid 3234] [client 20.199.101.230:23826] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 01:03:01.418738 2026] [proxy_fcgi:error] [pid 3212:tid 3230] [client 20.199.101.230:23826] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:03:02.682416 2026] [proxy_fcgi:error] [pid 3212:tid 3221] [client 20.199.101.230:34350] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:03:03.742046 2026] [proxy_fcgi:error] [pid 3212:tid 3219] [client 20.199.101.230:21560] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:03:04.700014 2026] [proxy_fcgi:error] [pid 59898:tid 59970] [client 20.199.101.230:3294] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:03:05.814186 2026] [proxy_fcgi:error] [pid 59896:tid 59916] [client 20.199.101.230:12221] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:03:06.378377 2026] [proxy_fcgi:error] [pid 59896:tid 59909] [client 20.199.101.230:12221] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:03:07.403586 2026] [proxy_fcgi:error] [pid 3212:tid 3215] [client 20.199.101.230:30021] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:03:08.329460 2026] [proxy_fcgi:error] [pid 3212:tid 3232] [client 20.199.101.230:25266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:03:09.339679 2026] [proxy_fcgi:error] [pid 3212:tid 3230] [client 20.199.101.230:3264] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:03:10.275142 2026] [proxy_fcgi:error] [pid 3212:tid 3226] [client 20.199.101.230:47769] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:03:11.271994 2026] [proxy_fcgi:error] [pid 3212:tid 3224] [client 20.199.101.230:3677] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:03:12.308348 2026] [proxy_fcgi:error] [pid 59896:tid 59913] [client 20.199.101.230:20941] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:03:13.009053 2026] [:error] [pid 59985:tid 59992] [client 20.199.101.230:47701] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/"] [unique_id "aezz0QF_zDvEhKvyTH71vwAAAAU"]
[Sun Apr 26 01:03:13.560899 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:11075] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/"] [unique_id "aezz0fg-28TY8_YLtUeu4AAAARQ"]
[Sun Apr 26 01:03:14.290362 2026] [:error] [pid 3212:tid 3230] [client 20.199.101.230:3306] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/"] [unique_id "aezz0vg-28TY8_YLtUeu5AAAARA"]
[Sun Apr 26 01:03:14.948208 2026] [:error] [pid 3212:tid 3220] [client 20.199.101.230:11098] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/"] [unique_id "aezz0vg-28TY8_YLtUeu6AAAAQY"]
[Sun Apr 26 01:03:15.646843 2026] [:error] [pid 59896:tid 59903] [client 20.199.101.230:47761] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/simple.php"] [unique_id "aezz07LLzhtkd-OXUgBJ1gAAAEM"]
[Sun Apr 26 01:03:16.322151 2026] [:error] [pid 59897:tid 59939] [client 20.199.101.230:11106] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/simple.php"] [unique_id "aezz1PBrrkdzpEbmK4e6YQAAAIw"]
[Sun Apr 26 01:03:17.009027 2026] [:error] [pid 59896:tid 59912] [client 20.199.101.230:25236] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/simple.php"] [unique_id "aezz1bLLzhtkd-OXUgBJ1wAAAEw"]
[Sun Apr 26 01:03:17.777716 2026] [:error] [pid 3212:tid 3235] [client 20.199.101.230:47741] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/simple.php"] [unique_id "aezz1fg-28TY8_YLtUeu7gAAARU"]
[Sun Apr 26 01:03:18.363721 2026] [:error] [pid 59897:tid 59937] [client 20.199.101.230:47765] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/drykl.php"] [unique_id "aezz1vBrrkdzpEbmK4e6ZwAAAIo"]
[Sun Apr 26 01:03:18.972612 2026] [:error] [pid 3212:tid 3226] [client 20.199.101.230:34316] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/drykl.php"] [unique_id "aezz1vg-28TY8_YLtUeu8gAAAQw"]
[Sun Apr 26 01:03:19.667724 2026] [:error] [pid 3212:tid 3232] [client 20.199.101.230:16377] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/drykl.php"] [unique_id "aezz1_g-28TY8_YLtUeu9wAAARI"]
[Sun Apr 26 01:03:20.239985 2026] [:error] [pid 3212:tid 3237] [client 20.199.101.230:16672] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/drykl.php"] [unique_id "aezz2Pg-28TY8_YLtUeu_AAAARc"]
[Sun Apr 26 01:03:20.849995 2026] [:error] [pid 3212:tid 3235] [client 20.199.101.230:3292] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xxx.php"] [unique_id "aezz2Pg-28TY8_YLtUeu_wAAARU"]
[Sun Apr 26 01:03:21.750804 2026] [:error] [pid 59898:tid 59956] [client 20.199.101.230:12191] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xxx.php"] [unique_id "aezz2R-4vImxb0kbdzfYWwAAAMI"]
[Sun Apr 26 01:03:22.620073 2026] [:error] [pid 59896:tid 59905] [client 20.199.101.230:16365] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xxx.php"] [unique_id "aezz2rLLzhtkd-OXUgBJ2gAAAEU"]
[Sun Apr 26 01:03:23.262375 2026] [:error] [pid 59897:tid 59944] [client 20.199.101.230:12220] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xxx.php"] [unique_id "aezz2_BrrkdzpEbmK4e6awAAAJE"]
[Sun Apr 26 01:03:23.744034 2026] [:error] [pid 59897:tid 59933] [client 20.199.101.230:17263] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/hypo.php"] [unique_id "aezz2_BrrkdzpEbmK4e6bAAAAIY"]
[Sun Apr 26 01:03:24.294348 2026] [:error] [pid 59896:tid 59914] [client 20.199.101.230:20964] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/hypo.php"] [unique_id "aezz3LLLzhtkd-OXUgBJ3wAAAE4"]
[Sun Apr 26 01:03:24.860990 2026] [:error] [pid 59897:tid 59949] [client 20.199.101.230:12211] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/hypo.php"] [unique_id "aezz3PBrrkdzpEbmK4e6bgAAAJY"]
[Sun Apr 26 01:03:25.603514 2026] [:error] [pid 59896:tid 59915] [client 20.199.101.230:20944] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/hypo.php"] [unique_id "aezz3bLLzhtkd-OXUgBJ4AAAAE8"]
[Sun Apr 26 01:03:26.179847 2026] [:error] [pid 59896:tid 59909] [client 20.199.101.230:47719] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/file18.php"] [unique_id "aezz3rLLzhtkd-OXUgBJ4QAAAEk"]
[Sun Apr 26 01:03:26.839656 2026] [:error] [pid 59985:tid 60000] [client 20.199.101.230:17269] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/file18.php"] [unique_id "aezz3gF_zDvEhKvyTH71yAAAAA0"]
[Sun Apr 26 01:03:27.422456 2026] [:error] [pid 59898:tid 59955] [client 20.199.101.230:34325] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/file18.php"] [unique_id "aezz3x-4vImxb0kbdzfYXgAAAME"]
[Sun Apr 26 01:03:28.055684 2026] [:error] [pid 59896:tid 59908] [client 20.199.101.230:3583] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/file18.php"] [unique_id "aezz4LLLzhtkd-OXUgBJ5AAAAEg"]
[Sun Apr 26 01:03:28.611265 2026] [:error] [pid 59985:tid 59990] [client 20.199.101.230:21543] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xwx1.php"] [unique_id "aezz4AF_zDvEhKvyTH71ygAAAAM"]
[Sun Apr 26 01:03:29.246899 2026] [:error] [pid 59897:tid 59928] [client 20.199.101.230:3272] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xwx1.php"] [unique_id "aezz4fBrrkdzpEbmK4e6dAAAAIE"]
[Sun Apr 26 01:03:29.895092 2026] [:error] [pid 59896:tid 59920] [client 20.199.101.230:20973] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xwx1.php"] [unique_id "aezz4bLLzhtkd-OXUgBJ6AAAAFQ"]
[Sun Apr 26 01:03:30.427072 2026] [:error] [pid 59896:tid 59905] [client 20.199.101.230:34222] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xwx1.php"] [unique_id "aezz4rLLzhtkd-OXUgBJ6gAAAEU"]
[Sun Apr 26 01:03:31.116294 2026] [:error] [pid 3212:tid 3220] [client 20.199.101.230:3296] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aezz4_g-28TY8_YLtUevEAAAAQY"]
[Sun Apr 26 01:03:31.907750 2026] [:error] [pid 59898:tid 59960] [client 20.199.101.230:20953] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aezz4x-4vImxb0kbdzfYYAAAAMY"]
[Sun Apr 26 01:03:32.578253 2026] [:error] [pid 3212:tid 3237] [client 20.199.101.230:3548] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aezz5Pg-28TY8_YLtUevFQAAARc"]
[Sun Apr 26 01:03:33.684363 2026] [:error] [pid 3212:tid 3225] [client 20.199.101.230:11104] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aezz5fg-28TY8_YLtUevGAAAAQs"]
[Sun Apr 26 01:03:34.585597 2026] [:error] [pid 59985:tid 59997] [client 20.199.101.230:47802] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "aezz5gF_zDvEhKvyTH710QAAAAo"]
[Sun Apr 26 01:03:35.291628 2026] [:error] [pid 59985:tid 59993] [client 20.199.101.230:3541] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "aezz5wF_zDvEhKvyTH710wAAAAY"]
[Sun Apr 26 01:03:36.082181 2026] [:error] [pid 59985:tid 59989] [client 20.199.101.230:17259] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "aezz6AF_zDvEhKvyTH711gAAAAI"]
[Sun Apr 26 01:03:36.870487 2026] [:error] [pid 59896:tid 59913] [client 20.199.101.230:3316] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "aezz6LLLzhtkd-OXUgBJ7QAAAE0"]
[Sun Apr 26 01:50:32.780329 2026] [proxy_fcgi:error] [pid 3212:tid 3233] [client 52.236.68.31:2763] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:50:33.612943 2026] [proxy_fcgi:error] [pid 59896:tid 59921] [client 52.236.68.31:1489] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 01:50:34.433505 2026] [proxy_fcgi:error] [pid 59985:tid 59992] [client 52.236.68.31:1533] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 03:46:03.689538 2026] [proxy_fcgi:error] [pid 3212:tid 3220] [client 93.159.230.84:57206] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 03:47:46.910965 2026] [proxy_fcgi:error] [pid 3212:tid 3233] [client 93.159.230.84:39914] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:22.940788 2026] [proxy_fcgi:error] [pid 10315:tid 10338] [client 20.215.249.60:16272] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:24.266714 2026] [proxy_fcgi:error] [pid 10315:tid 10326] [client 20.215.249.60:16343] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:25.272011 2026] [proxy_fcgi:error] [pid 8385:tid 8442] [client 20.215.249.60:16266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:26.487158 2026] [proxy_fcgi:error] [pid 8491:tid 8521] [client 20.215.249.60:16353] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:27.626118 2026] [proxy_fcgi:error] [pid 41906:tid 41911] [client 20.215.249.60:16269] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:28.824587 2026] [proxy_fcgi:error] [pid 41906:tid 41910] [client 20.215.249.60:16324] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:29.906728 2026] [proxy_fcgi:error] [pid 41906:tid 41925] [client 20.215.249.60:16268] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:30.858649 2026] [proxy_fcgi:error] [pid 31273:tid 31362] [client 20.215.249.60:16374] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:31.966572 2026] [proxy_fcgi:error] [pid 8491:tid 8512] [client 20.215.249.60:16366] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:33.000021 2026] [proxy_fcgi:error] [pid 41906:tid 41922] [client 20.215.249.60:16347] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:34.148191 2026] [proxy_fcgi:error] [pid 41906:tid 41924] [client 20.215.249.60:16350] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:35.127795 2026] [proxy_fcgi:error] [pid 8385:tid 8441] [client 20.215.249.60:16259] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:36.120862 2026] [proxy_fcgi:error] [pid 10315:tid 10326] [client 20.215.249.60:16271] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:37.139067 2026] [proxy_fcgi:error] [pid 8385:tid 8440] [client 20.215.249.60:16298] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:38.000386 2026] [proxy_fcgi:error] [pid 8385:tid 8442] [client 20.215.249.60:16349] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:39.175272 2026] [proxy_fcgi:error] [pid 31273:tid 31354] [client 20.215.249.60:16339] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:40.222012 2026] [proxy_fcgi:error] [pid 8390:tid 8475] [client 20.215.249.60:16205] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:41.293588 2026] [proxy_fcgi:error] [pid 10315:tid 10341] [client 20.215.249.60:16263] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:42.254883 2026] [proxy_fcgi:error] [pid 31273:tid 31347] [client 20.215.249.60:16323] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:43.071721 2026] [proxy_fcgi:error] [pid 8390:tid 8464] [client 20.215.249.60:16283] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:44.157520 2026] [proxy_fcgi:error] [pid 8385:tid 8442] [client 20.215.249.60:16369] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:45.110940 2026] [proxy_fcgi:error] [pid 8383:tid 8418] [client 20.215.249.60:16364] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:45.997656 2026] [proxy_fcgi:error] [pid 8491:tid 8504] [client 20.215.249.60:16321] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:46.894789 2026] [proxy_fcgi:error] [pid 10315:tid 10319] [client 20.215.249.60:16335] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:47.824013 2026] [proxy_fcgi:error] [pid 10315:tid 10333] [client 20.215.249.60:16361] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:48.370517 2026] [proxy_fcgi:error] [pid 10315:tid 10327] [client 20.215.249.60:16361] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:49.371011 2026] [proxy_fcgi:error] [pid 41906:tid 41915] [client 20.215.249.60:16273] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:50.279851 2026] [proxy_fcgi:error] [pid 10315:tid 10323] [client 20.215.249.60:16301] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:51.262769 2026] [proxy_fcgi:error] [pid 8383:tid 8398] [client 20.215.249.60:16287] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:52.127087 2026] [proxy_fcgi:error] [pid 8383:tid 8405] [client 20.215.249.60:16371] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:53.520955 2026] [proxy_fcgi:error] [pid 8385:tid 8435] [client 20.215.249.60:16295] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:54.559404 2026] [proxy_fcgi:error] [pid 8390:tid 8455] [client 20.215.249.60:16215] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:55.499811 2026] [proxy_fcgi:error] [pid 8390:tid 8458] [client 20.215.249.60:16207] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:56.387682 2026] [proxy_fcgi:error] [pid 8491:tid 8512] [client 20.215.249.60:16279] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:57.347657 2026] [proxy_fcgi:error] [pid 8385:tid 8433] [client 20.215.249.60:16294] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:58.199698 2026] [proxy_fcgi:error] [pid 10315:tid 10329] [client 20.215.249.60:16338] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:17:59.143724 2026] [proxy_fcgi:error] [pid 41906:tid 41916] [client 20.215.249.60:16365] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:00.121283 2026] [proxy_fcgi:error] [pid 41906:tid 41911] [client 20.215.249.60:16357] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:01.100334 2026] [proxy_fcgi:error] [pid 41906:tid 41914] [client 20.215.249.60:16358] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:02.103916 2026] [proxy_fcgi:error] [pid 8491:tid 8502] [client 20.215.249.60:16352] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:03.066349 2026] [proxy_fcgi:error] [pid 31273:tid 31354] [client 20.215.249.60:16270] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:03.962673 2026] [proxy_fcgi:error] [pid 10315:tid 10328] [client 20.215.249.60:16363] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:04.668951 2026] [proxy_fcgi:error] [pid 10315:tid 10325] [client 20.215.249.60:16363] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:05.617951 2026] [proxy_fcgi:error] [pid 31273:tid 31341] [client 20.215.249.60:16192] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:06.504957 2026] [proxy_fcgi:error] [pid 8491:tid 8504] [client 20.215.249.60:16304] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:07.350225 2026] [proxy_fcgi:error] [pid 8390:tid 8470] [client 20.215.249.60:16265] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:08.245738 2026] [proxy_fcgi:error] [pid 8390:tid 8474] [client 20.215.249.60:16292] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:09.151843 2026] [proxy_fcgi:error] [pid 10315:tid 10321] [client 20.215.249.60:16334] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:10.037171 2026] [proxy_fcgi:error] [pid 8383:tid 8401] [client 20.215.249.60:16256] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:10.881503 2026] [proxy_fcgi:error] [pid 10315:tid 10329] [client 20.215.249.60:16372] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:11.838558 2026] [proxy_fcgi:error] [pid 8390:tid 8469] [client 20.215.249.60:16275] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:12.862746 2026] [proxy_fcgi:error] [pid 10315:tid 10317] [client 20.215.249.60:16201] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:13.913827 2026] [proxy_fcgi:error] [pid 10315:tid 10326] [client 20.215.249.60:16276] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:15.017840 2026] [proxy_fcgi:error] [pid 31273:tid 31356] [client 20.215.249.60:16348] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:16.008810 2026] [proxy_fcgi:error] [pid 31273:tid 31349] [client 20.215.249.60:16344] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:16.887555 2026] [proxy_fcgi:error] [pid 31273:tid 31358] [client 20.215.249.60:16131] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:17.966981 2026] [proxy_fcgi:error] [pid 8390:tid 8451] [client 20.215.249.60:16204] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:18.878555 2026] [proxy_fcgi:error] [pid 8390:tid 8475] [client 20.215.249.60:16342] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:19.780274 2026] [proxy_fcgi:error] [pid 31273:tid 31337] [client 20.215.249.60:16311] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:20.728833 2026] [proxy_fcgi:error] [pid 10315:tid 10335] [client 20.215.249.60:16310] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:21.661039 2026] [proxy_fcgi:error] [pid 8390:tid 8470] [client 20.215.249.60:16377] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:22.542785 2026] [proxy_fcgi:error] [pid 8385:tid 8446] [client 20.215.249.60:16343] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:23.497551 2026] [proxy_fcgi:error] [pid 8385:tid 8437] [client 20.215.249.60:16367] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:24.070006 2026] [proxy_fcgi:error] [pid 8385:tid 8438] [client 20.215.249.60:16367] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:25.030203 2026] [proxy_fcgi:error] [pid 8390:tid 8459] [client 20.215.249.60:16330] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:26.040411 2026] [proxy_fcgi:error] [pid 8390:tid 8458] [client 20.215.249.60:16274] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:27.050872 2026] [proxy_fcgi:error] [pid 31273:tid 31361] [client 20.215.249.60:16312] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:27.961466 2026] [proxy_fcgi:error] [pid 41906:tid 41914] [client 20.215.249.60:16356] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:28.969858 2026] [proxy_fcgi:error] [pid 8383:tid 8418] [client 20.215.249.60:16351] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:29.848354 2026] [proxy_fcgi:error] [pid 10315:tid 10333] [client 20.215.249.60:16360] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:30.813370 2026] [proxy_fcgi:error] [pid 41906:tid 41917] [client 20.215.249.60:16370] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:31.672287 2026] [proxy_fcgi:error] [pid 10315:tid 10324] [client 20.215.249.60:16381] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:32.224187 2026] [proxy_fcgi:error] [pid 10315:tid 10340] [client 20.215.249.60:16381] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:33.277871 2026] [proxy_fcgi:error] [pid 10315:tid 10323] [client 20.215.249.60:16316] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:34.222754 2026] [proxy_fcgi:error] [pid 41906:tid 41925] [client 20.215.249.60:16199] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:35.059711 2026] [proxy_fcgi:error] [pid 10315:tid 10322] [client 20.215.249.60:16359] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:35.982829 2026] [proxy_fcgi:error] [pid 8390:tid 8469] [client 20.215.249.60:16348] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:36.829145 2026] [proxy_fcgi:error] [pid 10315:tid 10320] [client 20.215.249.60:16380] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:37.976083 2026] [proxy_fcgi:error] [pid 8385:tid 8437] [client 20.215.249.60:16281] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:38.827138 2026] [proxy_fcgi:error] [pid 41906:tid 41919] [client 20.215.249.60:16284] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:39.708569 2026] [proxy_fcgi:error] [pid 41906:tid 41915] [client 20.215.249.60:16210] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:40.545563 2026] [proxy_fcgi:error] [pid 41906:tid 41920] [client 20.215.249.60:16308] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:41.570610 2026] [proxy_fcgi:error] [pid 8383:tid 8414] [client 20.215.249.60:16267] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:42.594475 2026] [proxy_fcgi:error] [pid 41906:tid 41921] [client 20.215.249.60:16260] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:43.428918 2026] [proxy_fcgi:error] [pid 10315:tid 10326] [client 20.215.249.60:16234] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:43.966414 2026] [proxy_fcgi:error] [pid 10315:tid 10335] [client 20.215.249.60:16234] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:44.914868 2026] [proxy_fcgi:error] [pid 8385:tid 8430] [client 20.215.249.60:16264] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:45.968353 2026] [proxy_fcgi:error] [pid 41906:tid 41915] [client 20.215.249.60:16378] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:47.040655 2026] [proxy_fcgi:error] [pid 41906:tid 41913] [client 20.215.249.60:16326] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:47.925481 2026] [proxy_fcgi:error] [pid 41906:tid 41919] [client 20.215.249.60:16345] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:48.823738 2026] [proxy_fcgi:error] [pid 41906:tid 41915] [client 20.215.249.60:16219] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:49.910874 2026] [proxy_fcgi:error] [pid 8385:tid 8424] [client 20.215.249.60:16346] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:50.741004 2026] [proxy_fcgi:error] [pid 8390:tid 8465] [client 20.215.249.60:16296] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:51.722112 2026] [proxy_fcgi:error] [pid 10315:tid 10327] [client 20.215.249.60:16320] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:52.571187 2026] [proxy_fcgi:error] [pid 10315:tid 10321] [client 20.215.249.60:16361] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:53.649659 2026] [proxy_fcgi:error] [pid 10315:tid 10332] [client 20.215.249.60:16261] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:55.608257 2026] [proxy_fcgi:error] [pid 10315:tid 10334] [client 20.215.249.60:16322] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:56.998706 2026] [proxy_fcgi:error] [pid 10315:tid 10333] [client 20.215.249.60:16318] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:58.097812 2026] [proxy_fcgi:error] [pid 31273:tid 31336] [client 20.215.249.60:16329] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:18:59.363990 2026] [proxy_fcgi:error] [pid 31273:tid 31349] [client 20.215.249.60:16375] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:00.367551 2026] [proxy_fcgi:error] [pid 8390:tid 8457] [client 20.215.249.60:16354] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:01.571619 2026] [proxy_fcgi:error] [pid 8385:tid 8448] [client 20.215.249.60:16340] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:02.581544 2026] [proxy_fcgi:error] [pid 8390:tid 8463] [client 20.215.249.60:16221] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:03.539529 2026] [proxy_fcgi:error] [pid 8390:tid 8473] [client 20.215.249.60:16198] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:04.132420 2026] [proxy_fcgi:error] [pid 8390:tid 8467] [client 20.215.249.60:16198] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:05.085939 2026] [proxy_fcgi:error] [pid 8390:tid 8452] [client 20.215.249.60:16314] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:05.951996 2026] [proxy_fcgi:error] [pid 8390:tid 8468] [client 20.215.249.60:16193] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:06.957319 2026] [proxy_fcgi:error] [pid 10315:tid 10335] [client 20.215.249.60:16244] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:07.872920 2026] [proxy_fcgi:error] [pid 10315:tid 10331] [client 20.215.249.60:16337] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:08.739983 2026] [proxy_fcgi:error] [pid 8491:tid 8511] [client 20.215.249.60:16162] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:09.947165 2026] [proxy_fcgi:error] [pid 41906:tid 41910] [client 20.215.249.60:16336] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:10.951102 2026] [proxy_fcgi:error] [pid 10315:tid 10329] [client 20.215.249.60:16382] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:11.535363 2026] [proxy_fcgi:error] [pid 10315:tid 10325] [client 20.215.249.60:16382] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:12.552806 2026] [proxy_fcgi:error] [pid 41906:tid 41925] [client 20.215.249.60:16319] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:13.629485 2026] [proxy_fcgi:error] [pid 8390:tid 8452] [client 20.215.249.60:16327] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:14.505968 2026] [proxy_fcgi:error] [pid 10315:tid 10336] [client 20.215.249.60:16200] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:15.437926 2026] [proxy_fcgi:error] [pid 8383:tid 8421] [client 20.215.249.60:16282] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:16.358870 2026] [proxy_fcgi:error] [pid 10315:tid 10330] [client 20.215.249.60:16289] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:17.254715 2026] [proxy_fcgi:error] [pid 10315:tid 10334] [client 20.215.249.60:16291] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:18.173274 2026] [proxy_fcgi:error] [pid 8383:tid 8416] [client 20.215.249.60:16262] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:19.292019 2026] [proxy_fcgi:error] [pid 8390:tid 8469] [client 20.215.249.60:16136] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:20.167802 2026] [proxy_fcgi:error] [pid 8390:tid 8462] [client 20.215.249.60:16303] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:20.738243 2026] [proxy_fcgi:error] [pid 8390:tid 8459] [client 20.215.249.60:16303] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:21.715927 2026] [proxy_fcgi:error] [pid 8390:tid 8454] [client 20.215.249.60:16288] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:22.574267 2026] [proxy_fcgi:error] [pid 8383:tid 8408] [client 20.215.249.60:16242] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:23.428579 2026] [proxy_fcgi:error] [pid 8383:tid 8414] [client 20.215.249.60:16194] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:24.372843 2026] [proxy_fcgi:error] [pid 31273:tid 31360] [client 20.215.249.60:16197] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:25.276610 2026] [proxy_fcgi:error] [pid 10315:tid 10328] [client 20.215.249.60:16373] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:26.343192 2026] [proxy_fcgi:error] [pid 8383:tid 8413] [client 20.215.249.60:16233] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:27.187109 2026] [proxy_fcgi:error] [pid 10315:tid 10341] [client 20.215.249.60:16211] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:28.140921 2026] [proxy_fcgi:error] [pid 8491:tid 8517] [client 20.215.249.60:16341] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:29.287525 2026] [proxy_fcgi:error] [pid 8390:tid 8456] [client 20.215.249.60:16315] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:29.878762 2026] [proxy_fcgi:error] [pid 8390:tid 8466] [client 20.215.249.60:16315] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:30.889462 2026] [proxy_fcgi:error] [pid 8390:tid 8468] [client 20.215.249.60:16277] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:31.844377 2026] [proxy_fcgi:error] [pid 8491:tid 8506] [client 20.215.249.60:16195] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:32.833825 2026] [proxy_fcgi:error] [pid 8491:tid 8520] [client 20.215.249.60:16243] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:34.220606 2026] [proxy_fcgi:error] [pid 8385:tid 8429] [client 20.215.249.60:16224] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:35.172134 2026] [proxy_fcgi:error] [pid 10315:tid 10330] [client 20.215.249.60:16368] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:36.046108 2026] [proxy_fcgi:error] [pid 8385:tid 8441] [client 20.215.249.60:16362] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:37.159856 2026] [proxy_fcgi:error] [pid 8491:tid 8519] [client 20.215.249.60:16147] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:38.182498 2026] [proxy_fcgi:error] [pid 10315:tid 10336] [client 20.215.249.60:16286] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:39.098731 2026] [proxy_fcgi:error] [pid 10315:tid 10317] [client 20.215.249.60:16280] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:40.105194 2026] [proxy_fcgi:error] [pid 8390:tid 8465] [client 20.215.249.60:16285] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:40.698278 2026] [proxy_fcgi:error] [pid 8390:tid 8461] [client 20.215.249.60:16285] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:41.780763 2026] [proxy_fcgi:error] [pid 8383:tid 8404] [client 20.215.249.60:16232] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:42.924697 2026] [proxy_fcgi:error] [pid 8491:tid 8515] [client 20.215.249.60:16156] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:43.885632 2026] [proxy_fcgi:error] [pid 31273:tid 31357] [client 20.215.249.60:16204] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:44.833944 2026] [proxy_fcgi:error] [pid 41906:tid 41920] [client 20.215.249.60:16216] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:45.750338 2026] [proxy_fcgi:error] [pid 8390:tid 8460] [client 20.215.249.60:16154] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:46.695432 2026] [proxy_fcgi:error] [pid 8390:tid 8452] [client 20.215.249.60:16302] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:47.604869 2026] [proxy_fcgi:error] [pid 31273:tid 31360] [client 20.215.249.60:16196] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:48.485227 2026] [proxy_fcgi:error] [pid 41906:tid 41931] [client 20.215.249.60:16251] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:49.385675 2026] [proxy_fcgi:error] [pid 10315:tid 10334] [client 20.215.249.60:16236] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:50.304056 2026] [proxy_fcgi:error] [pid 8385:tid 8426] [client 20.215.249.60:16376] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:51.228660 2026] [proxy_fcgi:error] [pid 10315:tid 10320] [client 20.215.249.60:16209] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:52.167372 2026] [proxy_fcgi:error] [pid 31273:tid 31363] [client 20.215.249.60:16238] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:53.049907 2026] [proxy_fcgi:error] [pid 41906:tid 41923] [client 20.215.249.60:16240] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:53.629316 2026] [proxy_fcgi:error] [pid 41906:tid 41913] [client 20.215.249.60:16240] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:54.544581 2026] [proxy_fcgi:error] [pid 10315:tid 10328] [client 20.215.249.60:16237] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:55.870588 2026] [proxy_fcgi:error] [pid 31273:tid 31361] [client 20.215.249.60:16246] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:56.980132 2026] [proxy_fcgi:error] [pid 41906:tid 41925] [client 20.215.249.60:16379] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:58.001646 2026] [proxy_fcgi:error] [pid 8383:tid 8418] [client 20.215.249.60:16328] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:58.843490 2026] [proxy_fcgi:error] [pid 8390:tid 8458] [client 20.215.249.60:16206] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:19:59.972570 2026] [proxy_fcgi:error] [pid 8385:tid 8430] [client 20.215.249.60:16278] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:00.878864 2026] [proxy_fcgi:error] [pid 8385:tid 8440] [client 20.215.249.60:16227] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:01.925068 2026] [proxy_fcgi:error] [pid 8491:tid 8508] [client 20.215.249.60:16253] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:02.911272 2026] [proxy_fcgi:error] [pid 10315:tid 10333] [client 20.215.249.60:16202] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:03.821749 2026] [proxy_fcgi:error] [pid 8383:tid 8407] [client 20.215.249.60:16249] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:04.662515 2026] [proxy_fcgi:error] [pid 10315:tid 10329] [client 20.215.249.60:16222] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:05.757673 2026] [proxy_fcgi:error] [pid 8491:tid 8500] [client 20.215.249.60:16208] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:06.718359 2026] [proxy_fcgi:error] [pid 10315:tid 10319] [client 20.215.249.60:16299] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:07.761716 2026] [proxy_fcgi:error] [pid 10315:tid 10322] [client 20.215.249.60:16220] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:08.827567 2026] [proxy_fcgi:error] [pid 10315:tid 10330] [client 20.215.249.60:16174] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:09.750837 2026] [proxy_fcgi:error] [pid 8491:tid 8520] [client 20.215.249.60:16293] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:10.618680 2026] [proxy_fcgi:error] [pid 8383:tid 8405] [client 20.215.249.60:16307] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:11.483084 2026] [proxy_fcgi:error] [pid 8491:tid 8510] [client 20.215.249.60:16130] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:12.512457 2026] [proxy_fcgi:error] [pid 8383:tid 8406] [client 20.215.249.60:16226] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:13.490725 2026] [proxy_fcgi:error] [pid 10315:tid 10331] [client 20.215.249.60:16355] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:14.377660 2026] [proxy_fcgi:error] [pid 10315:tid 10317] [client 20.215.249.60:16072] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:15.299046 2026] [proxy_fcgi:error] [pid 41906:tid 41930] [client 20.215.249.60:16325] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:16.143888 2026] [proxy_fcgi:error] [pid 41906:tid 41928] [client 20.215.249.60:16076] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:17.041818 2026] [proxy_fcgi:error] [pid 31273:tid 31352] [client 20.215.249.60:16217] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:17.866480 2026] [proxy_fcgi:error] [pid 41906:tid 41913] [client 20.215.249.60:16155] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:18.824533 2026] [proxy_fcgi:error] [pid 41906:tid 41922] [client 20.215.249.60:16241] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:19.736082 2026] [proxy_fcgi:error] [pid 41906:tid 41926] [client 20.215.249.60:16290] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:20.641034 2026] [proxy_fcgi:error] [pid 41906:tid 41918] [client 20.215.249.60:16257] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:21.520964 2026] [proxy_fcgi:error] [pid 41906:tid 41923] [client 20.215.249.60:16306] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:22.366371 2026] [proxy_fcgi:error] [pid 31273:tid 31362] [client 20.215.249.60:16129] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:23.274454 2026] [proxy_fcgi:error] [pid 31273:tid 31359] [client 20.215.249.60:16331] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:24.217032 2026] [proxy_fcgi:error] [pid 41906:tid 41913] [client 20.215.249.60:16258] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:25.118631 2026] [proxy_fcgi:error] [pid 41906:tid 41920] [client 20.215.249.60:16313] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:25.955331 2026] [proxy_fcgi:error] [pid 10315:tid 10340] [client 20.215.249.60:16145] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:26.820276 2026] [proxy_fcgi:error] [pid 8491:tid 8517] [client 20.215.249.60:16185] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:27.663801 2026] [proxy_fcgi:error] [pid 41906:tid 41912] [client 20.215.249.60:16245] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:28.508142 2026] [proxy_fcgi:error] [pid 31273:tid 31362] [client 20.215.249.60:16212] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:29.355601 2026] [proxy_fcgi:error] [pid 41906:tid 41928] [client 20.215.249.60:16223] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:30.241273 2026] [proxy_fcgi:error] [pid 10315:tid 10341] [client 20.215.249.60:16229] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:31.102779 2026] [proxy_fcgi:error] [pid 41906:tid 41915] [client 20.215.249.60:16167] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:32.001198 2026] [proxy_fcgi:error] [pid 10315:tid 10327] [client 20.215.249.60:16128] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:32.999775 2026] [proxy_fcgi:error] [pid 8390:tid 8453] [client 20.215.249.60:16188] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:33.947831 2026] [proxy_fcgi:error] [pid 10315:tid 10325] [client 20.215.249.60:16144] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:34.826375 2026] [proxy_fcgi:error] [pid 41906:tid 41923] [client 20.215.249.60:16220] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 05:20:35.772137 2026] [proxy_fcgi:error] [pid 10315:tid 10321] [client 20.215.249.60:16172] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:36:39.823999 2026] [proxy_fcgi:error] [pid 8491:tid 8514] [client 74.249.155.150:5442] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:36:40.947552 2026] [autoindex:error] [pid 22572:tid 22582] [client 74.249.155.150:5202] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 08:36:41.133011 2026] [:error] [pid 22572:tid 22589] [client 74.249.155.150:5202] [client 74.249.155.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.249.155.150, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ae1eGdXOViWCFU-pZzCEDAAAAUs"]
[Sun Apr 26 08:36:41.446639 2026] [proxy_fcgi:error] [pid 22572:tid 22589] [client 74.249.155.150:5202] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:36:42.886062 2026] [proxy_fcgi:error] [pid 8491:tid 8507] [client 74.249.155.150:5465] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:36:43.949762 2026] [autoindex:error] [pid 13137:tid 13161] [client 74.249.155.150:5463] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 08:36:44.498002 2026] [proxy_fcgi:error] [pid 13137:tid 13143] [client 74.249.155.150:5463] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:36:44.953066 2026] [proxy_fcgi:error] [pid 13137:tid 13151] [client 74.249.155.150:5463] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:36:45.538462 2026] [proxy_fcgi:error] [pid 13137:tid 13146] [client 74.249.155.150:5463] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:36:46.742736 2026] [proxy_fcgi:error] [pid 8491:tid 8519] [client 74.249.155.150:5243] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:36:47.883778 2026] [autoindex:error] [pid 16574:tid 16621] [client 74.249.155.150:5457] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 08:36:48.363181 2026] [proxy_fcgi:error] [pid 16574:tid 16619] [client 74.249.155.150:5457] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:36:49.700382 2026] [autoindex:error] [pid 8390:tid 8454] [client 74.249.155.150:5214] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 08:36:50.189304 2026] [proxy_fcgi:error] [pid 8390:tid 8463] [client 74.249.155.150:5214] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:36:51.745425 2026] [proxy_fcgi:error] [pid 22573:tid 22617] [client 74.249.155.150:5209] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:36:53.198908 2026] [proxy_fcgi:error] [pid 22572:tid 22588] [client 74.249.155.150:5220] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:36:53.716858 2026] [proxy_fcgi:error] [pid 22572:tid 22585] [client 74.249.155.150:5220] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:36:55.152540 2026] [proxy_fcgi:error] [pid 8491:tid 8507] [client 74.249.155.150:5227] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:36:56.400819 2026] [proxy_fcgi:error] [pid 8390:tid 8456] [client 74.249.155.150:5462] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:36:57.539308 2026] [proxy_fcgi:error] [pid 22572:tid 22583] [client 74.249.155.150:5454] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:36:58.702951 2026] [:error] [pid 8390:tid 8461] [client 74.249.155.150:5213] [client 74.249.155.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ae1eKoGPtFK_i9p5yxREYwAAAIo"]
[Sun Apr 26 08:36:59.918488 2026] [proxy_fcgi:error] [pid 22572:tid 22578] [client 74.249.155.150:5239] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:01.919532 2026] [autoindex:error] [pid 13137:tid 13144] [client 74.249.155.150:21215] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 08:37:02.380285 2026] [proxy_fcgi:error] [pid 13137:tid 13158] [client 74.249.155.150:21215] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:03.589929 2026] [proxy_fcgi:error] [pid 16574:tid 16633] [client 74.249.155.150:5446] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:04.061234 2026] [proxy_fcgi:error] [pid 16574:tid 16611] [client 74.249.155.150:5446] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:05.288322 2026] [proxy_fcgi:error] [pid 16515:tid 16526] [client 74.249.155.150:5456] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:06.656828 2026] [proxy_fcgi:error] [pid 13137:tid 13142] [client 74.249.155.150:5468] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:07.875941 2026] [proxy_fcgi:error] [pid 16515:tid 16538] [client 74.249.155.150:5234] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:08.063352 2026] [:error] [pid 16515:tid 16527] [client 74.249.155.150:5234] [client 74.249.155.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/index.php"] [unique_id "ae1eNFtDrUmgHSvpuLzWOAAAAkk"]
[Sun Apr 26 08:37:09.238165 2026] [autoindex:error] [pid 8390:tid 8473] [client 74.249.155.150:5201] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 08:37:09.747498 2026] [proxy_fcgi:error] [pid 8390:tid 8464] [client 74.249.155.150:5201] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:10.711886 2026] [autoindex:error] [pid 22573:tid 22631] [client 74.249.155.150:5222] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/block/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 08:37:11.211617 2026] [proxy_fcgi:error] [pid 22573:tid 22616] [client 74.249.155.150:5222] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:12.329727 2026] [:error] [pid 16515:tid 16532] [client 74.249.155.150:5241] [client 74.249.155.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "ae1eOFtDrUmgHSvpuLzWQAAAAk4"]
[Sun Apr 26 08:37:13.601196 2026] [proxy_fcgi:error] [pid 8390:tid 8470] [client 74.249.155.150:21189] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:14.889138 2026] [proxy_fcgi:error] [pid 8390:tid 8464] [client 74.249.155.150:5452] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:16.253947 2026] [proxy_fcgi:error] [pid 8383:tid 8406] [client 74.249.155.150:5229] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:16.789418 2026] [proxy_fcgi:error] [pid 8383:tid 8408] [client 74.249.155.150:5229] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:17.999640 2026] [proxy_fcgi:error] [pid 8491:tid 8504] [client 74.249.155.150:5198] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:19.199111 2026] [proxy_fcgi:error] [pid 22573:tid 22610] [client 74.249.155.150:5232] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:19.696075 2026] [proxy_fcgi:error] [pid 22573:tid 22627] [client 74.249.155.150:5232] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:21.005576 2026] [proxy_fcgi:error] [pid 22573:tid 22630] [client 74.249.155.150:5480] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:21.913707 2026] [:error] [pid 22572:tid 22580] [client 74.249.155.150:5212] [client 74.249.155.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/index.php"] [unique_id "ae1eQdXOViWCFU-pZzCEUwAAAUI"]
[Sun Apr 26 08:37:23.184736 2026] [proxy_fcgi:error] [pid 13137:tid 13153] [client 74.249.155.150:21220] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:24.666914 2026] [autoindex:error] [pid 22573:tid 22608] [client 74.249.155.150:5461] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 08:37:25.148389 2026] [proxy_fcgi:error] [pid 22573:tid 22609] [client 74.249.155.150:5461] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:26.390691 2026] [proxy_fcgi:error] [pid 13137:tid 13143] [client 74.249.155.150:5499] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:27.410486 2026] [proxy_fcgi:error] [pid 13137:tid 13149] [client 74.249.155.150:5208] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:27.601611 2026] [autoindex:error] [pid 13137:tid 13148] [client 74.249.155.150:5208] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 08:37:28.099730 2026] [proxy_fcgi:error] [pid 13137:tid 13156] [client 74.249.155.150:5208] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:29.364974 2026] [proxy_fcgi:error] [pid 8383:tid 8415] [client 74.249.155.150:5496] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 08:37:30.750358 2026] [proxy_fcgi:error] [pid 13197:tid 13241] [client 74.249.155.150:5210] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:01:12.793152 2026] [proxy_fcgi:error] [pid 8491:tid 8520] [client 205.169.39.16:40543] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:17:08.095913 2026] [proxy_fcgi:error] [pid 22572:tid 22598] [client 20.9.69.97:64320] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:17:13.549164 2026] [proxy_fcgi:error] [pid 13197:tid 13235] [client 20.9.69.97:64350] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:17:24.896317 2026] [proxy_fcgi:error] [pid 8390:tid 8464] [client 20.9.69.97:64283] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:17:50.500884 2026] [proxy_fcgi:error] [pid 22572:tid 22590] [client 20.9.69.97:64299] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:17:52.806817 2026] [proxy_fcgi:error] [pid 16515:tid 16529] [client 20.9.69.97:64259] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:17:55.827816 2026] [proxy_fcgi:error] [pid 8390:tid 8452] [client 20.9.69.97:64343] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:17:56.390332 2026] [proxy_fcgi:error] [pid 8390:tid 8467] [client 20.9.69.97:64343] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:17:58.823275 2026] [proxy_fcgi:error] [pid 13137:tid 13154] [client 20.9.69.97:64354] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:18:01.583019 2026] [proxy_fcgi:error] [pid 13137:tid 13148] [client 20.9.69.97:64274] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:18:04.518685 2026] [proxy_fcgi:error] [pid 8390:tid 8474] [client 20.9.69.97:64318] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:18:09.634292 2026] [proxy_fcgi:error] [pid 22572:tid 22596] [client 20.9.69.97:64362] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:18:13.757049 2026] [proxy_fcgi:error] [pid 13137:tid 13142] [client 20.9.69.97:64312] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:18:21.243685 2026] [:error] [pid 22573:tid 22622] [client 20.9.69.97:64329] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xv.php"] [unique_id "ae117XB3EmQlD4yKUt9Z4QAAAY8"]
[Sun Apr 26 10:18:26.706274 2026] [:error] [pid 8390:tid 8467] [client 20.9.69.97:64278] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/xv.php"] [unique_id "ae118oGPtFK_i9p5yxR4twAAAJA"]
[Sun Apr 26 10:18:33.944406 2026] [:error] [pid 22572:tid 22583] [client 20.9.69.97:64266] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/x56.php"] [unique_id "ae11-dXOViWCFU-pZzChmAAAAUU"]
[Sun Apr 26 10:18:36.867705 2026] [:error] [pid 8390:tid 8462] [client 20.9.69.97:64300] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/x56.php"] [unique_id "ae11_IGPtFK_i9p5yxR4xQAAAIs"]
[Sun Apr 26 10:18:39.579865 2026] [:error] [pid 16515:tid 16522] [client 20.9.69.97:64277] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/x56.php"] [unique_id "ae11_1tDrUmgHSvpuLzqcQAAAkQ"]
[Sun Apr 26 10:18:44.100121 2026] [:error] [pid 8491:tid 8517] [client 20.9.69.97:64269] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/x56.php"] [unique_id "ae12BCq7I7e6CJooQM3CYAAAANI"]
[Sun Apr 26 10:18:47.566930 2026] [:error] [pid 8390:tid 8464] [client 20.9.69.97:64309] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/htaccess.php"] [unique_id "ae12B4GPtFK_i9p5yxR40gAAAI0"]
[Sun Apr 26 10:18:50.075269 2026] [:error] [pid 16574:tid 16631] [client 20.9.69.97:59333] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/htaccess.php"] [unique_id "ae12Cn5MsX8wRQr99nYMZgAAA1I"]
[Sun Apr 26 10:18:53.765347 2026] [:error] [pid 22573:tid 22626] [client 20.9.69.97:59342] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/htaccess.php"] [unique_id "ae12DXB3EmQlD4yKUt9aBwAAAZM"]
[Sun Apr 26 10:18:58.856941 2026] [:error] [pid 8390:tid 8472] [client 20.9.69.97:64348] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/htaccess.php"] [unique_id "ae12EoGPtFK_i9p5yxR49wAAAJU"]
[Sun Apr 26 10:19:01.354721 2026] [:error] [pid 8390:tid 8474] [client 20.9.69.97:64359] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/readme.php"] [unique_id "ae12FYGPtFK_i9p5yxR5AQAAAJc"]
[Sun Apr 26 10:19:05.008078 2026] [:error] [pid 16515:tid 16522] [client 20.9.69.97:64324] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/readme.php"] [unique_id "ae12GVtDrUmgHSvpuLzqhwAAAkQ"]
[Sun Apr 26 10:19:06.478359 2026] [:error] [pid 16515:tid 16526] [client 20.9.69.97:64355] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/readme.php"] [unique_id "ae12GltDrUmgHSvpuLzqiwAAAkg"]
[Sun Apr 26 10:19:10.958436 2026] [:error] [pid 8385:tid 8439] [client 20.9.69.97:64372] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/readme.php"] [unique_id "ae12HjOy7_J84Wx3-oyMTwAAAE8"]
[Sun Apr 26 10:19:12.913598 2026] [:error] [pid 13197:tid 13247] [client 20.9.69.97:64271] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/x50.php"] [unique_id "ae12IN3kktFKdSxTrBumiQAAAs8"]
[Sun Apr 26 10:19:17.809943 2026] [proxy_fcgi:error] [pid 8390:tid 8459] [client 20.9.69.97:64315] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:19:23.537290 2026] [proxy_fcgi:error] [pid 16515:tid 16538] [client 20.9.69.97:64291] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:19:28.273641 2026] [proxy_fcgi:error] [pid 22573:tid 22628] [client 20.9.69.97:64338] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:19:34.432420 2026] [proxy_fcgi:error] [pid 22572:tid 22588] [client 20.9.69.97:64334] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:19:39.052037 2026] [proxy_fcgi:error] [pid 22572:tid 22588] [client 20.9.69.97:59283] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:19:43.066936 2026] [proxy_fcgi:error] [pid 8390:tid 8470] [client 20.9.69.97:64256] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:19:47.879118 2026] [proxy_fcgi:error] [pid 8390:tid 8466] [client 20.9.69.97:59361] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:19:58.652156 2026] [:error] [pid 22573:tid 22623] [client 20.9.69.97:64272] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/atx.php"] [unique_id "ae12TnB3EmQlD4yKUt9aYQAAAZA"]
[Sun Apr 26 10:20:08.369305 2026] [:error] [pid 13137:tid 13157] [client 20.9.69.97:64366] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/z60.php"] [unique_id "ae12WN0RB4J0o4h5neENIwAAAhA"]
[Sun Apr 26 10:20:15.075299 2026] [:error] [pid 8385:tid 8443] [client 20.9.69.97:64351] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/z60.php"] [unique_id "ae12XzOy7_J84Wx3-oyMiAAAAFM"]
[Sun Apr 26 10:20:27.503408 2026] [:error] [pid 8390:tid 8465] [client 20.9.69.97:64294] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/403.php"] [unique_id "ae12a4GPtFK_i9p5yxR5uAAAAI4"]
[Sun Apr 26 10:20:45.116855 2026] [:error] [pid 8390:tid 8473] [client 20.9.69.97:64311] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/m.php"] [unique_id "ae12fYGPtFK_i9p5yxR51gAAAJY"]
[Sun Apr 26 10:20:53.072268 2026] [proxy_fcgi:error] [pid 13197:tid 13245] [client 20.9.69.97:59347] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:20:57.577299 2026] [proxy_fcgi:error] [pid 8385:tid 8445] [client 20.9.69.97:64316] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:21:01.939731 2026] [proxy_fcgi:error] [pid 13197:tid 13253] [client 20.9.69.97:64363] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:21:08.737975 2026] [proxy_fcgi:error] [pid 22573:tid 22606] [client 20.9.69.97:64364] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:21:09.275931 2026] [proxy_fcgi:error] [pid 22573:tid 22618] [client 20.9.69.97:64364] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:21:13.829833 2026] [proxy_fcgi:error] [pid 22573:tid 22619] [client 20.9.69.97:64308] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:21:24.812285 2026] [proxy_fcgi:error] [pid 8390:tid 8471] [client 20.9.69.97:64342] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:21:28.006820 2026] [proxy_fcgi:error] [pid 8383:tid 8411] [client 20.9.69.97:64361] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:21:35.815805 2026] [:error] [pid 22572:tid 22583] [client 20.9.69.97:64375] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/simple.php"] [unique_id "ae12r9XOViWCFU-pZzCi4gAAAUU"]
[Sun Apr 26 10:21:43.024451 2026] [:error] [pid 8390:tid 8468] [client 20.9.69.97:59271] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/simple.php"] [unique_id "ae12t4GPtFK_i9p5yxR6YgAAAJE"]
[Sun Apr 26 10:21:59.281826 2026] [:error] [pid 8491:tid 8504] [client 20.9.69.97:64281] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/css.php"] [unique_id "ae12xyq7I7e6CJooQM3C6wAAAMU"]
[Sun Apr 26 10:22:11.411495 2026] [:error] [pid 22572:tid 22596] [client 20.9.69.97:64327] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cong.php"] [unique_id "ae1209XOViWCFU-pZzCjHQAAAVI"]
[Sun Apr 26 10:22:13.451337 2026] [:error] [pid 16574:tid 16610] [client 20.9.69.97:59335] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cong.php"] [unique_id "ae121X5MsX8wRQr99nYMzAAAA0Y"]
[Sun Apr 26 10:22:18.119958 2026] [:error] [pid 22573:tid 22624] [client 20.9.69.97:64265] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cong.php"] [unique_id "ae122nB3EmQlD4yKUt9bmQAAAZE"]
[Sun Apr 26 10:22:20.904066 2026] [:error] [pid 8390:tid 8455] [client 20.9.69.97:64379] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cong.php"] [unique_id "ae123IGPtFK_i9p5yxR60AAAAIQ"]
[Sun Apr 26 10:22:23.706907 2026] [:error] [pid 8390:tid 8453] [client 20.9.69.97:64368] [client 20.9.69.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ae1234GPtFK_i9p5yxR67wAAAII"]
[Sun Apr 26 10:22:29.699388 2026] [proxy_fcgi:error] [pid 16515:tid 16533] [client 20.9.69.97:64290] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:22:35.710167 2026] [proxy_fcgi:error] [pid 13137:tid 13155] [client 20.9.69.97:64374] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:22:40.129506 2026] [proxy_fcgi:error] [pid 8491:tid 8510] [client 20.9.69.97:64257] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:22:42.687489 2026] [proxy_fcgi:error] [pid 8491:tid 8509] [client 20.9.69.97:64329] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:22:44.831874 2026] [proxy_fcgi:error] [pid 8385:tid 8435] [client 20.9.69.97:64283] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:22:49.816801 2026] [proxy_fcgi:error] [pid 22573:tid 22631] [client 20.9.69.97:64340] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:22:53.306995 2026] [proxy_fcgi:error] [pid 22573:tid 22625] [client 20.9.69.97:64373] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:22:56.313944 2026] [proxy_fcgi:error] [pid 8390:tid 8465] [client 20.9.69.97:64343] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:22:56.839539 2026] [proxy_fcgi:error] [pid 8390:tid 8468] [client 20.9.69.97:64343] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:23:00.381660 2026] [proxy_fcgi:error] [pid 22572:tid 22580] [client 20.9.69.97:64296] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:23:03.800978 2026] [proxy_fcgi:error] [pid 16515:tid 16519] [client 20.9.69.97:64306] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:23:06.931847 2026] [proxy_fcgi:error] [pid 22573:tid 22631] [client 20.9.69.97:64317] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:23:09.029389 2026] [proxy_fcgi:error] [pid 8390:tid 8457] [client 20.9.69.97:64376] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:23:09.530466 2026] [proxy_fcgi:error] [pid 8390:tid 8456] [client 20.9.69.97:64376] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:23:14.881331 2026] [proxy_fcgi:error] [pid 13137:tid 13154] [client 20.9.69.97:59285] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:23:19.339281 2026] [:error] [pid 16515:tid 16527] [client 20.9.69.97:64262] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "ae13F1tDrUmgHSvpuLzrhQAAAkk"]
[Sun Apr 26 10:23:23.391361 2026] [:error] [pid 13137:tid 13161] [client 20.9.69.97:64353] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "ae13G90RB4J0o4h5neEOPAAAAhQ"]
[Sun Apr 26 10:23:25.669970 2026] [:error] [pid 13197:tid 13242] [client 20.9.69.97:64382] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "ae13Hd3kktFKdSxTrBunBwAAAss"]
[Sun Apr 26 10:23:28.665310 2026] [:error] [pid 8390:tid 8475] [client 20.9.69.97:64299] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "ae13IIGPtFK_i9p5yxR7pAAAAJg"]
[Sun Apr 26 10:23:31.345279 2026] [:error] [pid 8390:tid 8453] [client 20.9.69.97:64276] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "ae13I4GPtFK_i9p5yxR7pgAAAII"]
[Sun Apr 26 10:23:32.688682 2026] [:error] [pid 8385:tid 8431] [client 20.9.69.97:64285] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "ae13JDOy7_J84Wx3-oyNZwAAAEc"]
[Sun Apr 26 10:23:34.523639 2026] [:error] [pid 8383:tid 8402] [client 20.9.69.97:64270] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "ae13JtFa2S3EsATMdWPffwAAAAU"]
[Sun Apr 26 10:23:36.848289 2026] [:error] [pid 8390:tid 8472] [client 20.9.69.97:64350] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "ae13KIGPtFK_i9p5yxR7rAAAAJU"]
[Sun Apr 26 10:23:40.374290 2026] [:error] [pid 22572:tid 22599] [client 20.9.69.97:59349] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "ae13LNXOViWCFU-pZzCjhgAAAVU"]
[Sun Apr 26 10:23:45.707025 2026] [:error] [pid 22572:tid 22588] [client 20.9.69.97:64297] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "ae13MdXOViWCFU-pZzCjiwAAAUo"]
[Sun Apr 26 10:23:49.433356 2026] [:error] [pid 13197:tid 13237] [client 20.9.69.97:64322] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "ae13Nd3kktFKdSxTrBunMQAAAsY"]
[Sun Apr 26 10:23:54.298003 2026] [:error] [pid 13197:tid 13241] [client 20.9.69.97:64358] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ae13Ot3kktFKdSxTrBunPwAAAso"]
[Sun Apr 26 10:23:59.589077 2026] [:error] [pid 8390:tid 8454] [client 20.9.69.97:64304] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ae13P4GPtFK_i9p5yxR79QAAAIM"]
[Sun Apr 26 10:24:01.312691 2026] [:error] [pid 8390:tid 8451] [client 20.9.69.97:59280] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ae13QYGPtFK_i9p5yxR7_QAAAIA"]
[Sun Apr 26 10:24:03.120001 2026] [:error] [pid 8491:tid 8501] [client 20.9.69.97:64286] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ae13Qyq7I7e6CJooQM3DVQAAAMI"]
[Sun Apr 26 10:24:05.707183 2026] [:error] [pid 8390:tid 8469] [client 20.9.69.97:59369] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "ae13RYGPtFK_i9p5yxR8DAAAAJI"]
[Sun Apr 26 10:24:08.235125 2026] [:error] [pid 8390:tid 8455] [client 20.9.69.97:64320] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "ae13SIGPtFK_i9p5yxR8GwAAAIQ"]
[Sun Apr 26 10:24:13.793149 2026] [:error] [pid 22573:tid 22621] [client 20.9.69.97:64332] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "ae13TXB3EmQlD4yKUt9cUAAAAY4"]
[Sun Apr 26 10:24:19.553586 2026] [proxy_fcgi:error] [pid 8390:tid 8466] [client 20.9.69.97:59372] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:24:20.039649 2026] [proxy_fcgi:error] [pid 8390:tid 8464] [client 20.9.69.97:59372] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:24:30.787663 2026] [proxy_fcgi:error] [pid 8390:tid 8471] [client 20.9.69.97:64260] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:24:31.304266 2026] [proxy_fcgi:error] [pid 8390:tid 8461] [client 20.9.69.97:64260] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:24:39.871107 2026] [proxy_fcgi:error] [pid 13137:tid 13165] [client 20.9.69.97:64357] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:24:40.397374 2026] [proxy_fcgi:error] [pid 13137:tid 13153] [client 20.9.69.97:64357] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:24:52.214016 2026] [proxy_fcgi:error] [pid 8385:tid 8441] [client 20.9.69.97:64263] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:24:58.196653 2026] [proxy_fcgi:error] [pid 22572:tid 22588] [client 20.9.69.97:64366] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:25:03.456642 2026] [:error] [pid 8390:tid 8457] [client 20.9.69.97:64310] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "ae13f4GPtFK_i9p5yxR8vQAAAIY"]
[Sun Apr 26 10:25:07.421588 2026] [:error] [pid 22572:tid 22582] [client 20.9.69.97:64274] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "ae13g9XOViWCFU-pZzCkMgAAAUQ"]
[Sun Apr 26 10:25:14.924391 2026] [:error] [pid 13137:tid 13152] [client 20.9.69.97:64363] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "ae13it0RB4J0o4h5neEO1gAAAgs"]
[Sun Apr 26 10:25:18.435010 2026] [:error] [pid 22573:tid 22608] [client 20.9.69.97:64280] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mail.php"] [unique_id "ae13jnB3EmQlD4yKUt9c5QAAAYI"]
[Sun Apr 26 10:25:21.746766 2026] [:error] [pid 8385:tid 8438] [client 20.9.69.97:64364] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mail.php"] [unique_id "ae13kTOy7_J84Wx3-oyN1wAAAE4"]
[Sun Apr 26 10:25:25.755588 2026] [:error] [pid 16574:tid 16641] [client 20.9.69.97:64345] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mail.php"] [unique_id "ae13lX5MsX8wRQr99nYNNAAAA1c"]
[Sun Apr 26 10:25:31.087667 2026] [:error] [pid 16574:tid 16625] [client 20.9.69.97:64377] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mail.php"] [unique_id "ae13m35MsX8wRQr99nYNQgAAA08"]
[Sun Apr 26 10:25:41.598837 2026] [:error] [pid 8385:tid 8424] [client 20.9.69.97:64258] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ae13pTOy7_J84Wx3-oyN-wAAAEA"]
[Sun Apr 26 10:25:53.258846 2026] [:error] [pid 22572:tid 22583] [client 20.9.69.97:64325] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/sx.php"] [unique_id "ae13sdXOViWCFU-pZzCkXgAAAUU"]
[Sun Apr 26 10:26:04.639273 2026] [proxy_fcgi:error] [pid 13137:tid 13162] [client 20.9.69.97:64273] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:26:24.604868 2026] [proxy_fcgi:error] [pid 22572:tid 22580] [client 20.9.69.97:56923] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:26:40.368574 2026] [:error] [pid 13137:tid 13165] [client 20.9.69.97:64360] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/alfa.php"] [unique_id "ae134N0RB4J0o4h5neEPFwAAAhg"]
[Sun Apr 26 10:26:49.019003 2026] [:error] [pid 16574:tid 16609] [client 20.9.69.97:64368] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/1.php"] [unique_id "ae136X5MsX8wRQr99nYNcgAAA0U"]
[Sun Apr 26 10:26:52.124999 2026] [:error] [pid 22572:tid 22601] [client 20.9.69.97:64371] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/1.php"] [unique_id "ae137NXOViWCFU-pZzClAgAAAVc"]
[Sun Apr 26 10:26:54.351609 2026] [:error] [pid 22572:tid 22591] [client 20.9.69.97:64256] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/1.php"] [unique_id "ae137tXOViWCFU-pZzClCAAAAU0"]
[Sun Apr 26 10:26:58.006069 2026] [:error] [pid 13137:tid 13157] [client 20.9.69.97:64309] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/1.php"] [unique_id "ae138t0RB4J0o4h5neEPPAAAAhA"]
[Sun Apr 26 10:27:02.646351 2026] [:error] [pid 8390:tid 8457] [client 20.9.69.97:59340] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/byp.php"] [unique_id "ae139oGPtFK_i9p5yxR-jQAAAIY"]
[Sun Apr 26 10:27:06.299901 2026] [:error] [pid 8390:tid 8466] [client 20.9.69.97:64314] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/byp.php"] [unique_id "ae13-oGPtFK_i9p5yxR-sAAAAI8"]
[Sun Apr 26 10:27:11.383661 2026] [:error] [pid 22573:tid 22615] [client 20.9.69.97:64367] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/byp.php"] [unique_id "ae13_3B3EmQlD4yKUt9d_AAAAYg"]
[Sun Apr 26 10:27:13.780558 2026] [:error] [pid 8390:tid 8459] [client 20.9.69.97:64340] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/byp.php"] [unique_id "ae14AYGPtFK_i9p5yxR-3AAAAIg"]
[Sun Apr 26 10:27:17.361960 2026] [:error] [pid 16515:tid 16534] [client 20.9.69.97:64344] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-trackback.php"] [unique_id "ae14BVtDrUmgHSvpuLzsywAAAlA"]
[Sun Apr 26 10:27:23.971959 2026] [:error] [pid 8390:tid 8475] [client 20.9.69.97:59363] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-trackback.php"] [unique_id "ae14C4GPtFK_i9p5yxR-9QAAAJg"]
[Sun Apr 26 10:27:26.900108 2026] [:error] [pid 22573:tid 22616] [client 20.9.69.97:64331] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-trackback.php"] [unique_id "ae14DnB3EmQlD4yKUt9eFAAAAYk"]
[Sun Apr 26 10:27:28.754114 2026] [:error] [pid 8390:tid 8452] [client 20.9.69.97:64374] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-trackback.php"] [unique_id "ae14EIGPtFK_i9p5yxR_GAAAAIE"]
[Sun Apr 26 10:27:30.121372 2026] [:error] [pid 22573:tid 22609] [client 20.9.69.97:64292] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/index.php"] [unique_id "ae14EnB3EmQlD4yKUt9eIQAAAYM"]
[Sun Apr 26 10:27:32.275501 2026] [:error] [pid 8390:tid 8464] [client 20.9.69.97:64379] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/index.php"] [unique_id "ae14FIGPtFK_i9p5yxR_MgAAAI0"]
[Sun Apr 26 10:27:35.479568 2026] [:error] [pid 22573:tid 22610] [client 20.9.69.97:64268] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/index.php"] [unique_id "ae14F3B3EmQlD4yKUt9eLAAAAYQ"]
[Sun Apr 26 10:27:37.664961 2026] [proxy_fcgi:error] [pid 13197:tid 13234] [client 20.9.69.97:64299] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:27:39.288283 2026] [proxy_fcgi:error] [pid 13197:tid 13231] [client 20.9.69.97:64299] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:27:42.084979 2026] [proxy_fcgi:error] [pid 13197:tid 13237] [client 20.9.69.97:64365] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:27:45.145258 2026] [proxy_fcgi:error] [pid 8390:tid 8466] [client 20.9.69.97:64363] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:27:53.336098 2026] [proxy_fcgi:error] [pid 13137:tid 13164] [client 20.9.69.97:64318] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:27:55.758709 2026] [proxy_fcgi:error] [pid 22573:tid 22607] [client 20.9.69.97:64320] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:27:57.177307 2026] [proxy_fcgi:error] [pid 13137:tid 13154] [client 20.9.69.97:64318] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:27:59.385628 2026] [:error] [pid 22573:tid 22628] [client 20.9.69.97:64336] [client 20.9.69.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ae14L3B3EmQlD4yKUt9eYQAAAZU"]
[Sun Apr 26 10:28:01.771968 2026] [proxy_fcgi:error] [pid 13137:tid 13145] [client 20.9.69.97:64266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:28:03.087844 2026] [proxy_fcgi:error] [pid 13137:tid 13144] [client 20.9.69.97:64266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:28:05.496141 2026] [:error] [pid 8383:tid 8408] [client 20.9.69.97:64275] [client 20.9.69.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ae14NdFa2S3EsATMdWPgXAAAAAs"]
[Sun Apr 26 10:28:08.293720 2026] [proxy_fcgi:error] [pid 16515:tid 16519] [client 20.9.69.97:64308] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:28:12.219436 2026] [proxy_fcgi:error] [pid 16515:tid 16519] [client 20.9.69.97:64257] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:28:14.672257 2026] [proxy_fcgi:error] [pid 8385:tid 8445] [client 20.9.69.97:64287] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:28:14.865645 2026] [autoindex:error] [pid 8385:tid 8437] [client 20.9.69.97:64287] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 10:28:15.070416 2026] [:error] [pid 8385:tid 8432] [client 20.9.69.97:64287] [client 20.9.69.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/about.php"] [unique_id "ae14PzOy7_J84Wx3-oyOmwAAAEg"]
[Sun Apr 26 10:28:17.611606 2026] [proxy_fcgi:error] [pid 22573:tid 22613] [client 20.9.69.97:59331] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:28:19.431565 2026] [proxy_fcgi:error] [pid 16574:tid 16610] [client 20.9.69.97:59355] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:28:21.144208 2026] [:error] [pid 8390:tid 8465] [client 20.9.69.97:64375] [client 20.9.69.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "ae14RYGPtFK_i9p5yxR_nwAAAI4"]
[Sun Apr 26 10:28:23.772197 2026] [proxy_fcgi:error] [pid 22572:tid 22596] [client 20.9.69.97:64382] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:28:26.749772 2026] [proxy_fcgi:error] [pid 8383:tid 8415] [client 20.9.69.97:64313] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:28:29.267252 2026] [proxy_fcgi:error] [pid 22572:tid 22587] [client 20.9.69.97:64312] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:28:32.361610 2026] [proxy_fcgi:error] [pid 8390:tid 8455] [client 20.9.69.97:64301] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 10:28:32.926264 2026] [proxy_fcgi:error] [pid 8390:tid 8467] [client 20.9.69.97:64301] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:28:34.554314 2026] [proxy_fcgi:error] [pid 8390:tid 8458] [client 20.9.69.97:64301] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:28:36.860463 2026] [proxy_fcgi:error] [pid 13137:tid 13162] [client 20.9.69.97:64264] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:28:40.096760 2026] [proxy_fcgi:error] [pid 8390:tid 8451] [client 20.9.69.97:59352] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:28:45.973154 2026] [proxy_fcgi:error] [pid 8390:tid 8471] [client 20.9.69.97:64339] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:28:58.183592 2026] [proxy_fcgi:error] [pid 8390:tid 8458] [client 20.9.69.97:64270] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:28:58.375514 2026] [autoindex:error] [pid 8390:tid 8465] [client 20.9.69.97:64270] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 10:28:58.863169 2026] [proxy_fcgi:error] [pid 8390:tid 8456] [client 20.9.69.97:64270] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:29:06.276938 2026] [:error] [pid 8390:tid 8454] [client 20.9.69.97:59342] [client 20.9.69.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ae14coGPtFK_i9p5yxSA8QAAAIM"]
[Sun Apr 26 10:29:12.712903 2026] [proxy_fcgi:error] [pid 22573:tid 22616] [client 20.9.69.97:59328] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:29:23.239009 2026] [proxy_fcgi:error] [pid 16515:tid 16540] [client 20.9.69.97:64346] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:29:23.443606 2026] [autoindex:error] [pid 16515:tid 16541] [client 20.9.69.97:64346] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 10:29:23.932493 2026] [proxy_fcgi:error] [pid 16515:tid 16525] [client 20.9.69.97:64346] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:29:32.514233 2026] [proxy_fcgi:error] [pid 8390:tid 8458] [client 20.9.69.97:64279] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:29:44.181454 2026] [proxy_fcgi:error] [pid 22573:tid 22625] [client 20.9.69.97:64280] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:30:13.805925 2026] [proxy_fcgi:error] [pid 8491:tid 8508] [client 20.9.69.97:64286] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:30:20.183419 2026] [proxy_fcgi:error] [pid 22572:tid 22582] [client 20.9.69.97:64298] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:30:29.160218 2026] [proxy_fcgi:error] [pid 16515:tid 16541] [client 20.9.69.97:64370] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:30:43.867929 2026] [:error] [pid 22572:tid 22597] [client 20.9.69.97:59362] [client 20.9.69.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ae1409XOViWCFU-pZzCmdgAAAVM"]
[Sun Apr 26 10:31:39.525979 2026] [proxy_fcgi:error] [pid 8385:tid 8438] [client 20.9.69.97:59347] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:31:42.263031 2026] [proxy_fcgi:error] [pid 22573:tid 22627] [client 20.9.69.97:64285] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:31:44.808554 2026] [proxy_fcgi:error] [pid 8385:tid 8429] [client 20.9.69.97:59336] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:31:48.666746 2026] [proxy_fcgi:error] [pid 13197:tid 13250] [client 20.9.69.97:64350] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:31:51.427265 2026] [proxy_fcgi:error] [pid 13197:tid 13231] [client 20.9.69.97:64309] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:31:54.405397 2026] [proxy_fcgi:error] [pid 22573:tid 22613] [client 20.9.69.97:59358] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:31:56.698389 2026] [proxy_fcgi:error] [pid 8385:tid 8432] [client 20.9.69.97:64353] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:32:02.066213 2026] [proxy_fcgi:error] [pid 16574:tid 16614] [client 20.9.69.97:59333] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:32:05.627800 2026] [proxy_fcgi:error] [pid 22572:tid 22597] [client 20.9.69.97:59329] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:32:09.026135 2026] [proxy_fcgi:error] [pid 22572:tid 22588] [client 20.9.69.97:64304] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:32:12.864624 2026] [proxy_fcgi:error] [pid 22572:tid 22581] [client 20.9.69.97:64362] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:32:15.488505 2026] [proxy_fcgi:error] [pid 13197:tid 13241] [client 20.9.69.97:64310] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:32:18.291525 2026] [proxy_fcgi:error] [pid 22572:tid 22581] [client 20.9.69.97:64256] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:32:21.530577 2026] [proxy_fcgi:error] [pid 13197:tid 13254] [client 20.9.69.97:64341] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:32:25.538173 2026] [proxy_fcgi:error] [pid 22573:tid 22613] [client 20.9.69.97:64332] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:32:27.886029 2026] [proxy_fcgi:error] [pid 16574:tid 16619] [client 20.9.69.97:64359] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:32:31.671602 2026] [proxy_fcgi:error] [pid 13137:tid 13159] [client 20.9.69.97:64372] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:32:35.766208 2026] [proxy_fcgi:error] [pid 13137:tid 13144] [client 20.9.69.97:64303] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:32:40.257324 2026] [proxy_fcgi:error] [pid 8390:tid 8470] [client 20.9.69.97:64364] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:32:46.306685 2026] [proxy_fcgi:error] [pid 13137:tid 13152] [client 20.9.69.97:64296] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:32:52.088388 2026] [proxy_fcgi:error] [pid 13137:tid 13144] [client 20.9.69.97:59337] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:32:56.386728 2026] [proxy_fcgi:error] [pid 8390:tid 8470] [client 20.9.69.97:59377] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:32:59.681680 2026] [proxy_fcgi:error] [pid 8385:tid 8425] [client 20.9.69.97:64260] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:33:06.304957 2026] [proxy_fcgi:error] [pid 8383:tid 8399] [client 20.9.69.97:64382] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:33:11.266642 2026] [proxy_fcgi:error] [pid 13137:tid 13141] [client 20.9.69.97:64311] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:33:15.407661 2026] [proxy_fcgi:error] [pid 22573:tid 22612] [client 20.9.69.97:64367] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:33:17.736952 2026] [proxy_fcgi:error] [pid 8390:tid 8465] [client 20.9.69.97:59369] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:33:23.015421 2026] [proxy_fcgi:error] [pid 8385:tid 8433] [client 20.9.69.97:64373] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:33:30.663673 2026] [proxy_fcgi:error] [pid 22572:tid 22588] [client 20.9.69.97:64344] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:33:34.478974 2026] [proxy_fcgi:error] [pid 22572:tid 22588] [client 20.9.69.97:64343] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:33:37.717935 2026] [proxy_fcgi:error] [pid 8390:tid 8468] [client 20.9.69.97:64379] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:34:30.890087 2026] [proxy_fcgi:error] [pid 13137:tid 13141] [client 20.9.69.97:59370] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:34:53.063131 2026] [proxy_fcgi:error] [pid 8383:tid 8411] [client 20.9.69.97:64383] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:34:57.993217 2026] [proxy_fcgi:error] [pid 16574:tid 16643] [client 20.9.69.97:64268] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:35:07.683274 2026] [proxy_fcgi:error] [pid 22573:tid 22627] [client 20.9.69.97:64342] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:35:13.944156 2026] [proxy_fcgi:error] [pid 8383:tid 8416] [client 20.9.69.97:64298] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:35:17.970106 2026] [proxy_fcgi:error] [pid 8390:tid 8463] [client 20.9.69.97:64278] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:35:20.014231 2026] [proxy_fcgi:error] [pid 8390:tid 8471] [client 20.9.69.97:64354] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:35:24.745408 2026] [proxy_fcgi:error] [pid 8385:tid 8438] [client 20.9.69.97:64314] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:35:28.599062 2026] [proxy_fcgi:error] [pid 8390:tid 8459] [client 20.9.69.97:64274] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:35:36.991520 2026] [proxy_fcgi:error] [pid 22572:tid 22597] [client 20.9.69.97:64318] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:35:49.793855 2026] [proxy_fcgi:error] [pid 22572:tid 22593] [client 20.9.69.97:64307] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:35:55.742033 2026] [proxy_fcgi:error] [pid 16574:tid 16606] [client 20.9.69.97:59268] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:35:58.645308 2026] [proxy_fcgi:error] [pid 13137:tid 13153] [client 20.9.69.97:64309] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:36:02.900287 2026] [proxy_fcgi:error] [pid 22573:tid 22627] [client 20.9.69.97:64349] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:36:06.812675 2026] [proxy_fcgi:error] [pid 8390:tid 8459] [client 20.9.69.97:59368] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:36:10.357450 2026] [proxy_fcgi:error] [pid 22573:tid 22631] [client 20.9.69.97:64266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:36:10.854743 2026] [proxy_fcgi:error] [pid 22573:tid 22607] [client 20.9.69.97:64266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:36:15.518711 2026] [proxy_fcgi:error] [pid 16515:tid 16535] [client 20.9.69.97:64339] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:36:18.595051 2026] [proxy_fcgi:error] [pid 16515:tid 16520] [client 20.9.69.97:64264] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:36:23.025090 2026] [proxy_fcgi:error] [pid 22573:tid 22624] [client 20.9.69.97:64261] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:36:27.199132 2026] [proxy_fcgi:error] [pid 22573:tid 22630] [client 20.9.69.97:64288] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:36:32.726618 2026] [proxy_fcgi:error] [pid 8390:tid 8467] [client 20.9.69.97:64323] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 10:36:37.427973 2026] [proxy_fcgi:error] [pid 13137:tid 13153] [client 20.9.69.97:64368] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 11:03:20.697307 2026] [proxy_fcgi:error] [pid 8385:tid 8445] [client 66.249.79.224:45526] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 11:03:23.250400 2026] [proxy_fcgi:error] [pid 8385:tid 8447] [client 66.249.79.224:45526] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 17:53:42.899092 2026] [proxy_fcgi:error] [pid 8383:tid 8420] [client 168.144.106.20:53403] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 17:53:44.309276 2026] [proxy_fcgi:error] [pid 8383:tid 8401] [client 168.144.106.20:62904] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 17:53:45.702232 2026] [proxy_fcgi:error] [pid 8383:tid 8410] [client 168.144.106.20:54045] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 17:53:50.246788 2026] [proxy_fcgi:error] [pid 22572:tid 22582] [client 168.144.106.20:63655] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 17:53:53.665590 2026] [proxy_fcgi:error] [pid 22572:tid 22600] [client 168.144.106.20:60316] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 17:53:55.364977 2026] [proxy_fcgi:error] [pid 13197:tid 13253] [client 168.144.106.20:54131] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 17:53:58.636778 2026] [proxy_fcgi:error] [pid 22572:tid 22600] [client 168.144.106.20:57564] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 17:54:01.673875 2026] [proxy_fcgi:error] [pid 16515:tid 16540] [client 168.144.106.20:56563] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 17:54:06.035409 2026] [proxy_fcgi:error] [pid 16515:tid 16525] [client 168.144.106.20:59013] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 17:54:09.289171 2026] [proxy_fcgi:error] [pid 16515:tid 16521] [client 168.144.106.20:52731] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 17:54:11.526260 2026] [proxy_fcgi:error] [pid 16515:tid 16531] [client 168.144.106.20:59768] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 17:54:14.452831 2026] [proxy_fcgi:error] [pid 13137:tid 13140] [client 168.144.106.20:51538] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 18:21:43.860773 2026] [proxy_fcgi:error] [pid 13197:tid 13231] [client 93.158.90.71:58159] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 19:05:00.409339 2026] [proxy_fcgi:error] [pid 13137:tid 13156] [client 93.159.230.84:42604] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 19:05:03.773519 2026] [proxy_fcgi:error] [pid 8383:tid 8412] [client 93.159.230.84:45520] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 19:05:09.197761 2026] [proxy_fcgi:error] [pid 8390:tid 8460] [client 77.74.177.114:52246] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 19:05:13.210571 2026] [proxy_fcgi:error] [pid 16515:tid 16538] [client 77.74.177.118:33674] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 20:09:38.285326 2026] [proxy_fcgi:error] [pid 8383:tid 8406] [client 74.7.175.165:40764] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 20:44:29.844939 2026] [proxy_fcgi:error] [pid 8383:tid 8403] [client 74.7.243.218:33498] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 20:44:29.911662 2026] [proxy_fcgi:error] [pid 8383:tid 8412] [client 74.7.228.11:44868] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 21:58:26.626018 2026] [:error] [pid 8385:tid 8440] [client 209.38.221.195:51619] [client 209.38.221.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.38.221.195, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ae4aAjOy7_J84Wx3-ozdIQAAAFA"]
[Sun Apr 26 21:58:26.969792 2026] [proxy_fcgi:error] [pid 8385:tid 8440] [client 209.38.221.195:51619] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 21:58:27.967446 2026] [:error] [pid 8383:tid 8416] [client 209.38.221.195:51721] [client 209.38.221.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.38.221.195, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ae4aA9Fa2S3EsATMdWNwxQAAABM"]
[Sun Apr 26 21:58:28.250580 2026] [proxy_fcgi:error] [pid 8383:tid 8416] [client 209.38.221.195:51721] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 21:58:28.798804 2026] [proxy_fcgi:error] [pid 8383:tid 8410] [client 209.38.221.195:51721] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 21:58:30.091858 2026] [proxy_fcgi:error] [pid 8390:tid 8454] [client 209.38.221.195:51871] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 21:58:30.602657 2026] [proxy_fcgi:error] [pid 8390:tid 8471] [client 209.38.221.195:51871] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:31:05.791442 2026] [proxy_fcgi:error] [pid 16574:tid 16637] [client 20.215.250.178:61660] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:31:12.500490 2026] [proxy_fcgi:error] [pid 8390:tid 8470] [client 20.215.250.178:64080] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:31:25.643383 2026] [proxy_fcgi:error] [pid 22572:tid 22598] [client 20.215.250.178:27630] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:31:30.572302 2026] [proxy_fcgi:error] [pid 8491:tid 8505] [client 20.215.250.178:42449] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:31:32.265643 2026] [proxy_fcgi:error] [pid 8390:tid 8461] [client 20.215.250.178:42459] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:31:34.492790 2026] [proxy_fcgi:error] [pid 8383:tid 8401] [client 20.215.250.178:61642] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:31:36.456310 2026] [proxy_fcgi:error] [pid 8385:tid 8444] [client 20.215.250.178:37764] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:31:38.144186 2026] [proxy_fcgi:error] [pid 16574:tid 16635] [client 20.215.250.178:12544] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:31:39.970917 2026] [proxy_fcgi:error] [pid 16574:tid 16607] [client 20.215.250.178:48114] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:31:41.624782 2026] [proxy_fcgi:error] [pid 8491:tid 8504] [client 20.215.250.178:42480] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:31:44.440945 2026] [proxy_fcgi:error] [pid 22573:tid 22617] [client 20.215.250.178:53777] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:31:47.739910 2026] [proxy_fcgi:error] [pid 13137:tid 13156] [client 20.215.250.178:54974] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:31:51.426653 2026] [proxy_fcgi:error] [pid 8390:tid 8466] [client 20.215.250.178:48099] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:31:52.720056 2026] [proxy_fcgi:error] [pid 8390:tid 8462] [client 20.215.250.178:32269] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:31:55.635893 2026] [proxy_fcgi:error] [pid 13137:tid 13141] [client 20.215.250.178:49826] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:31:59.693853 2026] [proxy_fcgi:error] [pid 8390:tid 8471] [client 20.215.250.178:53778] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:32:02.812311 2026] [proxy_fcgi:error] [pid 16515:tid 16538] [client 20.215.250.178:27688] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:32:08.094605 2026] [proxy_fcgi:error] [pid 8385:tid 8448] [client 20.215.250.178:26069] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:32:10.164249 2026] [proxy_fcgi:error] [pid 16515:tid 16542] [client 20.215.250.178:41701] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:32:15.333643 2026] [proxy_fcgi:error] [pid 8491:tid 8515] [client 20.215.250.178:26587] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:32:17.102053 2026] [proxy_fcgi:error] [pid 8390:tid 8463] [client 20.215.250.178:26612] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:32:19.360591 2026] [proxy_fcgi:error] [pid 16574:tid 16643] [client 20.215.250.178:62784] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:32:22.399980 2026] [proxy_fcgi:error] [pid 22572:tid 22594] [client 20.215.250.178:24998] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:32:25.372850 2026] [proxy_fcgi:error] [pid 13137:tid 13146] [client 20.215.250.178:62230] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:32:25.959983 2026] [proxy_fcgi:error] [pid 13137:tid 13142] [client 20.215.250.178:62230] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:32:28.725345 2026] [proxy_fcgi:error] [pid 16515:tid 16528] [client 20.215.250.178:32292] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:32:33.917187 2026] [proxy_fcgi:error] [pid 16574:tid 16614] [client 20.215.250.178:33836] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:32:43.930892 2026] [proxy_fcgi:error] [pid 13137:tid 13143] [client 20.215.250.178:54295] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:32:46.529310 2026] [proxy_fcgi:error] [pid 22573:tid 22625] [client 20.215.250.178:12128] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:32:49.020622 2026] [proxy_fcgi:error] [pid 22572:tid 22600] [client 20.215.250.178:25003] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:32:52.296110 2026] [proxy_fcgi:error] [pid 8390:tid 8456] [client 20.215.250.178:62257] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:32:54.835840 2026] [proxy_fcgi:error] [pid 8390:tid 8455] [client 20.215.250.178:38472] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:32:57.664078 2026] [proxy_fcgi:error] [pid 22572:tid 22591] [client 20.215.250.178:38466] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:32:59.375159 2026] [proxy_fcgi:error] [pid 13137:tid 13145] [client 20.215.250.178:24983] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:01.943195 2026] [proxy_fcgi:error] [pid 16515:tid 16531] [client 20.215.250.178:12101] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:03.940278 2026] [proxy_fcgi:error] [pid 13197:tid 13237] [client 20.215.250.178:12156] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:07.397790 2026] [proxy_fcgi:error] [pid 16574:tid 16641] [client 20.215.250.178:12155] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:12.779606 2026] [proxy_fcgi:error] [pid 8390:tid 8460] [client 20.215.250.178:38486] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:18.629210 2026] [proxy_fcgi:error] [pid 16574:tid 16610] [client 20.215.250.178:57507] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:21.013918 2026] [proxy_fcgi:error] [pid 8385:tid 8424] [client 20.215.250.178:48676] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:22.819108 2026] [proxy_fcgi:error] [pid 8383:tid 8404] [client 20.215.250.178:60567] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:24.249384 2026] [proxy_fcgi:error] [pid 8383:tid 8415] [client 20.215.250.178:31264] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:25.167160 2026] [proxy_fcgi:error] [pid 8491:tid 8504] [client 20.215.250.178:26141] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:27.084862 2026] [proxy_fcgi:error] [pid 8491:tid 8508] [client 20.215.250.178:27098] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:29.443520 2026] [proxy_fcgi:error] [pid 8383:tid 8411] [client 20.215.250.178:34251] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:31.154475 2026] [proxy_fcgi:error] [pid 22573:tid 22617] [client 20.215.250.178:28121] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:35.163987 2026] [proxy_fcgi:error] [pid 8385:tid 8440] [client 20.215.250.178:34242] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:38.560817 2026] [proxy_fcgi:error] [pid 16515:tid 16519] [client 20.215.250.178:36172] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:40.421780 2026] [proxy_fcgi:error] [pid 16574:tid 16643] [client 20.215.250.178:61111] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:43.030076 2026] [proxy_fcgi:error] [pid 8385:tid 8426] [client 20.215.250.178:32249] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:45.054804 2026] [proxy_fcgi:error] [pid 8390:tid 8455] [client 20.215.250.178:29692] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:47.652872 2026] [proxy_fcgi:error] [pid 13137:tid 13148] [client 20.215.250.178:30724] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:49.885678 2026] [proxy_fcgi:error] [pid 16515:tid 16518] [client 20.215.250.178:29642] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:52.157401 2026] [proxy_fcgi:error] [pid 22573:tid 22610] [client 20.215.250.178:42386] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:54.275472 2026] [proxy_fcgi:error] [pid 8385:tid 8429] [client 20.215.250.178:30779] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:56.380861 2026] [proxy_fcgi:error] [pid 8390:tid 8467] [client 20.215.250.178:35881] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:33:58.466609 2026] [proxy_fcgi:error] [pid 22573:tid 22620] [client 20.215.250.178:48049] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:02.246196 2026] [proxy_fcgi:error] [pid 8383:tid 8409] [client 20.215.250.178:37466] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:03.823914 2026] [proxy_fcgi:error] [pid 8390:tid 8470] [client 20.215.250.178:37490] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:05.895153 2026] [proxy_fcgi:error] [pid 13137:tid 13152] [client 20.215.250.178:39384] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:08.542876 2026] [proxy_fcgi:error] [pid 22572:tid 22594] [client 20.215.250.178:48734] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:10.218838 2026] [proxy_fcgi:error] [pid 16574:tid 16607] [client 20.215.250.178:49316] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:12.532546 2026] [proxy_fcgi:error] [pid 13137:tid 13151] [client 20.215.250.178:36799] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:13.920045 2026] [proxy_fcgi:error] [pid 13137:tid 13146] [client 20.215.250.178:39411] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:16.958774 2026] [proxy_fcgi:error] [pid 8390:tid 8457] [client 20.215.250.178:29147] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:18.125274 2026] [proxy_fcgi:error] [pid 13137:tid 13145] [client 20.215.250.178:36775] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:19.746255 2026] [proxy_fcgi:error] [pid 13137:tid 13157] [client 20.215.250.178:29170] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:21.937780 2026] [proxy_fcgi:error] [pid 22572:tid 22589] [client 20.215.250.178:53842] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:23.287286 2026] [proxy_fcgi:error] [pid 22573:tid 22623] [client 20.215.250.178:60610] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:25.690634 2026] [proxy_fcgi:error] [pid 8390:tid 8475] [client 20.215.250.178:49318] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:28.794375 2026] [proxy_fcgi:error] [pid 8390:tid 8469] [client 20.215.250.178:53832] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:32.022216 2026] [proxy_fcgi:error] [pid 8491:tid 8518] [client 20.215.250.178:53856] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:33.792295 2026] [proxy_fcgi:error] [pid 13137:tid 13156] [client 20.215.250.178:62755] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:35.088670 2026] [proxy_fcgi:error] [pid 8383:tid 8402] [client 20.215.250.178:49326] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:36.581966 2026] [proxy_fcgi:error] [pid 13197:tid 13249] [client 20.215.250.178:39375] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:38.682449 2026] [proxy_fcgi:error] [pid 8491:tid 8513] [client 20.215.250.178:57536] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:40.606441 2026] [proxy_fcgi:error] [pid 8385:tid 8432] [client 20.215.250.178:36750] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:45.310237 2026] [proxy_fcgi:error] [pid 8383:tid 8416] [client 20.215.250.178:62745] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:47.855487 2026] [proxy_fcgi:error] [pid 8383:tid 8415] [client 20.215.250.178:29167] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:50.491322 2026] [proxy_fcgi:error] [pid 8491:tid 8504] [client 20.215.250.178:29147] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:53.438956 2026] [proxy_fcgi:error] [pid 13137:tid 13141] [client 20.215.250.178:36278] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:56.030661 2026] [proxy_fcgi:error] [pid 13137:tid 13157] [client 20.215.250.178:12633] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:34:59.615697 2026] [proxy_fcgi:error] [pid 13197:tid 13234] [client 20.215.250.178:62782] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:35:02.652641 2026] [proxy_fcgi:error] [pid 13197:tid 13232] [client 20.215.250.178:27167] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:35:05.996575 2026] [proxy_fcgi:error] [pid 16574:tid 16607] [client 20.215.250.178:28636] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:35:10.478060 2026] [proxy_fcgi:error] [pid 16515:tid 16535] [client 20.215.250.178:49890] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:35:17.997633 2026] [proxy_fcgi:error] [pid 13197:tid 13253] [client 20.215.250.178:12387] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:35:25.075028 2026] [proxy_fcgi:error] [pid 8383:tid 8403] [client 20.215.250.178:12248] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:35:27.587657 2026] [proxy_fcgi:error] [pid 8390:tid 8473] [client 20.215.250.178:61619] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:35:29.798661 2026] [proxy_fcgi:error] [pid 16515:tid 16542] [client 20.215.250.178:61631] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:35:30.966868 2026] [proxy_fcgi:error] [pid 8491:tid 8516] [client 20.215.250.178:12318] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun Apr 26 23:35:32.900004 2026] [proxy_fcgi:error] [pid 8491:tid 8510] [client 20.215.250.178:63523] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 27 00:38:24.687251 2026] [:error] [pid 8385:tid 8428] [client 45.131.195.57:23791] [client 45.131.195.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ae4_gDOy7_J84Wx3-ozu1AAAAEQ"]
[Mon Apr 27 03:21:19.342433 2026] [proxy_fcgi:error] [pid 8491:tid 8502] [client 81.29.142.6:18882] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 27 03:21:45.172708 2026] [proxy_fcgi:error] [pid 8383:tid 8418] [client 81.29.142.6:35196] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 27 03:21:45.318340 2026] [proxy_fcgi:error] [pid 8491:tid 8512] [client 81.29.142.6:23218] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 27 06:13:42.582870 2026] [proxy_fcgi:error] [pid 22646:tid 22704] [client 185.194.218.109:57617] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon Apr 27 13:51:52.046140 2026] [:error] [pid 62607:tid 62614] [client 34.55.86.97:58050] [client 34.55.86.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/media/system/js/core.js"] [unique_id "ae75eIXk80_zcPo33vevXAAAAEU"]
[Tue Apr 28 00:21:25.079803 2026] [proxy_fcgi:error] [pid 13554:tid 13573] [client 74.7.228.11:42794] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 01:03:45.031996 2026] [proxy_fcgi:error] [pid 13464:tid 13478] [client 192.175.111.237:14177] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 02:35:30.565105 2026] [proxy_fcgi:error] [pid 13465:tid 13516] [client 192.104.34.34:62901] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 03:08:00.401672 2026] [:error] [pid 36747:tid 36762] [client 185.194.178.64:21635] [client 185.194.178.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.64, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ae-0EM9QpT00aPhkIcd0FAAAAY0"]
[Tue Apr 28 03:08:02.310050 2026] [proxy_fcgi:error] [pid 36747:tid 36762] [client 185.194.178.64:21635] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 03:08:04.969886 2026] [proxy_fcgi:error] [pid 36747:tid 36749] [client 185.194.178.64:21635] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 03:08:06.883669 2026] [proxy_fcgi:error] [pid 13554:tid 13577] [client 185.194.178.64:54675] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 04:14:59.240612 2026] [:error] [pid 14579:tid 14662] [client 185.194.178.86:42831] [client 185.194.178.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.86, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ae_DwxrUiOG83qKKuuDBLgAAAJY"]
[Tue Apr 28 04:14:59.622404 2026] [proxy_fcgi:error] [pid 14579:tid 14662] [client 185.194.178.86:42831] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 04:23:03.857396 2026] [:error] [pid 14577:tid 14609] [client 185.194.178.55:61167] [client 185.194.178.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.55, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ae_FpyzBH-jwzlgiBdGS0gAAABc"]
[Tue Apr 28 04:23:04.222558 2026] [proxy_fcgi:error] [pid 14577:tid 14609] [client 185.194.178.55:61167] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 04:23:04.885458 2026] [:error] [pid 14686:tid 14693] [client 185.194.178.101:32329] [client 185.194.178.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.101, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ae_FqO-YPF1Xm7uiWQ70CgAAAMQ"]
[Tue Apr 28 04:23:05.202905 2026] [proxy_fcgi:error] [pid 14686:tid 14693] [client 185.194.178.101:32329] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 04:28:29.332550 2026] [proxy_fcgi:error] [pid 14578:tid 14635] [client 40.69.66.178:9710] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 04:28:30.185199 2026] [proxy_fcgi:error] [pid 14579:tid 14640] [client 40.69.66.178:11852] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 04:28:31.006311 2026] [proxy_fcgi:error] [pid 14578:tid 14631] [client 40.69.66.178:10775] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 04:28:31.860400 2026] [proxy_fcgi:error] [pid 14578:tid 14628] [client 40.69.66.178:11872] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 04:31:11.161250 2026] [:error] [pid 14577:tid 14598] [client 185.194.178.75:42277] [client 185.194.178.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.75, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ae_HjyzBH-jwzlgiBdGUnAAAAAw"]
[Tue Apr 28 04:31:11.537916 2026] [proxy_fcgi:error] [pid 14577:tid 14598] [client 185.194.178.75:42277] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 04:39:23.810188 2026] [:error] [pid 14579:tid 14644] [client 185.194.178.95:25519] [client 185.194.178.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.95, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ae_JexrUiOG83qKKuuDM1QAAAIQ"]
[Tue Apr 28 04:39:24.186464 2026] [proxy_fcgi:error] [pid 14579:tid 14644] [client 185.194.178.95:25519] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 04:40:39.781851 2026] [proxy_fcgi:error] [pid 14577:tid 14595] [client 74.7.227.159:54706] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 04:40:40.740503 2026] [proxy_fcgi:error] [pid 14686:tid 14689] [client 74.7.175.165:35876] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 05:10:35.855628 2026] [:error] [pid 14579:tid 14653] [client 195.178.110.132:9148] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.htpasswd"] [unique_id "ae_QyxrUiOG83qKKuuDkuwAAAI0"]
[Tue Apr 28 08:05:41.231585 2026] [proxy_fcgi:error] [pid 33776:tid 33823] [client 93.158.91.34:36223] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 08:05:42.913175 2026] [proxy_fcgi:error] [pid 33864:tid 33879] [client 93.158.90.52:50935] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 11:56:20.453114 2026] [proxy_fcgi:error] [pid 2741:tid 2763] [client 148.224.25.59:61717] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 15:31:24.415506 2026] [:error] [pid 33775:tid 33793] [client 185.194.178.58:60555] [client 185.194.178.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.58, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "afBiTJsYOcoQrq88YbUNxwAAAM4"]
[Tue Apr 28 15:31:26.105934 2026] [proxy_fcgi:error] [pid 33775:tid 33793] [client 185.194.178.58:60555] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 15:56:07.152098 2026] [:error] [pid 33776:tid 33831] [client 185.194.178.67:59173] [client 185.194.178.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.67, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "afBoF1-bEJ2CKP3iKAAL5QAAAFc"]
[Tue Apr 28 15:56:07.714332 2026] [proxy_fcgi:error] [pid 33776:tid 33831] [client 185.194.178.67:59173] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 16:55:56.083329 2026] [proxy_fcgi:error] [pid 50889:tid 50896] [client 192.175.111.230:54239] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 17:15:01.574064 2026] [proxy_fcgi:error] [pid 50889:tid 50903] [client 54.210.205.25:35312] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 17:15:01.925102 2026] [proxy_fcgi:error] [pid 33864:tid 33881] [client 54.210.205.25:38838] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 19:48:13.516692 2026] [:error] [pid 33864:tid 33885] [client 185.194.178.75:35359] [client 185.194.178.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.75, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "afCefTXchLGZ4QggCskaGwAAAJM"]
[Tue Apr 28 19:48:13.831806 2026] [proxy_fcgi:error] [pid 33864:tid 33885] [client 185.194.178.75:35359] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 19:48:42.300919 2026] [proxy_fcgi:error] [pid 33777:tid 33858] [client 74.7.228.11:59268] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:35:53.674940 2026] [proxy_fcgi:error] [pid 33777:tid 33851] [client 172.202.46.57:57499] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:36:03.552433 2026] [proxy_fcgi:error] [pid 33776:tid 33825] [client 172.202.46.57:54506] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:36:04.041018 2026] [proxy_fcgi:error] [pid 33776:tid 33808] [client 172.202.46.57:54506] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:36:08.099409 2026] [proxy_fcgi:error] [pid 33777:tid 33859] [client 172.202.46.57:54407] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:36:15.459734 2026] [proxy_fcgi:error] [pid 33777:tid 33837] [client 172.202.46.57:54429] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:36:20.543832 2026] [proxy_fcgi:error] [pid 33777:tid 33839] [client 172.202.46.57:54484] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:36:28.969827 2026] [proxy_fcgi:error] [pid 33775:tid 33796] [client 172.202.46.57:26470] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:36:36.412016 2026] [proxy_fcgi:error] [pid 2741:tid 2747] [client 172.202.46.57:26500] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:36:41.021426 2026] [:error] [pid 50889:tid 50895] [client 172.202.46.57:26498] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/index.php"] [unique_id "afCp2YzszBr00txEzGhKLwAAAAM"]
[Tue Apr 28 20:37:15.844651 2026] [:error] [pid 33775:tid 33794] [client 172.202.46.57:25900] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/themes.php"] [unique_id "afCp-5sYOcoQrq88YbUvgQAAAM8"]
[Tue Apr 28 20:37:34.905892 2026] [:error] [pid 33864:tid 33871] [client 172.202.46.57:25935] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/an.php"] [unique_id "afCqDjXchLGZ4QggCskizgAAAIU"]
[Tue Apr 28 20:37:40.436460 2026] [proxy_fcgi:error] [pid 2741:tid 2769] [client 172.202.46.57:47952] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:37:44.653885 2026] [proxy_fcgi:error] [pid 50889:tid 50896] [client 172.202.46.57:57438] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:37:56.019359 2026] [proxy_fcgi:error] [pid 33864:tid 33874] [client 172.202.46.57:57413] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:38:01.027596 2026] [:error] [pid 33777:tid 33848] [client 172.202.46.57:25619] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/ws.php"] [unique_id "afCqKbXUCFWqmordGGLmpQAAAQ0"]
[Tue Apr 28 20:38:13.033051 2026] [:error] [pid 33776:tid 33815] [client 172.202.46.57:25659] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "afCqNV-bEJ2CKP3iKAA1rwAAAEc"]
[Tue Apr 28 20:38:13.813064 2026] [:error] [pid 33864:tid 33877] [client 172.202.46.57:26064] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "afCqNTXchLGZ4QggCski9QAAAIs"]
[Tue Apr 28 20:38:38.142534 2026] [:error] [pid 2741:tid 2763] [client 172.202.46.57:55704] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/index.php"] [unique_id "afCqTvp92FeOz1h6ILz2ZQAAAVE"]
[Tue Apr 28 20:39:23.070887 2026] [:error] [pid 33777:tid 33855] [client 172.202.46.57:25986] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "afCqe7XUCFWqmordGGLncgAAARQ"]
[Tue Apr 28 20:39:34.719797 2026] [:error] [pid 2741:tid 2746] [client 172.202.46.57:55749] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "afCqhvp92FeOz1h6ILz2mQAAAUA"]
[Tue Apr 28 20:39:42.904190 2026] [:error] [pid 33776:tid 33826] [client 172.202.46.57:40019] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "afCqjl-bEJ2CKP3iKAA14QAAAFI"]
[Tue Apr 28 20:39:54.050634 2026] [:error] [pid 50889:tid 50910] [client 172.202.46.57:26267] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/abc.php"] [unique_id "afCqmozszBr00txEzGhLGQAAABI"]
[Tue Apr 28 20:39:57.959591 2026] [:error] [pid 33776:tid 33815] [client 172.202.46.57:26303] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/abc.php"] [unique_id "afCqnV-bEJ2CKP3iKAA16wAAAEc"]
[Tue Apr 28 20:40:13.665865 2026] [proxy_fcgi:error] [pid 2741:tid 2752] [client 172.202.46.57:26300] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:40:21.243024 2026] [proxy_fcgi:error] [pid 33776:tid 33819] [client 172.202.46.57:55779] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:40:30.258514 2026] [proxy_fcgi:error] [pid 2741:tid 2756] [client 172.202.46.57:56824] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:40:30.451126 2026] [:error] [pid 2741:tid 2763] [client 172.202.46.57:56824] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "afCqvvp92FeOz1h6ILz3UwAAAVE"]
[Tue Apr 28 20:40:37.006365 2026] [:error] [pid 2741:tid 2748] [client 172.202.46.57:25778] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "afCqxfp92FeOz1h6ILz3VwAAAUI"]
[Tue Apr 28 20:40:48.181111 2026] [:error] [pid 33777:tid 33837] [client 172.202.46.57:25732] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "afCq0LXUCFWqmordGGLoVQAAAQI"]
[Tue Apr 28 20:41:09.900612 2026] [:error] [pid 33777:tid 33853] [client 172.202.46.57:25777] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/adminfuns.php"] [unique_id "afCq5bXUCFWqmordGGLobAAAARI"]
[Tue Apr 28 20:41:16.863952 2026] [:error] [pid 2741:tid 2753] [client 172.202.46.57:56832] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/adminfuns.php"] [unique_id "afCq7Pp92FeOz1h6ILz3iAAAAUc"]
[Tue Apr 28 20:41:35.165524 2026] [proxy_fcgi:error] [pid 33776:tid 33829] [client 172.202.46.57:25759] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:41:36.233179 2026] [:error] [pid 33775:tid 33779] [client 172.202.46.57:26392] [client 172.202.46.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.202.46.57, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "afCrAJsYOcoQrq88YbUwDwAAAMA"]
[Tue Apr 28 20:41:36.602537 2026] [proxy_fcgi:error] [pid 33775:tid 33779] [client 172.202.46.57:26392] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:41:37.118650 2026] [proxy_fcgi:error] [pid 33775:tid 33791] [client 172.202.46.57:26392] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:41:41.684961 2026] [proxy_fcgi:error] [pid 33777:tid 33857] [client 172.202.46.57:56870] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:41:45.818701 2026] [proxy_fcgi:error] [pid 33864:tid 33870] [client 172.202.46.57:56833] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:41:49.086711 2026] [proxy_fcgi:error] [pid 33864:tid 33873] [client 172.202.46.57:25783] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:41:53.263911 2026] [proxy_fcgi:error] [pid 2741:tid 2752] [client 172.202.46.57:56860] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:41:58.153342 2026] [:error] [pid 33864:tid 33880] [client 172.202.46.57:56834] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "afCrFjXchLGZ4QggCskjnQAAAI4"]
[Tue Apr 28 20:42:05.012896 2026] [:error] [pid 33775:tid 33787] [client 172.202.46.57:26391] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "afCrHZsYOcoQrq88YbUwGQAAAMg"]
[Tue Apr 28 20:42:12.904387 2026] [:error] [pid 33775:tid 33802] [client 172.202.46.57:26369] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "afCrJJsYOcoQrq88YbUwHwAAANc"]
[Tue Apr 28 20:42:38.692707 2026] [:error] [pid 2741:tid 2758] [client 172.202.46.57:26397] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/defaults.php"] [unique_id "afCrPvp92FeOz1h6ILz30wAAAUw"]
[Tue Apr 28 20:42:52.973200 2026] [:error] [pid 33777:tid 33854] [client 172.202.46.57:26383] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/"] [unique_id "afCrTLXUCFWqmordGGLozAAAARM"]
[Tue Apr 28 20:43:06.789747 2026] [:error] [pid 50889:tid 50899] [client 172.202.46.57:56881] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/"] [unique_id "afCrWozszBr00txEzGhLlQAAAAc"]
[Tue Apr 28 20:43:13.269936 2026] [:error] [pid 33777:tid 33841] [client 172.202.46.57:25760] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/.well-known/"] [unique_id "afCrYbXUCFWqmordGGLo-QAAAQY"]
[Tue Apr 28 20:43:35.783576 2026] [:error] [pid 2741:tid 2770] [client 172.202.46.57:25730] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/info.php"] [unique_id "afCrd_p92FeOz1h6ILz4RgAAAVg"]
[Tue Apr 28 20:43:47.819923 2026] [:error] [pid 50889:tid 50895] [client 172.202.46.57:25733] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cgi-bin/"] [unique_id "afCrg4zszBr00txEzGhLrAAAAAM"]
[Tue Apr 28 20:43:52.846260 2026] [:error] [pid 50889:tid 50894] [client 172.202.46.57:26401] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/cgi-bin/"] [unique_id "afCriIzszBr00txEzGhLsQAAAAI"]
[Tue Apr 28 20:44:01.662839 2026] [:error] [pid 33777:tid 33857] [client 172.202.46.57:56839] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/uploads/"] [unique_id "afCrkbXUCFWqmordGGLpSgAAARY"]
[Tue Apr 28 20:44:12.406892 2026] [proxy_fcgi:error] [pid 50889:tid 50894] [client 172.202.46.57:56842] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:44:23.744117 2026] [autoindex:error] [pid 33775:tid 33795] [client 172.202.46.57:56871] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 20:44:23.964461 2026] [:error] [pid 33775:tid 33803] [client 172.202.46.57:56871] [client 172.202.46.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "afCrp5sYOcoQrq88YbUwUQAAANg"]
[Tue Apr 28 20:44:54.535054 2026] [proxy_fcgi:error] [pid 33864:tid 33871] [client 172.202.46.57:52865] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:44:58.194535 2026] [autoindex:error] [pid 50889:tid 50901] [client 172.202.46.57:52899] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 20:44:58.387023 2026] [autoindex:error] [pid 50889:tid 50896] [client 172.202.46.57:52899] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 20:45:00.627917 2026] [proxy_fcgi:error] [pid 50889:tid 50898] [client 172.202.46.57:52899] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:45:09.517464 2026] [proxy_fcgi:error] [pid 2741:tid 2767] [client 172.202.46.57:57518] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:45:09.767878 2026] [proxy_fcgi:error] [pid 2741:tid 2769] [client 172.202.46.57:57518] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:45:09.991562 2026] [autoindex:error] [pid 2741:tid 2761] [client 172.202.46.57:57518] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 20:45:10.222634 2026] [autoindex:error] [pid 2741:tid 2749] [client 172.202.46.57:57518] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 20:45:11.021337 2026] [proxy_fcgi:error] [pid 2741:tid 2751] [client 172.202.46.57:57518] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:45:30.432275 2026] [proxy_fcgi:error] [pid 33775:tid 33803] [client 172.202.46.57:57955] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:45:35.242522 2026] [proxy_fcgi:error] [pid 50889:tid 50913] [client 172.202.46.57:54472] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:45:44.072761 2026] [proxy_fcgi:error] [pid 33775:tid 33784] [client 172.202.46.57:57981] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:45:49.741038 2026] [proxy_fcgi:error] [pid 33775:tid 33782] [client 172.202.46.57:54474] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:45:53.165528 2026] [proxy_fcgi:error] [pid 50889:tid 50910] [client 172.202.46.57:26330] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:45:57.199618 2026] [proxy_fcgi:error] [pid 50889:tid 50899] [client 172.202.46.57:57952] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:46:13.780535 2026] [proxy_fcgi:error] [pid 50889:tid 50903] [client 172.202.46.57:57972] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:46:23.569710 2026] [proxy_fcgi:error] [pid 50889:tid 50894] [client 172.202.46.57:26338] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:46:26.579709 2026] [proxy_fcgi:error] [pid 50889:tid 50904] [client 172.202.46.57:26336] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:46:32.232279 2026] [proxy_fcgi:error] [pid 33864:tid 33867] [client 172.202.46.57:54514] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:46:35.880845 2026] [proxy_fcgi:error] [pid 50889:tid 50912] [client 172.202.46.57:26335] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:46:41.180067 2026] [proxy_fcgi:error] [pid 33777:tid 33846] [client 172.202.46.57:57946] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:46:46.928513 2026] [proxy_fcgi:error] [pid 33775:tid 33789] [client 172.202.46.57:54505] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:46:50.684284 2026] [proxy_fcgi:error] [pid 33777:tid 33841] [client 172.202.46.57:57950] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:46:59.964281 2026] [proxy_fcgi:error] [pid 50889:tid 50909] [client 172.202.46.57:57942] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:47:05.526626 2026] [proxy_fcgi:error] [pid 33777:tid 33840] [client 172.202.46.57:57929] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:47:09.988614 2026] [proxy_fcgi:error] [pid 2741:tid 2762] [client 172.202.46.57:57978] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:47:12.352558 2026] [proxy_fcgi:error] [pid 33864:tid 33884] [client 172.202.46.57:57937] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:47:19.513043 2026] [proxy_fcgi:error] [pid 2741:tid 2751] [client 172.202.46.57:57961] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:47:28.045764 2026] [proxy_fcgi:error] [pid 33864:tid 33875] [client 172.202.46.57:54473] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:47:42.924756 2026] [proxy_fcgi:error] [pid 2741:tid 2756] [client 172.202.46.57:26320] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:48:49.871467 2026] [:error] [pid 33864:tid 33872] [client 172.202.46.57:57947] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mari.php"] [unique_id "afCssTXchLGZ4QggCskkpgAAAIY"]
[Tue Apr 28 20:48:56.242044 2026] [:error] [pid 33777:tid 33846] [client 172.202.46.57:54493] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/mari.php"] [unique_id "afCsuLXUCFWqmordGGLqnwAAAQs"]
[Tue Apr 28 20:49:06.375563 2026] [:error] [pid 33777:tid 33839] [client 172.202.46.57:57949] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/moon.php"] [unique_id "afCswrXUCFWqmordGGLqsAAAAQQ"]
[Tue Apr 28 20:49:25.716543 2026] [:error] [pid 33775:tid 33783] [client 172.202.46.57:26306] [client 172.202.46.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/o.php"] [unique_id "afCs1ZsYOcoQrq88YbUw4AAAAMQ"]
[Tue Apr 28 20:49:35.674113 2026] [proxy_fcgi:error] [pid 2741:tid 2758] [client 172.202.46.57:57938] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:49:43.209165 2026] [proxy_fcgi:error] [pid 50889:tid 50909] [client 172.202.46.57:47995] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 20:49:57.318117 2026] [autoindex:error] [pid 33775:tid 33793] [client 172.202.46.57:47993] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 20:49:58.607301 2026] [proxy_fcgi:error] [pid 33775:tid 33784] [client 172.202.46.57:47993] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue Apr 28 23:00:38.936802 2026] [:error] [pid 33777:tid 33855] [client 193.37.32.6:39253] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "afDLlrXUCFWqmordGGIbGwAAARQ"]
[Tue Apr 28 23:00:39.142639 2026] [:error] [pid 33777:tid 33835] [client 193.37.32.13:24093] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/inputs.php"] [unique_id "afDLl7XUCFWqmordGGIbHAAAAQA"]
[Tue Apr 28 23:00:39.340408 2026] [:error] [pid 33777:tid 33846] [client 193.37.32.18:46651] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "afDLl7XUCFWqmordGGIbHQAAAQs"]
[Tue Apr 28 23:00:39.538076 2026] [:error] [pid 33777:tid 33840] [client 193.37.32.52:23301] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "afDLl7XUCFWqmordGGIbHgAAAQU"]
[Tue Apr 28 23:00:39.737966 2026] [:error] [pid 33776:tid 33812] [client 193.37.32.5:44893] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/users.php"] [unique_id "afDLl1-bEJ2CKP3iKABLGwAAAEQ"]
[Tue Apr 28 23:00:39.936134 2026] [:error] [pid 33776:tid 33815] [client 193.37.32.4:28941] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/adminfuns.php"] [unique_id "afDLl1-bEJ2CKP3iKABLHAAAAEc"]
[Tue Apr 28 23:00:40.139133 2026] [:error] [pid 33777:tid 33847] [client 193.37.32.29:20809] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403.php"] [unique_id "afDLmLXUCFWqmordGGIbIAAAAQw"]
[Tue Apr 28 23:00:40.345025 2026] [:error] [pid 33776:tid 33810] [client 193.37.32.28:34063] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/"] [unique_id "afDLmF-bEJ2CKP3iKABLHQAAAEI"]
[Tue Apr 28 23:00:40.543763 2026] [:error] [pid 33777:tid 33844] [client 193.37.32.28:37251] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "afDLmLXUCFWqmordGGIbIgAAAQk"]
[Tue Apr 28 23:00:45.743895 2026] [:error] [pid 33864:tid 33880] [client 193.37.32.26:34691] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/goods.php"] [unique_id "afDLnTXchLGZ4QggCsk54gAAAI4"]
[Tue Apr 28 23:00:45.942668 2026] [:error] [pid 33777:tid 33852] [client 193.37.32.39:29843] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/fm.php"] [unique_id "afDLnbXUCFWqmordGGIbLQAAARE"]
[Tue Apr 28 23:00:46.144312 2026] [:error] [pid 33777:tid 33859] [client 193.37.32.4:47095] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/"] [unique_id "afDLnrXUCFWqmordGGIbLwAAARg"]
[Tue Apr 28 23:00:46.343358 2026] [:error] [pid 33777:tid 33850] [client 193.37.32.16:49447] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/posts"] [unique_id "afDLnrXUCFWqmordGGIbMAAAAQ8"]
[Tue Apr 28 23:00:46.546572 2026] [:error] [pid 33777:tid 33836] [client 193.37.32.22:44537] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/"] [unique_id "afDLnrXUCFWqmordGGIbMQAAAQE"]
[Tue Apr 28 23:00:46.749016 2026] [:error] [pid 33777:tid 33851] [client 193.37.32.19:24381] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "afDLnrXUCFWqmordGGIbMwAAARA"]
[Tue Apr 28 23:00:46.948903 2026] [:error] [pid 2741:tid 2746] [client 193.37.32.29:46529] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "afDLnvp92FeOz1h6ILwcXAAAAUA"]
[Tue Apr 28 23:00:48.638423 2026] [:error] [pid 33777:tid 33837] [client 193.37.32.27:45017] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/assets/images/selam.php"] [unique_id "afDLoLXUCFWqmordGGIbNgAAAQI"]
[Tue Apr 28 23:00:49.038800 2026] [:error] [pid 33777:tid 33852] [client 193.37.32.33:42595] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/item.php"] [unique_id "afDLobXUCFWqmordGGIbOAAAARE"]
[Tue Apr 28 23:00:49.242580 2026] [:error] [pid 33777:tid 33853] [client 193.37.32.40:31259] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "afDLobXUCFWqmordGGIbOQAAARI"]
[Tue Apr 28 23:00:49.440849 2026] [:error] [pid 33777:tid 33850] [client 193.37.32.6:37403] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/admin.php"] [unique_id "afDLobXUCFWqmordGGIbOwAAAQ8"]
[Tue Apr 28 23:00:49.646822 2026] [:error] [pid 33777:tid 33842] [client 193.37.32.26:20741] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-config-sample.php"] [unique_id "afDLobXUCFWqmordGGIbPgAAAQc"]
[Tue Apr 28 23:00:49.853433 2026] [:error] [pid 33864:tid 33887] [client 193.37.32.44:41773] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/admin/"] [unique_id "afDLoTXchLGZ4QggCsk55AAAAJU"]
[Tue Apr 28 23:00:50.057398 2026] [:error] [pid 33777:tid 33858] [client 193.37.32.18:59805] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "afDLorXUCFWqmordGGIbQgAAARc"]
[Tue Apr 28 23:00:50.257843 2026] [:error] [pid 33864:tid 33871] [client 193.37.32.38:35409] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/edit-tags.php"] [unique_id "afDLojXchLGZ4QggCsk55gAAAIU"]
[Tue Apr 28 23:00:50.457959 2026] [:error] [pid 33864:tid 33874] [client 193.37.32.46:42367] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/system.php"] [unique_id "afDLojXchLGZ4QggCsk55wAAAIg"]
[Tue Apr 28 23:00:50.659712 2026] [:error] [pid 33776:tid 33815] [client 193.37.32.35:62161] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/"] [unique_id "afDLol-bEJ2CKP3iKABLKAAAAEc"]
[Tue Apr 28 23:00:50.859726 2026] [:error] [pid 33776:tid 33821] [client 193.37.32.129:38355] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/.well-known/core.php"] [unique_id "afDLol-bEJ2CKP3iKABLKgAAAE0"]
[Tue Apr 28 23:00:51.061163 2026] [:error] [pid 33776:tid 33817] [client 193.37.32.25:56703] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-wlx.php"] [unique_id "afDLo1-bEJ2CKP3iKABLKwAAAEk"]
[Tue Apr 28 23:00:56.271870 2026] [:error] [pid 33775:tid 33782] [client 193.37.32.6:47195] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/speculative8.php"] [unique_id "afDLqJsYOcoQrq88YbU-zwAAAMM"]
[Tue Apr 28 23:00:56.471755 2026] [:error] [pid 33864:tid 33890] [client 193.37.32.18:61925] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "afDLqDXchLGZ4QggCsk56wAAAJg"]
[Tue Apr 28 23:00:56.671405 2026] [:error] [pid 33776:tid 33832] [client 193.37.32.31:30595] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/PHPMailer/s"] [unique_id "afDLqF-bEJ2CKP3iKABLMAAAAFg"]
[Tue Apr 28 23:00:56.869330 2026] [:error] [pid 50889:tid 50898] [client 193.37.32.52:58103] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/1.php"] [unique_id "afDLqIzszBr00txEzGhnjwAAAAY"]
[Tue Apr 28 23:00:57.076530 2026] [:error] [pid 33777:tid 33855] [client 193.37.32.36:61743] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/"] [unique_id "afDLqbXUCFWqmordGGIbSAAAARQ"]
[Tue Apr 28 23:00:57.276281 2026] [:error] [pid 50889:tid 50904] [client 193.37.32.50:64373] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/shell/"] [unique_id "afDLqYzszBr00txEzGhnkgAAAAw"]
[Tue Apr 28 23:00:57.475161 2026] [:error] [pid 33864:tid 33881] [client 193.37.32.13:61793] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "afDLqTXchLGZ4QggCsk57wAAAI8"]
[Tue Apr 28 23:00:57.674190 2026] [:error] [pid 2741:tid 2763] [client 193.37.32.34:39521] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/mah.php"] [unique_id "afDLqfp92FeOz1h6ILwcZwAAAVE"]
[Tue Apr 28 23:01:02.876642 2026] [:error] [pid 33864:tid 33869] [client 193.37.32.52:41931] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/news-portal/sitebar.php"] [unique_id "afDLrjXchLGZ4QggCsk59gAAAIM"]
[Tue Apr 28 23:01:03.083392 2026] [:error] [pid 2741:tid 2747] [client 193.37.32.129:51747] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "afDLr_p92FeOz1h6ILwcbAAAAUE"]
[Tue Apr 28 23:01:03.335851 2026] [:error] [pid 33777:tid 33848] [client 193.37.32.16:29283] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/"] [unique_id "afDLr7XUCFWqmordGGIbTwAAAQ0"]
[Tue Apr 28 23:01:03.535301 2026] [:error] [pid 33864:tid 33886] [client 193.37.32.22:32837] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/x.php"] [unique_id "afDLrzXchLGZ4QggCsk59wAAAJQ"]
[Tue Apr 28 23:01:03.738418 2026] [:error] [pid 33864:tid 33866] [client 193.37.32.34:22153] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "afDLrzXchLGZ4QggCsk5-AAAAIA"]
[Tue Apr 28 23:01:03.939871 2026] [:error] [pid 2741:tid 2748] [client 193.37.32.24:29667] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/plugins/"] [unique_id "afDLr_p92FeOz1h6ILwcbgAAAUI"]
[Tue Apr 28 23:01:04.136891 2026] [:error] [pid 33775:tid 33792] [client 193.37.32.41:34887] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/"] [unique_id "afDLsJsYOcoQrq88YbU-0gAAAM0"]
[Tue Apr 28 23:01:04.336371 2026] [:error] [pid 50889:tid 50896] [client 193.37.32.14:41645] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/fukasawa/inc/classes/403.php"] [unique_id "afDLsIzszBr00txEzGhnoQAAAAQ"]
[Tue Apr 28 23:01:04.536608 2026] [:error] [pid 33777:tid 33839] [client 193.37.32.34:27985] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/admin.php"] [unique_id "afDLsLXUCFWqmordGGIbUAAAAQQ"]
[Tue Apr 28 23:01:09.735585 2026] [:error] [pid 33777:tid 33849] [client 193.37.32.28:37613] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "afDLtbXUCFWqmordGGIbYgAAAQ4"]
[Tue Apr 28 23:01:14.936424 2026] [:error] [pid 33777:tid 33840] [client 193.37.32.29:60391] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/"] [unique_id "afDLurXUCFWqmordGGIbbgAAAQU"]
[Tue Apr 28 23:01:15.137476 2026] [:error] [pid 33777:tid 33844] [client 193.37.32.19:23275] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/edit.php"] [unique_id "afDLu7XUCFWqmordGGIbbwAAAQk"]
[Tue Apr 28 23:01:15.336443 2026] [:error] [pid 33777:tid 33838] [client 193.37.32.37:24815] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin.php"] [unique_id "afDLu7XUCFWqmordGGIbcQAAAQM"]
[Tue Apr 28 23:01:15.536680 2026] [:error] [pid 33777:tid 33836] [client 193.37.32.25:53321] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/"] [unique_id "afDLu7XUCFWqmordGGIbdQAAAQE"]
[Tue Apr 28 23:01:15.736365 2026] [:error] [pid 2741:tid 2759] [client 193.37.32.25:41669] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "afDLu_p92FeOz1h6ILwceAAAAU0"]
[Tue Apr 28 23:01:15.935978 2026] [:error] [pid 33864:tid 33871] [client 193.37.32.6:43479] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/images/"] [unique_id "afDLuzXchLGZ4QggCsk5_QAAAIU"]
[Tue Apr 28 23:01:16.134131 2026] [:error] [pid 33864:tid 33878] [client 193.37.32.41:35051] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/radio.php"] [unique_id "afDLvDXchLGZ4QggCsk5_gAAAIw"]
[Tue Apr 28 23:01:16.335514 2026] [:error] [pid 33776:tid 33823] [client 193.37.32.20:38017] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "afDLvF-bEJ2CKP3iKABLOwAAAE8"]
[Tue Apr 28 23:01:16.544810 2026] [:error] [pid 2741:tid 2763] [client 193.37.32.26:29893] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/admin.php"] [unique_id "afDLvPp92FeOz1h6ILwcewAAAVE"]
[Tue Apr 28 23:01:16.746811 2026] [:error] [pid 33864:tid 33884] [client 193.37.32.130:23339] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/php-compat/"] [unique_id "afDLvDXchLGZ4QggCsk6AQAAAJI"]
[Tue Apr 28 23:01:16.943714 2026] [:error] [pid 33775:tid 33783] [client 193.37.32.5:59999] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/"] [unique_id "afDLvJsYOcoQrq88YbU-4QAAAMQ"]
[Tue Apr 28 23:01:17.140080 2026] [:error] [pid 33775:tid 33788] [client 193.37.32.50:54573] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afDLvZsYOcoQrq88YbU-4gAAAMk"]
[Tue Apr 28 23:01:17.353342 2026] [:error] [pid 2741:tid 2752] [client 193.37.32.25:61721] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/bless.php"] [unique_id "afDLvfp92FeOz1h6ILwcgAAAAUY"]
[Tue Apr 28 23:01:17.564703 2026] [:error] [pid 2741:tid 2750] [client 193.37.32.28:47141] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "afDLvfp92FeOz1h6ILwcggAAAUQ"]
[Tue Apr 28 23:01:17.765628 2026] [:error] [pid 2741:tid 2768] [client 193.37.32.5:51025] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/modern/test2.php"] [unique_id "afDLvfp92FeOz1h6ILwchgAAAVY"]
[Tue Apr 28 23:01:17.965735 2026] [:error] [pid 33776:tid 33810] [client 193.37.32.17:26485] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/info.php"] [unique_id "afDLvV-bEJ2CKP3iKABLRwAAAEI"]
[Tue Apr 28 23:01:18.167289 2026] [:error] [pid 50889:tid 50909] [client 193.37.32.12:62003] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-file.php"] [unique_id "afDLvozszBr00txEzGhnrgAAABE"]
[Tue Apr 28 23:01:18.364797 2026] [:error] [pid 50889:tid 50903] [client 193.37.32.38:39019] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/upgrade/"] [unique_id "afDLvozszBr00txEzGhnrwAAAAs"]
[Tue Apr 28 23:01:18.565586 2026] [:error] [pid 50889:tid 50893] [client 193.37.32.6:41033] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/index/function.php"] [unique_id "afDLvozszBr00txEzGhnsAAAAAE"]
[Tue Apr 28 23:01:18.768417 2026] [:error] [pid 33777:tid 33843] [client 193.37.32.53:37643] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/light/"] [unique_id "afDLvrXUCFWqmordGGIbeAAAAQg"]
[Tue Apr 28 23:01:18.968940 2026] [:error] [pid 2741:tid 2752] [client 193.37.32.19:47129] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/about.php"] [unique_id "afDLvvp92FeOz1h6ILwckwAAAUY"]
[Tue Apr 28 23:01:19.166026 2026] [:error] [pid 2741:tid 2754] [client 193.37.32.41:47353] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/plugin/"] [unique_id "afDLv_p92FeOz1h6ILwclwAAAUg"]
[Tue Apr 28 23:01:19.363796 2026] [:error] [pid 2741:tid 2757] [client 193.37.32.13:48653] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "afDLv_p92FeOz1h6ILwcmgAAAUs"]
[Tue Apr 28 23:01:19.569776 2026] [:error] [pid 2741:tid 2767] [client 193.37.32.25:34563] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-bindings/"] [unique_id "afDLv_p92FeOz1h6ILwcnQAAAVU"]
[Tue Apr 28 23:01:19.769466 2026] [:error] [pid 2741:tid 2761] [client 193.37.32.52:44115] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-good.php"] [unique_id "afDLv_p92FeOz1h6ILwcoAAAAU8"]
[Tue Apr 28 23:01:19.968729 2026] [:error] [pid 2741:tid 2754] [client 193.37.32.19:43871] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ioxi-o.php"] [unique_id "afDLv_p92FeOz1h6ILwcowAAAUg"]
[Tue Apr 28 23:01:20.166696 2026] [:error] [pid 2741:tid 2770] [client 193.37.32.42:57673] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php"] [unique_id "afDLwPp92FeOz1h6ILwcpQAAAVg"]
[Tue Apr 28 23:01:20.365727 2026] [:error] [pid 33777:tid 33856] [client 193.37.32.16:55377] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/bolt.php"] [unique_id "afDLwLXUCFWqmordGGIbewAAARU"]
[Tue Apr 28 23:01:20.565794 2026] [:error] [pid 50889:tid 50907] [client 193.37.32.43:59093] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/"] [unique_id "afDLwIzszBr00txEzGhnsQAAAA8"]
[Tue Apr 28 23:01:20.763308 2026] [:error] [pid 50889:tid 50892] [client 193.37.32.129:54383] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/"] [unique_id "afDLwIzszBr00txEzGhnswAAAAA"]
[Tue Apr 28 23:01:20.964389 2026] [:error] [pid 50889:tid 50915] [client 193.37.32.43:50551] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/config.php"] [unique_id "afDLwIzszBr00txEzGhntAAAABc"]
[Tue Apr 28 23:01:26.166053 2026] [:error] [pid 2741:tid 2749] [client 193.37.32.9:41299] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "afDLxvp92FeOz1h6ILwcyAAAAUM"]
[Tue Apr 28 23:01:26.367721 2026] [:error] [pid 33775:tid 33783] [client 193.37.32.20:47551] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "afDLxpsYOcoQrq88YbU-7AAAAMQ"]
[Tue Apr 28 23:01:26.569910 2026] [:error] [pid 33864:tid 33871] [client 193.37.32.34:21235] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/2024/"] [unique_id "afDLxjXchLGZ4QggCsk6LwAAAIU"]
[Tue Apr 28 23:01:26.767905 2026] [:error] [pid 33864:tid 33870] [client 193.37.32.14:53845] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/src/Core/"] [unique_id "afDLxjXchLGZ4QggCsk6MQAAAIQ"]
[Tue Apr 28 23:01:26.967470 2026] [:error] [pid 2741:tid 2755] [client 193.37.32.50:27087] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/widgets/"] [unique_id "afDLxvp92FeOz1h6ILwcygAAAUk"]
[Tue Apr 28 23:01:27.168095 2026] [:error] [pid 33777:tid 33841] [client 193.37.32.44:36713] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/.well-known/"] [unique_id "afDLx7XUCFWqmordGGIbjAAAAQY"]
[Tue Apr 28 23:01:27.366656 2026] [:error] [pid 33777:tid 33852] [client 193.37.32.6:35541] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "afDLx7XUCFWqmordGGIbjgAAARE"]
[Tue Apr 28 23:01:27.565162 2026] [:error] [pid 33777:tid 33842] [client 193.37.32.52:25949] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ws.php"] [unique_id "afDLx7XUCFWqmordGGIbjwAAAQc"]
[Tue Apr 28 23:01:27.764457 2026] [:error] [pid 33777:tid 33846] [client 193.37.32.37:63837] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/simple.php"] [unique_id "afDLx7XUCFWqmordGGIbkAAAAQs"]
[Tue Apr 28 23:01:27.973215 2026] [:error] [pid 33864:tid 33879] [client 193.37.32.51:44993] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/"] [unique_id "afDLxzXchLGZ4QggCsk6MgAAAI0"]
[Tue Apr 28 23:01:28.172854 2026] [:error] [pid 2741:tid 2761] [client 193.37.32.18:40125] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "afDLyPp92FeOz1h6ILwczgAAAU8"]
[Tue Apr 28 23:01:28.378442 2026] [:error] [pid 50889:tid 50908] [client 193.37.32.43:59467] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/edit-post/"] [unique_id "afDLyIzszBr00txEzGhnugAAABA"]
[Tue Apr 28 23:01:28.576017 2026] [:error] [pid 33864:tid 33883] [client 193.37.32.5:43187] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/"] [unique_id "afDLyDXchLGZ4QggCsk6MwAAAJE"]
[Tue Apr 28 23:01:28.773301 2026] [:error] [pid 33776:tid 33818] [client 193.37.32.27:44061] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "afDLyF-bEJ2CKP3iKABLhQAAAEo"]
[Tue Apr 28 23:01:28.971459 2026] [:error] [pid 33864:tid 33869] [client 193.37.32.14:57075] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/themes.php"] [unique_id "afDLyDXchLGZ4QggCsk6NQAAAIM"]
[Tue Apr 28 23:01:29.174438 2026] [:error] [pid 50889:tid 50907] [client 193.37.32.46:21717] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/as.php"] [unique_id "afDLyYzszBr00txEzGhnvAAAAA8"]
[Tue Apr 28 23:01:29.374012 2026] [:error] [pid 50889:tid 50905] [client 193.37.32.5:30095] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/buy.php"] [unique_id "afDLyYzszBr00txEzGhnvgAAAA0"]
[Tue Apr 28 23:01:29.576350 2026] [:error] [pid 33864:tid 33885] [client 193.37.32.48:52263] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/includes/"] [unique_id "afDLyTXchLGZ4QggCsk6OAAAAJM"]
[Tue Apr 28 23:01:29.775652 2026] [:error] [pid 33864:tid 33874] [client 193.37.32.24:24337] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wa/"] [unique_id "afDLyTXchLGZ4QggCsk6OQAAAIg"]
[Tue Apr 28 23:01:29.974415 2026] [:error] [pid 33776:tid 33815] [client 193.37.32.20:21369] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/"] [unique_id "afDLyV-bEJ2CKP3iKABLhwAAAEc"]
[Tue Apr 28 23:01:30.395407 2026] [:error] [pid 33775:tid 33784] [client 193.37.32.34:35927] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/404.php"] [unique_id "afDLypsYOcoQrq88YbU-8AAAAMU"]
[Tue Apr 28 23:01:30.592814 2026] [:error] [pid 33775:tid 33785] [client 193.37.32.40:34207] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ahax.php"] [unique_id "afDLypsYOcoQrq88YbU-8QAAAMY"]
[Tue Apr 28 23:01:30.796911 2026] [:error] [pid 2741:tid 2763] [client 193.37.32.46:32675] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/buy.php"] [unique_id "afDLyvp92FeOz1h6ILwc2gAAAVE"]
[Tue Apr 28 23:01:30.995623 2026] [:error] [pid 33777:tid 33838] [client 193.37.32.45:61709] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comment-date/"] [unique_id "afDLyrXUCFWqmordGGIblgAAAQM"]
[Tue Apr 28 23:01:31.195644 2026] [:error] [pid 33864:tid 33882] [client 193.37.32.44:45127] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "afDLyzXchLGZ4QggCsk6PAAAAJA"]
[Tue Apr 28 23:01:31.395513 2026] [:error] [pid 33777:tid 33841] [client 193.37.32.33:46711] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "afDLy7XUCFWqmordGGIbmQAAAQY"]
[Tue Apr 28 23:01:31.621301 2026] [:error] [pid 33864:tid 33889] [client 193.37.32.51:52095] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "afDLyzXchLGZ4QggCsk6PgAAAJc"]
[Tue Apr 28 23:01:31.827645 2026] [:error] [pid 33864:tid 33876] [client 193.37.32.51:36153] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/log.php"] [unique_id "afDLyzXchLGZ4QggCsk6PwAAAIo"]
[Tue Apr 28 23:01:32.027111 2026] [:error] [pid 33864:tid 33872] [client 193.37.32.45:37377] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "afDLzDXchLGZ4QggCsk6QQAAAIY"]
[Tue Apr 28 23:01:32.544748 2026] [:error] [pid 33864:tid 33890] [client 193.37.32.24:65419] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "afDLzDXchLGZ4QggCsk6RAAAAJg"]
[Tue Apr 28 23:01:32.745156 2026] [:error] [pid 50889:tid 50896] [client 193.37.32.27:23951] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/"] [unique_id "afDLzIzszBr00txEzGhnxAAAAAQ"]
[Tue Apr 28 23:01:32.945013 2026] [:error] [pid 2741:tid 2766] [client 193.37.32.16:56721] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/about.php"] [unique_id "afDLzPp92FeOz1h6ILwc4gAAAVQ"]
[Tue Apr 28 23:01:33.144807 2026] [:error] [pid 33864:tid 33880] [client 193.37.32.4:52921] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/mini.php"] [unique_id "afDLzTXchLGZ4QggCsk6RgAAAI4"]
[Tue Apr 28 23:01:33.344177 2026] [:error] [pid 33864:tid 33870] [client 193.37.32.13:42707] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/panel.php"] [unique_id "afDLzTXchLGZ4QggCsk6SgAAAIQ"]
[Tue Apr 28 23:01:33.542907 2026] [:error] [pid 33864:tid 33876] [client 193.37.32.34:64333] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "afDLzTXchLGZ4QggCsk6TAAAAIo"]
[Tue Apr 28 23:01:38.742580 2026] [:error] [pid 33776:tid 33814] [client 193.37.32.22:55409] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "afDL0l-bEJ2CKP3iKABLjAAAAEY"]
[Tue Apr 28 23:01:38.942958 2026] [:error] [pid 33775:tid 33801] [client 193.37.32.19:30891] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/network/"] [unique_id "afDL0psYOcoQrq88YbU--QAAANY"]
[Tue Apr 28 23:01:39.143089 2026] [:error] [pid 33776:tid 33809] [client 193.37.32.36:31351] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/m.php"] [unique_id "afDL01-bEJ2CKP3iKABLjQAAAEE"]
[Tue Apr 28 23:01:40.847094 2026] [:error] [pid 2741:tid 2751] [client 193.37.32.11:63135] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/admin/function.php"] [unique_id "afDL1Pp92FeOz1h6ILwc_wAAAUU"]
[Tue Apr 28 23:01:41.046341 2026] [:error] [pid 33864:tid 33885] [client 193.37.32.28:49383] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/code/"] [unique_id "afDL1TXchLGZ4QggCsk6TwAAAJM"]
[Tue Apr 28 23:01:41.244637 2026] [:error] [pid 50889:tid 50907] [client 193.37.32.32:27921] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "afDL1YzszBr00txEzGhnyQAAAA8"]
[Tue Apr 28 23:01:41.446887 2026] [:error] [pid 50889:tid 50901] [client 193.37.32.8:32233] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comments-pagination-numbers/"] [unique_id "afDL1YzszBr00txEzGhnygAAAAk"]
[Tue Apr 28 23:01:41.646638 2026] [:error] [pid 33777:tid 33838] [client 193.37.32.42:28203] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/a.php"] [unique_id "afDL1bXUCFWqmordGGIbogAAAQM"]
[Tue Apr 28 23:01:41.845842 2026] [:error] [pid 50889:tid 50915] [client 193.37.32.45:53361] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/includes/"] [unique_id "afDL1YzszBr00txEzGhnzQAAABc"]
[Tue Apr 28 23:01:42.047387 2026] [:error] [pid 50889:tid 50894] [client 193.37.32.52:27885] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/themes/"] [unique_id "afDL1ozszBr00txEzGhnzwAAAAI"]
[Tue Apr 28 23:01:42.243697 2026] [:error] [pid 33864:tid 33871] [client 193.37.32.13:23523] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/footnotes/"] [unique_id "afDL1jXchLGZ4QggCsk6UQAAAIU"]
[Tue Apr 28 23:01:42.444282 2026] [:error] [pid 50889:tid 50893] [client 193.37.32.35:20563] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "afDL1ozszBr00txEzGhn0QAAAAE"]
[Tue Apr 28 23:01:42.644714 2026] [:error] [pid 33777:tid 33851] [client 193.37.32.41:56645] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "afDL1rXUCFWqmordGGIbpQAAARA"]
[Tue Apr 28 23:01:42.843051 2026] [:error] [pid 33777:tid 33849] [client 193.37.32.46:38181] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "afDL1rXUCFWqmordGGIbqAAAAQ4"]
[Tue Apr 28 23:01:43.072162 2026] [:error] [pid 33777:tid 33847] [client 193.37.32.11:50949] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/upload.php"] [unique_id "afDL17XUCFWqmordGGIbqgAAAQw"]
[Tue Apr 28 23:01:43.271653 2026] [:error] [pid 33776:tid 33827] [client 193.37.32.24:63499] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-domain.php"] [unique_id "afDL11-bEJ2CKP3iKABLkQAAAFM"]
[Tue Apr 28 23:01:43.471307 2026] [:error] [pid 33776:tid 33812] [client 193.37.32.4:22695] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/radio.php"] [unique_id "afDL11-bEJ2CKP3iKABLkwAAAEQ"]
[Tue Apr 28 23:01:43.668682 2026] [:error] [pid 2741:tid 2755] [client 193.37.32.6:62179] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/rip.php"] [unique_id "afDL1_p92FeOz1h6ILwdCQAAAUk"]
[Tue Apr 28 23:01:43.867015 2026] [:error] [pid 2741:tid 2761] [client 193.37.32.18:53359] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/fukasawa/inc/classes/403x.php"] [unique_id "afDL1_p92FeOz1h6ILwdDAAAAU8"]
[Tue Apr 28 23:01:44.069152 2026] [:error] [pid 33776:tid 33810] [client 193.37.32.45:23945] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/options.php"] [unique_id "afDL2F-bEJ2CKP3iKABLlAAAAEI"]
[Tue Apr 28 23:01:45.756395 2026] [:error] [pid 33775:tid 33780] [client 193.37.32.29:62249] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/config.php"] [unique_id "afDL2ZsYOcoQrq88YbU-_QAAAME"]
[Tue Apr 28 23:01:45.952554 2026] [:error] [pid 2741:tid 2767] [client 193.37.32.24:24073] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/src/Content/Type/"] [unique_id "afDL2fp92FeOz1h6ILwdFwAAAVU"]
[Tue Apr 28 23:01:46.150482 2026] [:error] [pid 2741:tid 2756] [client 193.37.32.6:47871] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/css.php"] [unique_id "afDL2vp92FeOz1h6ILwdGQAAAUo"]
[Tue Apr 28 23:01:51.349287 2026] [:error] [pid 50889:tid 50907] [client 193.37.32.44:44267] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "afDL34zszBr00txEzGhn5QAAAA8"]
[Tue Apr 28 23:01:51.548132 2026] [:error] [pid 33776:tid 33809] [client 193.37.32.53:64361] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/system_log.php"] [unique_id "afDL31-bEJ2CKP3iKABLmQAAAEE"]
[Tue Apr 28 23:01:51.750253 2026] [:error] [pid 2741:tid 2766] [client 193.37.32.17:57591] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/neve/assets/apps/dashboard/build/"] [unique_id "afDL3_p92FeOz1h6ILwdMQAAAVQ"]
[Tue Apr 28 23:01:51.945820 2026] [:error] [pid 2741:tid 2764] [client 193.37.32.19:22559] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/"] [unique_id "afDL3_p92FeOz1h6ILwdNgAAAVI"]
[Tue Apr 28 23:01:52.145352 2026] [:error] [pid 33776:tid 33829] [client 193.37.32.31:42795] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "afDL4F-bEJ2CKP3iKABLmwAAAFU"]
[Tue Apr 28 23:01:52.377843 2026] [:error] [pid 33777:tid 33848] [client 193.37.32.24:22689] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "afDL4LXUCFWqmordGGIbugAAAQ0"]
[Tue Apr 28 23:01:52.577647 2026] [:error] [pid 50889:tid 50909] [client 193.37.32.25:35995] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/"] [unique_id "afDL4IzszBr00txEzGhn6gAAABE"]
[Tue Apr 28 23:01:52.778306 2026] [:error] [pid 33775:tid 33779] [client 193.37.32.32:47579] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "afDL4JsYOcoQrq88YbU-_gAAAMA"]
[Tue Apr 28 23:01:52.977926 2026] [:error] [pid 33777:tid 33850] [client 193.37.32.18:43223] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/"] [unique_id "afDL4LXUCFWqmordGGIbvAAAAQ8"]
[Tue Apr 28 23:01:53.174693 2026] [:error] [pid 33777:tid 33859] [client 193.37.32.18:25113] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/worksec.php"] [unique_id "afDL4bXUCFWqmordGGIbvgAAARg"]
[Tue Apr 28 23:01:53.371934 2026] [:error] [pid 2741:tid 2755] [client 193.37.32.6:36493] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/packed.php"] [unique_id "afDL4fp92FeOz1h6ILwdPQAAAUk"]
[Tue Apr 28 23:01:53.869376 2026] [:error] [pid 33777:tid 33842] [client 193.37.32.34:40871] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/network/cache/"] [unique_id "afDL4bXUCFWqmordGGIbwAAAAQc"]
[Tue Apr 28 23:01:54.067754 2026] [:error] [pid 33777:tid 33856] [client 193.37.32.24:40535] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/file.php"] [unique_id "afDL4rXUCFWqmordGGIbwgAAARU"]
[Tue Apr 28 23:01:54.268185 2026] [:error] [pid 33777:tid 33854] [client 193.37.32.9:65303] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/admin-header.php"] [unique_id "afDL4rXUCFWqmordGGIbxAAAARM"]
[Tue Apr 28 23:01:54.468844 2026] [:error] [pid 33777:tid 33838] [client 193.37.32.47:59455] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afDL4rXUCFWqmordGGIbxwAAAQM"]
[Tue Apr 28 23:01:54.673305 2026] [:error] [pid 33777:tid 33836] [client 193.37.32.17:24801] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "afDL4rXUCFWqmordGGIbyQAAAQE"]
[Tue Apr 28 23:01:54.872532 2026] [:error] [pid 33777:tid 33853] [client 193.37.32.36:62477] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/"] [unique_id "afDL4rXUCFWqmordGGIbzAAAARI"]
[Tue Apr 28 23:01:55.072841 2026] [:error] [pid 33777:tid 33842] [client 193.37.32.10:30331] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/mah/function.php"] [unique_id "afDL47XUCFWqmordGGIbzQAAAQc"]
[Tue Apr 28 23:01:55.277886 2026] [:error] [pid 33777:tid 33857] [client 193.37.32.38:22711] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "afDL47XUCFWqmordGGIbzgAAARY"]
[Tue Apr 28 23:01:55.476421 2026] [:error] [pid 33777:tid 33856] [client 193.37.32.47:32197] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/config.php"] [unique_id "afDL47XUCFWqmordGGIbzwAAARU"]
[Tue Apr 28 23:01:55.674758 2026] [:error] [pid 33864:tid 33887] [client 193.37.32.19:34299] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/chosen.php"] [unique_id "afDL4zXchLGZ4QggCsk6VgAAAJU"]
[Tue Apr 28 23:01:55.875353 2026] [:error] [pid 33777:tid 33840] [client 193.37.32.34:45157] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "afDL47XUCFWqmordGGIb0AAAAQU"]
[Tue Apr 28 23:01:56.077812 2026] [:error] [pid 2741:tid 2752] [client 193.37.32.22:32567] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/images/"] [unique_id "afDL5Pp92FeOz1h6ILwdRgAAAUY"]
[Tue Apr 28 23:01:56.282286 2026] [:error] [pid 2741:tid 2747] [client 193.37.32.37:47223] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "afDL5Pp92FeOz1h6ILwdSAAAAUE"]
[Tue Apr 28 23:01:56.480522 2026] [:error] [pid 33777:tid 33839] [client 193.37.32.6:41833] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "afDL5LXUCFWqmordGGIb0QAAAQQ"]
[Tue Apr 28 23:01:56.678173 2026] [:error] [pid 33776:tid 33821] [client 193.37.32.41:40907] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-bindings/maint/"] [unique_id "afDL5F-bEJ2CKP3iKABLoQAAAE0"]
[Tue Apr 28 23:01:56.876452 2026] [:error] [pid 33776:tid 33820] [client 193.37.32.4:45115] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/media/"] [unique_id "afDL5F-bEJ2CKP3iKABLowAAAEw"]
[Tue Apr 28 23:01:57.081829 2026] [:error] [pid 33777:tid 33849] [client 193.37.32.26:56209] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/customize-widgets/"] [unique_id "afDL5bXUCFWqmordGGIb0wAAAQ4"]
[Tue Apr 28 23:01:57.282893 2026] [:error] [pid 2741:tid 2755] [client 193.37.32.17:57795] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/separator/"] [unique_id "afDL5fp92FeOz1h6ILwdTQAAAUk"]
[Tue Apr 28 23:01:57.482799 2026] [:error] [pid 33775:tid 33786] [client 193.37.32.28:42195] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "afDL5ZsYOcoQrq88YbU_AAAAAMc"]
[Tue Apr 28 23:01:57.682294 2026] [:error] [pid 33776:tid 33818] [client 193.37.32.17:46493] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afDL5V-bEJ2CKP3iKABLpwAAAEo"]
[Tue Apr 28 23:01:57.880829 2026] [:error] [pid 33776:tid 33827] [client 193.37.32.41:57471] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content.php"] [unique_id "afDL5V-bEJ2CKP3iKABLqQAAAFM"]
[Tue Apr 28 23:01:58.080342 2026] [:error] [pid 2741:tid 2754] [client 193.37.32.6:30839] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "afDL5vp92FeOz1h6ILwdUgAAAUg"]
[Tue Apr 28 23:01:58.280691 2026] [:error] [pid 2741:tid 2759] [client 193.37.32.46:44553] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/.well-known/acme-challenge/"] [unique_id "afDL5vp92FeOz1h6ILwdVAAAAU0"]
[Tue Apr 28 23:01:58.727747 2026] [:error] [pid 2741:tid 2764] [client 193.37.32.22:44833] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/shell.php"] [unique_id "afDL5vp92FeOz1h6ILwdVwAAAVI"]
[Tue Apr 28 23:01:58.957068 2026] [:error] [pid 2741:tid 2768] [client 193.37.32.26:57385] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/image/"] [unique_id "afDL5vp92FeOz1h6ILwdWwAAAVY"]
[Tue Apr 28 23:01:59.160583 2026] [:error] [pid 2741:tid 2761] [client 193.37.32.16:36187] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/files.php"] [unique_id "afDL5_p92FeOz1h6ILwdXgAAAU8"]
[Tue Apr 28 23:01:59.360633 2026] [:error] [pid 33777:tid 33851] [client 193.37.32.51:62205] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/video/"] [unique_id "afDL57XUCFWqmordGGIb1QAAARA"]
[Tue Apr 28 23:01:59.562152 2026] [:error] [pid 33777:tid 33852] [client 193.37.32.129:64949] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyfive/"] [unique_id "afDL57XUCFWqmordGGIb1wAAARE"]
[Tue Apr 28 23:01:59.764934 2026] [:error] [pid 33777:tid 33835] [client 193.37.32.42:34541] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "afDL57XUCFWqmordGGIb2QAAAQA"]
[Tue Apr 28 23:01:59.964803 2026] [:error] [pid 33777:tid 33848] [client 193.37.32.52:56759] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-activate.php"] [unique_id "afDL57XUCFWqmordGGIb2wAAAQ0"]
[Tue Apr 28 23:02:00.198448 2026] [:error] [pid 33777:tid 33855] [client 193.37.32.34:26913] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "afDL6LXUCFWqmordGGIb3QAAARQ"]
[Tue Apr 28 23:02:00.399747 2026] [:error] [pid 33776:tid 33826] [client 193.37.32.13:37917] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/backup.php"] [unique_id "afDL6F-bEJ2CKP3iKABLrwAAAFI"]
[Tue Apr 28 23:02:00.598770 2026] [:error] [pid 33864:tid 33875] [client 193.37.32.35:27407] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/"] [unique_id "afDL6DXchLGZ4QggCsk6WgAAAIk"]
[Tue Apr 28 23:02:00.805912 2026] [:error] [pid 33776:tid 33809] [client 193.37.32.33:56317] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/login.php"] [unique_id "afDL6F-bEJ2CKP3iKABLtAAAAEE"]
[Tue Apr 28 23:02:01.028763 2026] [:error] [pid 33864:tid 33881] [client 193.37.32.28:51815] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyfour/assets/"] [unique_id "afDL6TXchLGZ4QggCsk6XgAAAI8"]
[Tue Apr 28 23:02:01.240412 2026] [:error] [pid 33776:tid 33818] [client 193.37.32.17:35713] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ab.php"] [unique_id "afDL6V-bEJ2CKP3iKABLtQAAAEo"]
[Tue Apr 28 23:02:01.467183 2026] [:error] [pid 33864:tid 33888] [client 193.37.32.17:51779] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/login.php"] [unique_id "afDL6TXchLGZ4QggCsk6XwAAAJY"]
[Tue Apr 28 23:02:01.669386 2026] [:error] [pid 33864:tid 33879] [client 193.37.32.9:31825] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "afDL6TXchLGZ4QggCsk6YQAAAI0"]
[Tue Apr 28 23:02:01.868650 2026] [:error] [pid 33776:tid 33811] [client 193.37.32.40:25597] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/"] [unique_id "afDL6V-bEJ2CKP3iKABLtwAAAEM"]
[Tue Apr 28 23:02:02.070153 2026] [:error] [pid 33775:tid 33799] [client 193.37.32.33:42507] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/panel.php"] [unique_id "afDL6psYOcoQrq88YbU_BAAAANQ"]
[Tue Apr 28 23:02:02.270582 2026] [:error] [pid 33776:tid 33825] [client 193.37.32.6:45719] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/commands/"] [unique_id "afDL6l-bEJ2CKP3iKABLuAAAAFE"]
[Tue Apr 28 23:02:02.472769 2026] [:error] [pid 33864:tid 33872] [client 193.37.32.6:39151] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/vx.php"] [unique_id "afDL6jXchLGZ4QggCsk6YwAAAIY"]
[Tue Apr 28 23:02:02.673577 2026] [:error] [pid 2741:tid 2750] [client 193.37.32.31:57643] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/t.php"] [unique_id "afDL6vp92FeOz1h6ILwdZwAAAUQ"]
[Tue Apr 28 23:02:07.873532 2026] [:error] [pid 33777:tid 33844] [client 193.37.32.35:62481] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jcrop/"] [unique_id "afDL77XUCFWqmordGGIb-QAAAQk"]
[Tue Apr 28 23:02:08.075715 2026] [:error] [pid 33777:tid 33858] [client 193.37.32.8:39457] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/library/"] [unique_id "afDL8LXUCFWqmordGGIb-gAAARc"]
[Tue Apr 28 23:02:13.277285 2026] [:error] [pid 33864:tid 33879] [client 193.37.32.12:34679] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "afDL9TXchLGZ4QggCsk6aQAAAI0"]
[Tue Apr 28 23:02:13.476823 2026] [:error] [pid 33777:tid 33847] [client 193.37.32.41:24527] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-signin.php"] [unique_id "afDL9bXUCFWqmordGGIb_wAAAQw"]
[Tue Apr 28 23:02:13.673755 2026] [:error] [pid 33777:tid 33839] [client 193.37.32.47:40159] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentynineteen/sass/site/"] [unique_id "afDL9bXUCFWqmordGGIcAQAAAQQ"]
[Tue Apr 28 23:02:13.872953 2026] [:error] [pid 33776:tid 33824] [client 193.37.32.50:57183] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-config-backup.php"] [unique_id "afDL9V-bEJ2CKP3iKABLvwAAAFA"]
[Tue Apr 28 23:02:14.075409 2026] [:error] [pid 33776:tid 33829] [client 193.37.32.38:47371] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "afDL9l-bEJ2CKP3iKABLwAAAAFU"]
[Tue Apr 28 23:02:14.272994 2026] [:error] [pid 33776:tid 33827] [client 193.37.32.11:48151] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/about.php"] [unique_id "afDL9l-bEJ2CKP3iKABLwQAAAFM"]
[Tue Apr 28 23:02:14.474428 2026] [:error] [pid 33775:tid 33799] [client 193.37.32.17:27119] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/html-api/widgets/"] [unique_id "afDL9psYOcoQrq88YbU_MAAAANQ"]
[Tue Apr 28 23:02:14.671496 2026] [:error] [pid 33775:tid 33782] [client 193.37.32.5:50587] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/000.php"] [unique_id "afDL9psYOcoQrq88YbU_MQAAAMM"]
[Tue Apr 28 23:02:14.877883 2026] [:error] [pid 33775:tid 33787] [client 193.37.32.51:27877] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/edit-wolf.php"] [unique_id "afDL9psYOcoQrq88YbU_MwAAAMg"]
[Tue Apr 28 23:02:15.079423 2026] [:error] [pid 2741:tid 2753] [client 193.37.32.43:35239] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afDL9_p92FeOz1h6ILwdcwAAAUc"]
[Tue Apr 28 23:02:15.280863 2026] [:error] [pid 33864:tid 33884] [client 193.37.32.38:58109] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/system.php"] [unique_id "afDL9zXchLGZ4QggCsk6agAAAJI"]
[Tue Apr 28 23:02:15.480908 2026] [:error] [pid 33776:tid 33828] [client 193.37.32.47:21631] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "afDL91-bEJ2CKP3iKABLwwAAAFQ"]
[Tue Apr 28 23:02:15.679367 2026] [:error] [pid 2741:tid 2748] [client 193.37.32.18:37757] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "afDL9_p92FeOz1h6ILwddAAAAUI"]
[Tue Apr 28 23:02:15.880050 2026] [:error] [pid 33776:tid 33831] [client 193.37.32.42:41565] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/adminfuns.php"] [unique_id "afDL91-bEJ2CKP3iKABLxQAAAFc"]
[Tue Apr 28 23:02:16.077851 2026] [:error] [pid 33776:tid 33822] [client 193.37.32.40:48793] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/app.php"] [unique_id "afDL-F-bEJ2CKP3iKABLxgAAAE4"]
[Tue Apr 28 23:02:16.279000 2026] [:error] [pid 33776:tid 33815] [client 193.37.32.130:24059] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/files/"] [unique_id "afDL-F-bEJ2CKP3iKABLxwAAAEc"]
[Tue Apr 28 23:02:16.478459 2026] [:error] [pid 33776:tid 33813] [client 193.37.32.20:21999] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/beteng83/ws78.php"] [unique_id "afDL-F-bEJ2CKP3iKABLyAAAAEU"]
[Tue Apr 28 23:02:16.678191 2026] [:error] [pid 33776:tid 33824] [client 193.37.32.18:23211] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "afDL-F-bEJ2CKP3iKABLyQAAAFA"]
[Tue Apr 28 23:02:21.906959 2026] [:error] [pid 33775:tid 33799] [client 193.37.32.53:62333] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "afDL_ZsYOcoQrq88YbU_PwAAANQ"]
[Tue Apr 28 23:02:22.112982 2026] [:error] [pid 33776:tid 33822] [client 193.37.32.33:30699] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comments-pagination-next/"] [unique_id "afDL_l-bEJ2CKP3iKABL0gAAAE4"]
[Tue Apr 28 23:02:22.325995 2026] [:error] [pid 33864:tid 33878] [client 193.37.32.50:52561] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/html-api/"] [unique_id "afDL_jXchLGZ4QggCsk6dwAAAIw"]
[Tue Apr 28 23:02:22.525621 2026] [:error] [pid 33775:tid 33795] [client 193.37.32.19:24287] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/class.php"] [unique_id "afDL_psYOcoQrq88YbU_QAAAANA"]
[Tue Apr 28 23:02:22.723397 2026] [:error] [pid 33776:tid 33814] [client 193.37.32.49:50437] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/network/colors/"] [unique_id "afDL_l-bEJ2CKP3iKABL0wAAAEY"]
[Tue Apr 28 23:02:22.924593 2026] [:error] [pid 33864:tid 33884] [client 193.37.32.18:21647] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/group/"] [unique_id "afDL_jXchLGZ4QggCsk6eAAAAJI"]
[Tue Apr 28 23:02:23.125161 2026] [:error] [pid 33864:tid 33882] [client 193.37.32.24:47175] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "afDL_zXchLGZ4QggCsk6eQAAAJA"]
[Tue Apr 28 23:02:23.322530 2026] [:error] [pid 33775:tid 33787] [client 193.37.32.18:32415] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/module.php"] [unique_id "afDL_5sYOcoQrq88YbU_QQAAAMg"]
[Tue Apr 28 23:02:23.529754 2026] [:error] [pid 2741:tid 2770] [client 193.37.32.50:20823] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/user.php"] [unique_id "afDL__p92FeOz1h6ILwdegAAAVg"]
[Tue Apr 28 23:02:23.729559 2026] [:error] [pid 33776:tid 33817] [client 193.37.32.22:65057] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/about.php"] [unique_id "afDL_1-bEJ2CKP3iKABL2AAAAEk"]
[Tue Apr 28 23:02:23.932336 2026] [:error] [pid 50889:tid 50911] [client 193.37.32.40:54931] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/widget-group/"] [unique_id "afDL_4zszBr00txEzGhn-QAAABM"]
[Tue Apr 28 23:02:24.131297 2026] [:error] [pid 33775:tid 33801] [client 193.37.32.51:44279] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/config.php"] [unique_id "afDMAJsYOcoQrq88YbU_QgAAANY"]
[Tue Apr 28 23:02:24.330387 2026] [:error] [pid 33775:tid 33802] [client 193.37.32.13:35553] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/2025/"] [unique_id "afDMAJsYOcoQrq88YbU_RQAAANc"]
[Tue Apr 28 23:02:24.529651 2026] [:error] [pid 33775:tid 33789] [client 193.37.32.11:55055] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/install.php"] [unique_id "afDMAJsYOcoQrq88YbU_RwAAAMo"]
[Tue Apr 28 23:02:24.730696 2026] [:error] [pid 33775:tid 33785] [client 193.37.32.45:27985] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-content/"] [unique_id "afDMAJsYOcoQrq88YbU_SgAAAMY"]
[Tue Apr 28 23:02:24.930808 2026] [:error] [pid 33775:tid 33793] [client 193.37.32.41:50617] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "afDMAJsYOcoQrq88YbU_SwAAAM4"]
[Tue Apr 28 23:02:25.131320 2026] [:error] [pid 33775:tid 33795] [client 193.37.32.130:63865] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "afDMAZsYOcoQrq88YbU_TAAAANA"]
[Tue Apr 28 23:02:25.339204 2026] [:error] [pid 33864:tid 33870] [client 193.37.32.33:31651] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "afDMATXchLGZ4QggCsk6gAAAAIQ"]
[Tue Apr 28 23:02:25.537193 2026] [:error] [pid 33775:tid 33784] [client 193.37.32.34:34651] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/"] [unique_id "afDMAZsYOcoQrq88YbU_TgAAAMU"]
[Tue Apr 28 23:02:25.742977 2026] [:error] [pid 33776:tid 33823] [client 193.37.32.33:36265] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/lock360.php"] [unique_id "afDMAV-bEJ2CKP3iKABL3AAAAE8"]
[Tue Apr 28 23:02:25.944121 2026] [:error] [pid 33864:tid 33872] [client 193.37.32.52:63401] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "afDMATXchLGZ4QggCsk6hAAAAIY"]
[Tue Apr 28 23:02:26.144131 2026] [:error] [pid 33776:tid 33824] [client 193.37.32.9:40511] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/we.php"] [unique_id "afDMAl-bEJ2CKP3iKABL3wAAAFA"]
[Tue Apr 28 23:02:26.343806 2026] [:error] [pid 33864:tid 33874] [client 193.37.32.38:64929] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/legacy-widget/"] [unique_id "afDMAjXchLGZ4QggCsk6hQAAAIg"]
[Tue Apr 28 23:02:26.544752 2026] [:error] [pid 33775:tid 33781] [client 193.37.32.31:52403] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/lock360.php"] [unique_id "afDMApsYOcoQrq88YbU_UAAAAMI"]
[Tue Apr 28 23:02:26.745684 2026] [:error] [pid 33864:tid 33871] [client 193.37.32.33:54255] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/"] [unique_id "afDMAjXchLGZ4QggCsk6hgAAAIU"]
[Tue Apr 28 23:02:26.948107 2026] [:error] [pid 33864:tid 33873] [client 193.37.32.37:45261] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/navigation-submenu/"] [unique_id "afDMAjXchLGZ4QggCsk6hwAAAIc"]
[Tue Apr 28 23:02:27.149765 2026] [:error] [pid 33776:tid 33816] [client 193.37.32.43:53881] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/file.php"] [unique_id "afDMA1-bEJ2CKP3iKABL4QAAAEg"]
[Tue Apr 28 23:02:27.350300 2026] [:error] [pid 33864:tid 33870] [client 193.37.32.37:40387] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/users.php"] [unique_id "afDMAzXchLGZ4QggCsk6iAAAAIQ"]
[Tue Apr 28 23:02:32.775364 2026] [:error] [pid 50889:tid 50916] [client 193.37.32.31:51095] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/library/222.php"] [unique_id "afDMCIzszBr00txEzGhoBAAAABg"]
[Tue Apr 28 23:02:32.975316 2026] [:error] [pid 50889:tid 50914] [client 193.37.32.17:56947] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-update.php"] [unique_id "afDMCIzszBr00txEzGhoBQAAABY"]
[Tue Apr 28 23:02:33.176314 2026] [:error] [pid 33864:tid 33867] [client 193.37.32.19:31205] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/database.php"] [unique_id "afDMCTXchLGZ4QggCsk6jgAAAIE"]
[Tue Apr 28 23:02:33.380182 2026] [:error] [pid 33864:tid 33883] [client 193.37.32.53:25999] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/"] [unique_id "afDMCTXchLGZ4QggCsk6jwAAAJE"]
[Tue Apr 28 23:02:33.584458 2026] [:error] [pid 33776:tid 33815] [client 193.37.32.29:38895] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/chosen.php"] [unique_id "afDMCV-bEJ2CKP3iKABL8AAAAEc"]
[Tue Apr 28 23:02:33.788186 2026] [:error] [pid 33777:tid 33843] [client 193.37.32.14:39469] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/network/"] [unique_id "afDMCbXUCFWqmordGGIcCAAAAQg"]
[Tue Apr 28 23:02:34.003155 2026] [:error] [pid 2741:tid 2768] [client 193.37.32.29:47717] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/widgets/"] [unique_id "afDMCvp92FeOz1h6ILwdfwAAAVY"]
[Tue Apr 28 23:02:34.201650 2026] [:error] [pid 50889:tid 50901] [client 193.37.32.17:58971] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/"] [unique_id "afDMCozszBr00txEzGhoCQAAAAk"]
[Tue Apr 28 23:02:34.409615 2026] [:error] [pid 33777:tid 33852] [client 193.37.32.129:42239] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/"] [unique_id "afDMCrXUCFWqmordGGIcCgAAARE"]
[Tue Apr 28 23:02:39.609765 2026] [:error] [pid 33775:tid 33783] [client 193.37.32.42:61413] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "afDMD5sYOcoQrq88YbU_aAAAAMQ"]
[Tue Apr 28 23:02:39.807046 2026] [:error] [pid 2741:tid 2767] [client 193.37.32.22:30313] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/query-pagination/"] [unique_id "afDMD_p92FeOz1h6ILwdiAAAAVU"]
[Tue Apr 28 23:02:40.004946 2026] [:error] [pid 50889:tid 50895] [client 193.37.32.53:20339] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/crystal/"] [unique_id "afDMEIzszBr00txEzGhoHwAAAAM"]
[Tue Apr 28 23:02:40.207549 2026] [:error] [pid 2741:tid 2750] [client 193.37.32.47:63809] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/mediaelement/"] [unique_id "afDMEPp92FeOz1h6ILwdjAAAAUQ"]
[Tue Apr 28 23:02:40.408825 2026] [:error] [pid 33775:tid 33782] [client 193.37.32.40:44875] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentythree/"] [unique_id "afDMEJsYOcoQrq88YbU_agAAAMM"]
[Tue Apr 28 23:02:40.607374 2026] [:error] [pid 33864:tid 33884] [client 193.37.32.46:21367] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/astra/assets/css/"] [unique_id "afDMEDXchLGZ4QggCsk6lwAAAJI"]
[Tue Apr 28 23:02:40.804991 2026] [:error] [pid 33775:tid 33788] [client 193.37.32.14:21003] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/222.php"] [unique_id "afDMEJsYOcoQrq88YbU_awAAAMk"]
[Tue Apr 28 23:02:41.003072 2026] [:error] [pid 33775:tid 33787] [client 193.37.32.38:37601] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/"] [unique_id "afDMEZsYOcoQrq88YbU_bAAAAMg"]
[Tue Apr 28 23:02:41.202450 2026] [:error] [pid 50889:tid 50900] [client 193.37.32.26:47493] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "afDMEYzszBr00txEzGhoJwAAAAg"]
[Tue Apr 28 23:02:41.398807 2026] [:error] [pid 50889:tid 50897] [client 193.37.32.37:36463] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "afDMEYzszBr00txEzGhoKQAAAAU"]
[Tue Apr 28 23:02:41.598188 2026] [:error] [pid 50889:tid 50907] [client 193.37.32.53:57325] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/widgets/wp-conflg.php"] [unique_id "afDMEYzszBr00txEzGhoKgAAAA8"]
[Tue Apr 28 23:02:41.802262 2026] [:error] [pid 50889:tid 50894] [client 193.37.32.48:63869] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Exception/"] [unique_id "afDMEYzszBr00txEzGhoKwAAAAI"]
[Tue Apr 28 23:02:42.002573 2026] [:error] [pid 33775:tid 33792] [client 193.37.32.12:20301] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/pattern/"] [unique_id "afDMEpsYOcoQrq88YbU_bwAAAM0"]
[Tue Apr 28 23:02:42.204084 2026] [:error] [pid 33864:tid 33867] [client 193.37.32.24:42779] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-load.php"] [unique_id "afDMEjXchLGZ4QggCsk6mgAAAIE"]
[Tue Apr 28 23:02:42.403944 2026] [:error] [pid 33775:tid 33779] [client 193.37.32.16:31333] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/news-portal/user-install.php"] [unique_id "afDMEpsYOcoQrq88YbU_cQAAAMA"]
[Tue Apr 28 23:02:42.605330 2026] [:error] [pid 33777:tid 33842] [client 193.37.32.34:25679] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/table/"] [unique_id "afDMErXUCFWqmordGGIcGgAAAQc"]
[Tue Apr 28 23:02:42.808689 2026] [:error] [pid 33777:tid 33859] [client 193.37.32.13:49125] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/block-bindings/"] [unique_id "afDMErXUCFWqmordGGIcGwAAARg"]
[Tue Apr 28 23:02:43.011027 2026] [:error] [pid 33777:tid 33850] [client 193.37.32.10:31345] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-cache-sys/"] [unique_id "afDME7XUCFWqmordGGIcHQAAAQ8"]
[Tue Apr 28 23:02:43.211155 2026] [:error] [pid 33775:tid 33803] [client 193.37.32.37:63929] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist"] [unique_id "afDME5sYOcoQrq88YbU_cgAAANg"]
[Tue Apr 28 23:02:43.414096 2026] [:error] [pid 33776:tid 33812] [client 193.37.32.43:22461] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comments-less.php"] [unique_id "afDME1-bEJ2CKP3iKABL-wAAAEQ"]
[Tue Apr 28 23:02:48.624499 2026] [:error] [pid 33775:tid 33801] [client 193.37.32.44:63087] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/accordion/"] [unique_id "afDMGJsYOcoQrq88YbU_eQAAANY"]
[Tue Apr 28 23:02:48.823459 2026] [:error] [pid 33776:tid 33824] [client 193.37.32.53:47769] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/Nxploited/class-payment.php"] [unique_id "afDMGF-bEJ2CKP3iKABMHgAAAFA"]
[Tue Apr 28 23:02:49.023316 2026] [:error] [pid 33775:tid 33792] [client 193.37.32.11:35953] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/home.php"] [unique_id "afDMGZsYOcoQrq88YbU_egAAAM0"]
[Tue Apr 28 23:02:49.234848 2026] [:error] [pid 33776:tid 33811] [client 193.37.32.51:34277] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/"] [unique_id "afDMGV-bEJ2CKP3iKABMIAAAAEM"]
[Tue Apr 28 23:02:49.434353 2026] [:error] [pid 33776:tid 33830] [client 193.37.32.28:40405] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "afDMGV-bEJ2CKP3iKABMIwAAAFY"]
[Tue Apr 28 23:02:49.730298 2026] [:error] [pid 33775:tid 33803] [client 193.37.32.18:38991] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/script-modules/block-library/file/"] [unique_id "afDMGZsYOcoQrq88YbU_fQAAANg"]
[Tue Apr 28 23:02:59.935587 2026] [:error] [pid 2741:tid 2770] [client 193.37.32.11:54239] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/widgets/"] [unique_id "afDMI_p92FeOz1h6ILwdrgAAAVg"]
[Tue Apr 28 23:03:00.145041 2026] [:error] [pid 2741:tid 2749] [client 193.37.32.52:64047] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/interactivity-api/"] [unique_id "afDMJPp92FeOz1h6ILwdrwAAAUM"]
[Tue Apr 28 23:03:00.343512 2026] [:error] [pid 2741:tid 2750] [client 193.37.32.9:39455] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/taxonomy-compiler.php"] [unique_id "afDMJPp92FeOz1h6ILwdsAAAAUQ"]
[Tue Apr 28 23:03:00.542336 2026] [:error] [pid 50889:tid 50893] [client 193.37.32.46:31933] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/smilies/"] [unique_id "afDMJIzszBr00txEzGhoWgAAAAE"]
[Tue Apr 28 23:03:00.768055 2026] [:error] [pid 33777:tid 33837] [client 193.37.32.36:39095] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyone/assets/"] [unique_id "afDMJLXUCFWqmordGGIcMAAAAQI"]
[Tue Apr 28 23:03:00.968383 2026] [:error] [pid 33777:tid 33846] [client 193.37.32.47:59331] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/aboutc.php"] [unique_id "afDMJLXUCFWqmordGGIcMgAAAQs"]
[Tue Apr 28 23:03:01.174016 2026] [:error] [pid 33775:tid 33791] [client 193.37.32.42:32813] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "afDMJZsYOcoQrq88YbU_iwAAAMw"]
[Tue Apr 28 23:03:01.373429 2026] [:error] [pid 33776:tid 33832] [client 193.37.32.52:28191] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Content/Type/Sniffer.plugin.php"] [unique_id "afDMJV-bEJ2CKP3iKABMMAAAAFg"]
[Tue Apr 28 23:03:01.572711 2026] [:error] [pid 33775:tid 33794] [client 193.37.32.43:40677] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afDMJZsYOcoQrq88YbU_jAAAAM8"]
[Tue Apr 28 23:03:01.773951 2026] [:error] [pid 33864:tid 33890] [client 193.37.32.130:57711] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/cgi-bin/cgi-bin/config.php"] [unique_id "afDMJTXchLGZ4QggCsk6uAAAAJg"]
[Tue Apr 28 23:03:01.974339 2026] [:error] [pid 33777:tid 33840] [client 193.37.32.45:50489] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/blue/nbpmo.php"] [unique_id "afDMJbXUCFWqmordGGIcNAAAAQU"]
[Tue Apr 28 23:03:02.182815 2026] [:error] [pid 33777:tid 33857] [client 193.37.32.43:55901] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/system.php"] [unique_id "afDMJrXUCFWqmordGGIcNwAAARY"]
[Tue Apr 28 23:03:02.382286 2026] [:error] [pid 33776:tid 33825] [client 193.37.32.12:35467] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/login.php"] [unique_id "afDMJl-bEJ2CKP3iKABMMwAAAFE"]
[Tue Apr 28 23:03:02.630053 2026] [:error] [pid 33776:tid 33812] [client 193.37.32.28:58941] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sc_1.php"] [unique_id "afDMJl-bEJ2CKP3iKABMNAAAAEQ"]
[Tue Apr 28 23:03:02.829974 2026] [:error] [pid 50889:tid 50899] [client 193.37.32.44:40305] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/gk.php"] [unique_id "afDMJozszBr00txEzGhoXAAAAAc"]
[Tue Apr 28 23:03:03.033063 2026] [:error] [pid 2741:tid 2766] [client 193.37.32.6:38887] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/about/system_core.php"] [unique_id "afDMJ_p92FeOz1h6ILwdtgAAAVQ"]
[Tue Apr 28 23:03:03.233007 2026] [:error] [pid 33864:tid 33887] [client 193.37.32.24:33799] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ALFA_DATA/system_core.php"] [unique_id "afDMJzXchLGZ4QggCsk6uwAAAJU"]
[Tue Apr 28 23:03:03.431314 2026] [:error] [pid 33864:tid 33867] [client 193.37.32.13:28799] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ALFA_DATA/alfacgiapi/system_core.php"] [unique_id "afDMJzXchLGZ4QggCsk6vAAAAIE"]
[Tue Apr 28 23:03:03.629080 2026] [:error] [pid 33864:tid 33889] [client 193.37.32.37:33029] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/contact/system_core.php"] [unique_id "afDMJzXchLGZ4QggCsk6vQAAAJc"]
[Tue Apr 28 23:03:03.831090 2026] [:error] [pid 33776:tid 33817] [client 193.37.32.39:25637] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/ai-builder/system_core.php"] [unique_id "afDMJ1-bEJ2CKP3iKABMNQAAAEk"]
[Tue Apr 28 23:03:04.028904 2026] [:error] [pid 33775:tid 33788] [client 193.37.32.38:59301] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/ast-block-templates-json/system_core.php"] [unique_id "afDMKJsYOcoQrq88YbU_jQAAAMk"]
[Tue Apr 28 23:03:04.230527 2026] [:error] [pid 33777:tid 33854] [client 193.37.32.12:31249] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/astra-sites/json/system_core.php"] [unique_id "afDMKLXUCFWqmordGGIcOwAAARM"]
[Tue Apr 28 23:03:04.429992 2026] [:error] [pid 33777:tid 33847] [client 193.37.32.12:35361] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/cartflows-logs/system_core.php"] [unique_id "afDMKLXUCFWqmordGGIcPQAAAQw"]
[Tue Apr 28 23:03:04.630125 2026] [:error] [pid 33776:tid 33824] [client 193.37.32.34:30181] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/edd/system_core.php"] [unique_id "afDMKF-bEJ2CKP3iKABMNwAAAFA"]
[Tue Apr 28 23:03:09.833578 2026] [:error] [pid 33864:tid 33881] [client 193.37.32.11:28597] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/simply-static/temp-files/system_core.php"] [unique_id "afDMLTXchLGZ4QggCsk6wwAAAI8"]
[Tue Apr 28 23:03:10.034750 2026] [:error] [pid 33864:tid 33866] [client 193.37.32.10:59057] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/st-importer/system_core.php"] [unique_id "afDMLjXchLGZ4QggCsk6xAAAAIA"]
[Tue Apr 28 23:03:10.236371 2026] [:error] [pid 33777:tid 33845] [client 193.37.32.129:25109] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/system_core.php"] [unique_id "afDMLrXUCFWqmordGGIcQgAAAQo"]
[Tue Apr 28 23:03:10.436914 2026] [:error] [pid 33777:tid 33852] [client 193.37.32.43:34679] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wc-logs/system_core.php"] [unique_id "afDMLrXUCFWqmordGGIcQwAAARE"]
[Tue Apr 28 23:03:10.640946 2026] [:error] [pid 33777:tid 33859] [client 193.37.32.38:24717] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/woocommerce_uploads/system_core.php"] [unique_id "afDMLrXUCFWqmordGGIcRQAAARg"]
[Tue Apr 28 23:03:10.841304 2026] [:error] [pid 33777:tid 33838] [client 193.37.32.20:36455] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wpforms/cache/system_core.php"] [unique_id "afDMLrXUCFWqmordGGIcRwAAAQM"]
[Tue Apr 28 23:03:11.041823 2026] [:error] [pid 33777:tid 33847] [client 193.37.32.41:63263] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wp-file-manager-pro/"] [unique_id "afDML7XUCFWqmordGGIcSQAAAQw"]
[Tue Apr 28 23:03:11.247109 2026] [:error] [pid 33777:tid 33853] [client 193.37.32.5:32697] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/db-status.php"] [unique_id "afDML7XUCFWqmordGGIcSwAAARI"]
[Tue Apr 28 23:03:11.446484 2026] [:error] [pid 33864:tid 33887] [client 193.37.32.8:22355] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-content/uploads/"] [unique_id "afDMLzXchLGZ4QggCsk6ygAAAJU"]
[Tue Apr 28 23:03:11.645664 2026] [:error] [pid 50889:tid 50897] [client 193.37.32.31:32473] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/elementor/css/"] [unique_id "afDML4zszBr00txEzGhoYAAAAAU"]
[Tue Apr 28 23:03:11.841939 2026] [:error] [pid 33777:tid 33845] [client 193.37.32.19:38375] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wp-file-manager-pro/fm_backup/"] [unique_id "afDML7XUCFWqmordGGIcTgAAAQo"]
[Tue Apr 28 23:03:12.050966 2026] [:error] [pid 33864:tid 33878] [client 193.37.32.45:46207] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/well-known/"] [unique_id "afDMMDXchLGZ4QggCsk6zAAAAIw"]
[Tue Apr 28 23:03:12.258631 2026] [:error] [pid 50889:tid 50907] [client 193.37.32.22:55323] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/well-known/pki-validation/"] [unique_id "afDMMIzszBr00txEzGhoYgAAAA8"]
[Tue Apr 28 23:03:12.457019 2026] [:error] [pid 33864:tid 33872] [client 193.37.32.48:64001] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/system.php"] [unique_id "afDMMDXchLGZ4QggCsk6zQAAAIY"]
[Tue Apr 28 23:03:12.657445 2026] [:error] [pid 50889:tid 50914] [client 193.37.32.22:28429] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/panel.php"] [unique_id "afDMMIzszBr00txEzGhoZAAAABY"]
[Tue Apr 28 23:03:12.856987 2026] [:error] [pid 2741:tid 2758] [client 193.37.32.11:44679] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/home.php"] [unique_id "afDMMPp92FeOz1h6ILwduwAAAUw"]
[Tue Apr 28 23:03:13.069555 2026] [:error] [pid 50889:tid 50894] [client 193.37.32.9:42387] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "afDMMYzszBr00txEzGhoZQAAAAI"]
[Tue Apr 28 23:03:13.278187 2026] [:error] [pid 33776:tid 33812] [client 193.37.32.4:47767] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/login.php"] [unique_id "afDMMV-bEJ2CKP3iKABMPQAAAEQ"]
[Tue Apr 28 23:03:18.476536 2026] [:error] [pid 33776:tid 33824] [client 193.37.32.28:29177] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/system_core.php"] [unique_id "afDMNl-bEJ2CKP3iKABMQgAAAFA"]
[Tue Apr 28 23:03:18.677742 2026] [:error] [pid 33775:tid 33801] [client 193.37.32.129:21049] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/system_core.php"] [unique_id "afDMNpsYOcoQrq88YbU_ngAAANY"]
[Tue Apr 28 23:03:18.884095 2026] [:error] [pid 33775:tid 33779] [client 193.37.32.40:33755] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/system_core.php"] [unique_id "afDMNpsYOcoQrq88YbU_oQAAAMA"]
[Tue Apr 28 23:03:19.088575 2026] [:error] [pid 50889:tid 50901] [client 193.37.32.43:34235] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-json/oembed/system_core.php"] [unique_id "afDMN4zszBr00txEzGhoawAAAAk"]
[Tue Apr 28 23:03:19.521350 2026] [:error] [pid 33777:tid 33845] [client 193.37.32.13:21491] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-json/system_core.php"] [unique_id "afDMN7XUCFWqmordGGIcVwAAAQo"]
[Tue Apr 28 23:03:19.724951 2026] [:error] [pid 33777:tid 33857] [client 193.37.32.46:28239] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/system_core.php"] [unique_id "afDMN7XUCFWqmordGGIcWgAAARY"]
[Tue Apr 28 23:03:19.923703 2026] [:error] [pid 2741:tid 2748] [client 193.37.32.51:58099] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/system_core.php"] [unique_id "afDMN_p92FeOz1h6ILwdwAAAAUI"]
[Tue Apr 28 23:03:20.122502 2026] [:error] [pid 2741:tid 2762] [client 193.37.32.51:36581] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-content/wp-config-backup.php"] [unique_id "afDMOPp92FeOz1h6ILwdwQAAAVA"]
[Tue Apr 28 23:03:20.319831 2026] [:error] [pid 33777:tid 33839] [client 193.37.32.50:46393] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-config.php"] [unique_id "afDMOLXUCFWqmordGGIcXQAAAQQ"]
[Tue Apr 28 23:03:20.526549 2026] [:error] [pid 33775:tid 33794] [client 193.37.32.26:39131] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/js_composer/bak.php"] [unique_id "afDMOJsYOcoQrq88YbU_owAAAM8"]
[Tue Apr 28 23:03:20.725726 2026] [:error] [pid 50889:tid 50892] [client 193.37.32.27:55819] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/elementor/assets/css/conditionals/system_core.php"] [unique_id "afDMOIzszBr00txEzGhobQAAAAA"]
[Tue Apr 28 23:03:20.934673 2026] [:error] [pid 33775:tid 33780] [client 193.37.32.4:64347] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/system_core.php"] [unique_id "afDMOJsYOcoQrq88YbU_pAAAAME"]
[Tue Apr 28 23:03:21.138836 2026] [:error] [pid 33777:tid 33841] [client 193.37.32.26:57007] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wpforms-lite/assets/css/frontend/modern/system_core.php"] [unique_id "afDMObXUCFWqmordGGIcYgAAAQY"]
[Tue Apr 28 23:03:21.337688 2026] [:error] [pid 33776:tid 33821] [client 193.37.32.129:38719] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-content/plugins/wp-config-backup.php"] [unique_id "afDMOV-bEJ2CKP3iKABMRgAAAE0"]
[Tue Apr 28 23:03:21.536715 2026] [:error] [pid 33864:tid 33890] [client 193.37.32.12:52115] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-config-backup.php"] [unique_id "afDMOTXchLGZ4QggCsk61AAAAJg"]
[Tue Apr 28 23:03:21.736821 2026] [:error] [pid 33864:tid 33889] [client 193.37.32.17:42733] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/cielhpn/"] [unique_id "afDMOTXchLGZ4QggCsk61gAAAJc"]
[Tue Apr 28 23:03:21.941549 2026] [:error] [pid 50889:tid 50895] [client 193.37.32.12:31273] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/elementor-pro/modules/loop-filter/data/endpoints/about.php"] [unique_id "afDMOYzszBr00txEzGhobwAAAAM"]
[Tue Apr 28 23:03:22.144053 2026] [:error] [pid 33775:tid 33797] [client 193.37.32.35:21951] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/forminator/library/field-autofill-providers/contracts/wp-login.php"] [unique_id "afDMOpsYOcoQrq88YbU_pgAAANI"]
[Tue Apr 28 23:03:22.346434 2026] [:error] [pid 2741:tid 2757] [client 193.37.32.48:21225] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/advanced-custom-fields-pro/includes/Updater/about.php"] [unique_id "afDMOvp92FeOz1h6ILwdxQAAAUs"]
[Tue Apr 28 23:03:22.545569 2026] [:error] [pid 33776:tid 33826] [client 193.37.32.21:43331] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/class-wp-logo.php"] [unique_id "afDMOl-bEJ2CKP3iKABMSQAAAFI"]
[Tue Apr 28 23:03:22.747093 2026] [:error] [pid 33864:tid 33880] [client 193.37.32.31:57889] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/js_composer/include/classes/vendors/plugins/test.php"] [unique_id "afDMOjXchLGZ4QggCsk62gAAAI4"]
[Tue Apr 28 23:03:22.947941 2026] [:error] [pid 2741:tid 2766] [client 193.37.32.26:50967] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/revslider/admin/assets/js/plugins/maintenance.php"] [unique_id "afDMOvp92FeOz1h6ILwdzgAAAVQ"]
[Tue Apr 28 23:03:23.150272 2026] [:error] [pid 33777:tid 33852] [client 193.37.32.53:33615] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/wp-mail.php"] [unique_id "afDMO7XUCFWqmordGGIcZAAAARE"]
[Tue Apr 28 23:03:23.353244 2026] [:error] [pid 50889:tid 50914] [client 193.37.32.52:56353] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/sitepress-multilingual-cms/classes/plugins/wp-blog-header.php"] [unique_id "afDMO4zszBr00txEzGhocAAAABY"]
[Tue Apr 28 23:03:23.558808 2026] [:error] [pid 33775:tid 33779] [client 193.37.32.8:34023] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/updraftplus/includes/jstree/themes/wp-activate.php"] [unique_id "afDMO5sYOcoQrq88YbU_qwAAAMA"]
[Tue Apr 28 23:03:23.760115 2026] [:error] [pid 33775:tid 33800] [client 193.37.32.53:35245] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-file-manager/lib/themes/options.php"] [unique_id "afDMO5sYOcoQrq88YbU_rAAAANU"]
[Tue Apr 28 23:03:24.151858 2026] [:error] [pid 33864:tid 33889] [client 193.37.32.44:28147] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-blog-header.php"] [unique_id "afDMPDXchLGZ4QggCsk64wAAAJc"]
[Tue Apr 28 23:03:24.357189 2026] [:error] [pid 33864:tid 33878] [client 193.37.32.24:33657] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/elementor/assets/lib/pickr/themes/wp-blog-header.php"] [unique_id "afDMPDXchLGZ4QggCsk65AAAAIw"]
[Tue Apr 28 23:03:24.557767 2026] [:error] [pid 33775:tid 33799] [client 193.37.32.129:50327] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/contact-form-7/uoyaugar.php"] [unique_id "afDMPJsYOcoQrq88YbU_sAAAANQ"]
[Tue Apr 28 23:03:24.767858 2026] [:error] [pid 33777:tid 33847] [client 193.37.32.19:22911] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/check-email/config.php"] [unique_id "afDMPLXUCFWqmordGGIcaQAAAQw"]
[Tue Apr 28 23:03:24.965857 2026] [:error] [pid 33777:tid 33845] [client 193.37.32.22:54357] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/file-manager-advanced/config.php"] [unique_id "afDMPLXUCFWqmordGGIcbQAAAQo"]
[Tue Apr 28 23:03:25.161582 2026] [:error] [pid 50889:tid 50906] [client 193.37.32.24:59031] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "afDMPYzszBr00txEzGhocQAAAA4"]
[Tue Apr 28 23:03:25.358618 2026] [:error] [pid 2741:tid 2766] [client 193.37.32.14:49687] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/elementor/lndex.php"] [unique_id "afDMPfp92FeOz1h6ILwd2AAAAVQ"]
[Tue Apr 28 23:03:25.557005 2026] [:error] [pid 33776:tid 33819] [client 193.37.32.33:24019] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wordpress-seo/wp-seo-trigger-table.php"] [unique_id "afDMPV-bEJ2CKP3iKABMTgAAAEs"]
[Tue Apr 28 23:03:25.756048 2026] [:error] [pid 33776:tid 33832] [client 193.37.32.12:44037] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-content/plugins/admin.php"] [unique_id "afDMPV-bEJ2CKP3iKABMUgAAAFg"]
[Tue Apr 28 23:03:25.954972 2026] [:error] [pid 33776:tid 33825] [client 193.37.32.53:58391] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/star-addons-for-elementor/includes/class-star-addons-uploads.php"] [unique_id "afDMPV-bEJ2CKP3iKABMVAAAAFE"]
[Tue Apr 28 23:03:26.153662 2026] [:error] [pid 33776:tid 33812] [client 193.37.32.43:53585] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/contact-form-7-honeypot/includes/rest-api/wp-admin/config.php"] [unique_id "afDMPl-bEJ2CKP3iKABMVwAAAEQ"]
[Tue Apr 28 23:03:26.356207 2026] [:error] [pid 33775:tid 33797] [client 193.37.32.34:24245] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/js_composer/include/classes/vendors/plugins/panel.php"] [unique_id "afDMPpsYOcoQrq88YbU_sgAAANI"]
[Tue Apr 28 23:03:26.557332 2026] [:error] [pid 2741:tid 2768] [client 193.37.32.18:42239] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/the-events-calendar/build/css/integrations/plugins/options.php"] [unique_id "afDMPvp92FeOz1h6ILwd3AAAAVY"]
[Tue Apr 28 23:03:31.756427 2026] [:error] [pid 33777:tid 33850] [client 193.37.32.48:35587] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/ssss/src.php"] [unique_id "afDMQ7XUCFWqmordGGIcfgAAAQ8"]
[Tue Apr 28 23:03:31.954972 2026] [:error] [pid 2741:tid 2750] [client 193.37.32.47:52445] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/maintenance.php"] [unique_id "afDMQ_p92FeOz1h6ILwd8QAAAUQ"]
[Tue Apr 28 23:03:32.153177 2026] [:error] [pid 50889:tid 50913] [client 193.37.32.10:29117] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/tiktok-for-business/"] [unique_id "afDMRIzszBr00txEzGhodgAAABU"]
[Tue Apr 28 23:03:32.358059 2026] [:error] [pid 50889:tid 50897] [client 193.37.32.36:31863] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/contact-form-7/base-theme.php"] [unique_id "afDMRIzszBr00txEzGhodwAAAAU"]
[Tue Apr 28 23:03:32.556900 2026] [:error] [pid 33776:tid 33832] [client 193.37.32.9:21747] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-bes.php"] [unique_id "afDMRF-bEJ2CKP3iKABMbwAAAFg"]
[Tue Apr 28 23:03:32.757653 2026] [:error] [pid 50889:tid 50892] [client 193.37.32.46:23363] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/mu-plugins/config.php"] [unique_id "afDMRIzszBr00txEzGhoeQAAAAA"]
[Tue Apr 28 23:03:32.956809 2026] [:error] [pid 50889:tid 50907] [client 193.37.32.34:40593] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-load.php"] [unique_id "afDMRIzszBr00txEzGhoewAAAA8"]
[Tue Apr 28 23:03:33.155411 2026] [:error] [pid 33777:tid 33847] [client 193.37.32.130:58669] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/site-logo/about.php"] [unique_id "afDMRbXUCFWqmordGGIcgwAAAQw"]
[Tue Apr 28 23:03:33.357041 2026] [:error] [pid 33776:tid 33818] [client 193.37.32.44:33993] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/newfold-page-cachesocial/about.php"] [unique_id "afDMRV-bEJ2CKP3iKABMcgAAAEo"]
[Tue Apr 28 23:03:33.554796 2026] [:error] [pid 33776:tid 33810] [client 193.37.32.36:62013] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/file61.php"] [unique_id "afDMRV-bEJ2CKP3iKABMdAAAAEI"]
[Tue Apr 28 23:03:33.758472 2026] [:error] [pid 33776:tid 33824] [client 193.37.32.33:37611] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comment-author-name/editers.php"] [unique_id "afDMRV-bEJ2CKP3iKABMdwAAAFA"]
[Tue Apr 28 23:03:33.959911 2026] [:error] [pid 33775:tid 33799] [client 193.37.32.6:31105] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/plugin-editor-trigger.php"] [unique_id "afDMRZsYOcoQrq88YbU_vAAAANQ"]
[Tue Apr 28 23:03:34.166825 2026] [:error] [pid 33777:tid 33846] [client 193.37.32.12:42363] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/query-pagination-numbers/wp-cron.php"] [unique_id "afDMRrXUCFWqmordGGIchgAAAQs"]
[Tue Apr 28 23:03:34.365354 2026] [:error] [pid 33775:tid 33782] [client 193.37.32.18:59363] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "afDMRpsYOcoQrq88YbU_vQAAAMM"]
[Tue Apr 28 23:03:34.563314 2026] [:error] [pid 33775:tid 33784] [client 193.37.32.25:49591] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/upgrade-temp-backup/media/files/files/cache/ulnc/wbdo/"] [unique_id "afDMRpsYOcoQrq88YbU_vwAAAMU"]
[Tue Apr 28 23:03:34.761658 2026] [:error] [pid 2741:tid 2746] [client 193.37.32.42:28407] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-bindings/backup/js/build/kys/admin.php"] [unique_id "afDMRvp92FeOz1h6ILwd8gAAAUA"]
[Tue Apr 28 23:03:34.962002 2026] [:error] [pid 50889:tid 50898] [client 193.37.32.50:29067] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/src/v1/dist/build/uols/"] [unique_id "afDMRozszBr00txEzGhofgAAAAY"]
[Tue Apr 28 23:03:35.163494 2026] [:error] [pid 50889:tid 50893] [client 193.37.32.4:55047] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/css/cache/piwk/admin.php"] [unique_id "afDMR4zszBr00txEzGhofwAAAAE"]
[Tue Apr 28 23:03:35.362434 2026] [:error] [pid 33864:tid 33883] [client 193.37.32.10:50623] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/plugins/test.php"] [unique_id "afDMRzXchLGZ4QggCsk68AAAAJE"]
[Tue Apr 28 23:03:35.567389 2026] [:error] [pid 2741:tid 2748] [client 193.37.32.40:50645] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/themes/maintenance.php"] [unique_id "afDMR_p92FeOz1h6ILwd9gAAAUI"]
[Tue Apr 28 23:03:35.767033 2026] [:error] [pid 2741:tid 2762] [client 193.37.32.31:38059] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins_new/sitepress-multilingual-cms/classes/plugins/about.php"] [unique_id "afDMR_p92FeOz1h6ILwd-AAAAVA"]
[Tue Apr 28 23:03:35.965020 2026] [:error] [pid 50889:tid 50913] [client 193.37.32.34:52101] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins_new/wordpress-seo/admin/import/plugins/wp-blog-header.php"] [unique_id "afDMR4zszBr00txEzGhoggAAABU"]
[Tue Apr 28 23:03:36.165447 2026] [:error] [pid 33777:tid 33850] [client 193.37.32.20:35587] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/cs.php"] [unique_id "afDMSLXUCFWqmordGGIcigAAAQ8"]
[Tue Apr 28 23:03:36.365162 2026] [:error] [pid 33777:tid 33844] [client 193.37.32.27:62117] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/IXR/met/uploads/"] [unique_id "afDMSLXUCFWqmordGGIciwAAAQk"]
[Tue Apr 28 23:03:36.571327 2026] [:error] [pid 33777:tid 33851] [client 193.37.32.51:34117] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/wdf.php"] [unique_id "afDMSLXUCFWqmordGGIcjQAAARA"]
[Tue Apr 28 23:03:36.771888 2026] [:error] [pid 33777:tid 33842] [client 193.37.32.6:62537] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/koiy.php"] [unique_id "afDMSLXUCFWqmordGGIcjwAAAQc"]
[Tue Apr 28 23:03:36.975912 2026] [:error] [pid 33777:tid 33857] [client 193.37.32.28:51649] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/query/"] [unique_id "afDMSLXUCFWqmordGGIckgAAARY"]
[Tue Apr 28 23:03:37.175843 2026] [:error] [pid 33777:tid 33837] [client 193.37.32.47:30209] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/spacer/"] [unique_id "afDMSbXUCFWqmordGGIckwAAAQI"]
[Tue Apr 28 23:03:37.376059 2026] [:error] [pid 33775:tid 33781] [client 193.37.32.24:62297] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/l10n/"] [unique_id "afDMSZsYOcoQrq88YbU_wwAAAMI"]
[Tue Apr 28 23:03:37.576474 2026] [:error] [pid 33776:tid 33829] [client 193.37.32.45:30213] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/plugins/media/v3/js/build/icdxa/"] [unique_id "afDMSV-bEJ2CKP3iKABMewAAAFU"]
[Tue Apr 28 23:03:37.775896 2026] [:error] [pid 33777:tid 33854] [client 193.37.32.25:26023] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/plugins/v3/data/v1/css/jmy/msl/"] [unique_id "afDMSbXUCFWqmordGGIclgAAARM"]
[Tue Apr 28 23:03:42.974850 2026] [:error] [pid 33864:tid 33876] [client 193.37.32.130:61063] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/social-links/admin.php"] [unique_id "afDMTjXchLGZ4QggCsk6-AAAAIo"]
[Tue Apr 28 23:03:43.177113 2026] [:error] [pid 50889:tid 50898] [client 193.37.32.32:64893] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/admin-wolf.php"] [unique_id "afDMT4zszBr00txEzGhoiQAAAAY"]
[Tue Apr 28 23:03:43.376149 2026] [:error] [pid 2741:tid 2756] [client 193.37.32.21:61881] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "afDMT_p92FeOz1h6ILweAQAAAUo"]
[Tue Apr 28 23:03:43.872161 2026] [:error] [pid 2741:tid 2751] [client 193.37.32.35:37431] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/astra/assets/css/minified/system_core.php"] [unique_id "afDMT_p92FeOz1h6ILweAgAAAUU"]
[Tue Apr 28 23:03:44.072565 2026] [:error] [pid 2741:tid 2766] [client 193.37.32.52:42353] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/system_core.php"] [unique_id "afDMUPp92FeOz1h6ILweAwAAAVQ"]
[Tue Apr 28 23:03:44.284121 2026] [:error] [pid 50889:tid 50893] [client 193.37.32.25:51213] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-content/themes/wp-config-backup.php"] [unique_id "afDMUIzszBr00txEzGhojAAAAAE"]
[Tue Apr 28 23:03:44.484574 2026] [:error] [pid 33864:tid 33882] [client 193.37.32.14:49939] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/theme/about.php"] [unique_id "afDMUDXchLGZ4QggCsk6-QAAAJA"]
[Tue Apr 28 23:03:44.687825 2026] [:error] [pid 50889:tid 50897] [client 193.37.32.32:48033] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/sinatra/inc/customizer/controls/color/about.php"] [unique_id "afDMUIzszBr00txEzGhojwAAAAU"]
[Tue Apr 28 23:03:44.885382 2026] [:error] [pid 33864:tid 33868] [client 193.37.32.33:20383] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/blocksy/inc/panel-builder/footer/widget-area-3/"] [unique_id "afDMUDXchLGZ4QggCsk6-wAAAII"]
[Tue Apr 28 23:03:45.081501 2026] [:error] [pid 50889:tid 50911] [client 193.37.32.44:61159] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/crio/woocommerce/notices/"] [unique_id "afDMUYzszBr00txEzGhokwAAABM"]
[Tue Apr 28 23:03:45.280466 2026] [:error] [pid 50889:tid 50915] [client 193.37.32.41:41155] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/hestia/inc/views/blog/"] [unique_id "afDMUYzszBr00txEzGholQAAABc"]
[Tue Apr 28 23:03:45.479148 2026] [:error] [pid 50889:tid 50896] [client 193.37.32.46:47093] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/fortified-child/docs/js/omelv/"] [unique_id "afDMUYzszBr00txEzGhomAAAAAQ"]
[Tue Apr 28 23:03:50.678489 2026] [:error] [pid 2741:tid 2764] [client 193.37.32.129:32625] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyone/content-index.php"] [unique_id "afDMVvp92FeOz1h6ILweEAAAAVI"]
[Tue Apr 28 23:03:50.877789 2026] [:error] [pid 33864:tid 33876] [client 193.37.32.32:20877] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/proton/content-index.php"] [unique_id "afDMVjXchLGZ4QggCsk7BAAAAIo"]
[Tue Apr 28 23:03:51.077578 2026] [:error] [pid 33864:tid 33882] [client 193.37.32.35:52431] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentythree/patterns/"] [unique_id "afDMVzXchLGZ4QggCsk7BgAAAJA"]
[Tue Apr 28 23:03:51.276664 2026] [:error] [pid 50889:tid 50901] [client 193.37.32.53:38287] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentytwo/assets/fonts/inter/"] [unique_id "afDMV4zszBr00txEzGhotQAAAAk"]
[Tue Apr 28 23:03:51.476613 2026] [:error] [pid 33864:tid 33871] [client 193.37.32.53:49217] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/yootheme/content-index.php"] [unique_id "afDMVzXchLGZ4QggCsk7CgAAAIU"]
[Tue Apr 28 23:03:51.685186 2026] [:error] [pid 33864:tid 33877] [client 193.37.32.33:38505] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/security.php"] [unique_id "afDMVzXchLGZ4QggCsk7CwAAAIs"]
[Tue Apr 28 23:03:51.883812 2026] [:error] [pid 33777:tid 33847] [client 193.37.32.37:56353] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/promobox/"] [unique_id "afDMV7XUCFWqmordGGIcrAAAAQw"]
[Tue Apr 28 23:03:52.083845 2026] [:error] [pid 33777:tid 33859] [client 193.37.32.47:43929] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/wp-signup.php"] [unique_id "afDMWLXUCFWqmordGGIcrQAAARg"]
[Tue Apr 28 23:03:52.284046 2026] [:error] [pid 33777:tid 33857] [client 193.37.32.35:62527] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/wp-config-backup.php"] [unique_id "afDMWLXUCFWqmordGGIcrwAAARY"]
[Tue Apr 28 23:03:52.482416 2026] [:error] [pid 33777:tid 33856] [client 193.37.32.27:50639] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/master-blog/content-none-new-compiler.php"] [unique_id "afDMWLXUCFWqmordGGIcsQAAARU"]
[Tue Apr 28 23:03:52.683143 2026] [:error] [pid 33776:tid 33825] [client 193.37.32.33:34711] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/villagio-child/admin.php"] [unique_id "afDMWF-bEJ2CKP3iKABMhwAAAFE"]
[Tue Apr 28 23:03:52.884193 2026] [:error] [pid 33776:tid 33815] [client 193.37.32.41:24797] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentynineteen/sass/site/primary/"] [unique_id "afDMWF-bEJ2CKP3iKABMiQAAAEc"]
[Tue Apr 28 23:03:53.084716 2026] [:error] [pid 2741:tid 2763] [client 193.37.32.49:63741] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-content/themes/admin.php"] [unique_id "afDMWfp92FeOz1h6ILweFQAAAVE"]
[Tue Apr 28 23:03:53.284615 2026] [:error] [pid 33777:tid 33849] [client 193.37.32.33:57761] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/consultstreet/config.php"] [unique_id "afDMWbXUCFWqmordGGIctQAAAQ4"]
[Tue Apr 28 23:03:58.486880 2026] [:error] [pid 50889:tid 50907] [client 193.37.32.32:39579] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/mesmerize/page-templates/"] [unique_id "afDMXozszBr00txEzGhowAAAAA8"]
[Tue Apr 28 23:03:58.687181 2026] [:error] [pid 33775:tid 33797] [client 193.37.32.53:64203] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "afDMXpsYOcoQrq88YbU_yQAAANI"]
[Tue Apr 28 23:03:59.066634 2026] [:error] [pid 33775:tid 33796] [client 193.37.32.129:25581] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/hello-elementor/template-parts/"] [unique_id "afDMX5sYOcoQrq88YbU_zQAAANE"]
[Tue Apr 28 23:03:59.279444 2026] [:error] [pid 33777:tid 33850] [client 193.37.32.33:44913] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/Divi/includes/builder/post/taxonomy/"] [unique_id "afDMX7XUCFWqmordGGIcwwAAAQ8"]
[Tue Apr 28 23:03:59.482439 2026] [:error] [pid 33775:tid 33779] [client 193.37.32.36:44679] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/system.php"] [unique_id "afDMX5sYOcoQrq88YbU_0QAAAMA"]
[Tue Apr 28 23:03:59.682050 2026] [:error] [pid 50889:tid 50900] [client 193.37.32.50:38957] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/module.php"] [unique_id "afDMX4zszBr00txEzGhowgAAAAg"]
[Tue Apr 28 23:03:59.883324 2026] [:error] [pid 33775:tid 33803] [client 193.37.32.36:24893] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/test.php"] [unique_id "afDMX5sYOcoQrq88YbU_0gAAANg"]
[Tue Apr 28 23:04:00.082465 2026] [:error] [pid 33776:tid 33808] [client 193.37.32.27:29931] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/blog-kit/inc/demo/demo-content/"] [unique_id "afDMYF-bEJ2CKP3iKABMlwAAAEA"]
[Tue Apr 28 23:04:00.281802 2026] [:error] [pid 33776:tid 33813] [client 193.37.32.43:32361] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/flatsome/inc/"] [unique_id "afDMYF-bEJ2CKP3iKABMmAAAAEU"]
[Tue Apr 28 23:04:00.479654 2026] [:error] [pid 33776:tid 33823] [client 193.37.32.25:42233] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/config.php"] [unique_id "afDMYF-bEJ2CKP3iKABMmQAAAE8"]
[Tue Apr 28 23:04:00.749897 2026] [:error] [pid 33775:tid 33794] [client 193.37.32.38:39849] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/config.php"] [unique_id "afDMYJsYOcoQrq88YbU_1QAAAM8"]
[Tue Apr 28 23:04:02.528456 2026] [:error] [pid 2741:tid 2751] [client 193.37.32.4:27995] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/providers/config.php"] [unique_id "afDMYvp92FeOz1h6ILweFgAAAUU"]
[Tue Apr 28 23:04:02.727655 2026] [:error] [pid 2741:tid 2766] [client 193.37.32.39:64611] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/config.php"] [unique_id "afDMYvp92FeOz1h6ILweGAAAAVQ"]
[Tue Apr 28 23:04:02.927937 2026] [:error] [pid 33864:tid 33889] [client 193.37.32.25:27327] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/bootstrap.php"] [unique_id "afDMYjXchLGZ4QggCsk7EQAAAJc"]
[Tue Apr 28 23:04:03.129354 2026] [:error] [pid 33776:tid 33823] [client 193.37.32.47:42685] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/plugins/panel.php"] [unique_id "afDMY1-bEJ2CKP3iKABMpAAAAE8"]
[Tue Apr 28 23:04:03.333647 2026] [:error] [pid 33775:tid 33787] [client 193.37.32.29:31135] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/"] [unique_id "afDMY5sYOcoQrq88YbU_4AAAAMg"]
[Tue Apr 28 23:04:03.532395 2026] [:error] [pid 33864:tid 33883] [client 193.37.32.45:56625] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/class-wp-image.php"] [unique_id "afDMYzXchLGZ4QggCsk7EwAAAJE"]
[Tue Apr 28 23:04:03.732062 2026] [:error] [pid 33775:tid 33788] [client 193.37.32.20:51565] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "afDMY5sYOcoQrq88YbU_4gAAAMk"]
[Tue Apr 28 23:04:03.930105 2026] [:error] [pid 33864:tid 33874] [client 193.37.32.24:48079] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/php-compat/shadow-bot.php"] [unique_id "afDMYzXchLGZ4QggCsk7FQAAAIg"]
[Tue Apr 28 23:04:04.131280 2026] [:error] [pid 33864:tid 33880] [client 193.37.32.25:32855] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/cgi-bin/config.php"] [unique_id "afDMZDXchLGZ4QggCsk7FgAAAI4"]
[Tue Apr 28 23:04:04.333271 2026] [:error] [pid 33864:tid 33872] [client 193.37.32.33:43635] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/config.php"] [unique_id "afDMZDXchLGZ4QggCsk7FwAAAIY"]
[Tue Apr 28 23:04:04.532113 2026] [:error] [pid 33776:tid 33832] [client 193.37.32.14:30107] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/src/config.php"] [unique_id "afDMZF-bEJ2CKP3iKABMpwAAAFg"]
[Tue Apr 28 23:04:04.730853 2026] [:error] [pid 33776:tid 33816] [client 193.37.32.28:55033] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/config.php"] [unique_id "afDMZF-bEJ2CKP3iKABMqAAAAEg"]
[Tue Apr 28 23:04:04.930070 2026] [:error] [pid 50889:tid 50897] [client 193.37.32.14:45513] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/style-engine/config.php"] [unique_id "afDMZIzszBr00txEzGhoxAAAAAU"]
[Tue Apr 28 23:04:05.130311 2026] [:error] [pid 33776:tid 33831] [client 193.37.32.22:48125] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/config.php"] [unique_id "afDMZV-bEJ2CKP3iKABMqQAAAFc"]
[Tue Apr 28 23:04:05.330147 2026] [:error] [pid 33864:tid 33885] [client 193.37.32.5:59961] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/interactivity-api/config.php"] [unique_id "afDMZTXchLGZ4QggCsk7GQAAAJM"]
[Tue Apr 28 23:04:10.530427 2026] [:error] [pid 33777:tid 33859] [client 193.37.32.36:37805] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/config.php"] [unique_id "afDMarXUCFWqmordGGIc8wAAARg"]
[Tue Apr 28 23:04:10.729585 2026] [:error] [pid 33777:tid 33846] [client 193.37.32.10:25123] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/plugins/config.php"] [unique_id "afDMarXUCFWqmordGGIc9wAAAQs"]
[Tue Apr 28 23:04:10.937306 2026] [:error] [pid 33777:tid 33850] [client 193.37.32.32:57391] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/config.php"] [unique_id "afDMarXUCFWqmordGGIc-wAAAQ8"]
[Tue Apr 28 23:04:11.140540 2026] [:error] [pid 33777:tid 33838] [client 193.37.32.12:27521] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/cache/config.php"] [unique_id "afDMa7XUCFWqmordGGIc_gAAAQM"]
[Tue Apr 28 23:04:11.339622 2026] [:error] [pid 33777:tid 33851] [client 193.37.32.32:40559] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-cloudflare-super-page-cache/config.php"] [unique_id "afDMa7XUCFWqmordGGIdAQAAARA"]
[Tue Apr 28 23:04:11.537383 2026] [:error] [pid 33776:tid 33830] [client 193.37.32.35:31991] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/library/"] [unique_id "afDMa1-bEJ2CKP3iKABMtgAAAFY"]
[Tue Apr 28 23:04:11.736102 2026] [:error] [pid 50889:tid 50893] [client 193.37.32.51:26897] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/abilities-api/"] [unique_id "afDMa4zszBr00txEzGho3AAAAAE"]
[Tue Apr 28 23:04:11.933621 2026] [:error] [pid 33776:tid 33815] [client 193.37.32.17:32389] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/loco/"] [unique_id "afDMa1-bEJ2CKP3iKABMuQAAAEc"]
[Tue Apr 28 23:04:17.136338 2026] [:error] [pid 33777:tid 33850] [client 193.37.32.25:20655] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/includes/class-theme-installer-skin-client.php"] [unique_id "afDMcbXUCFWqmordGGIdLQAAAQ8"]
[Tue Apr 28 23:04:17.334285 2026] [:error] [pid 2741:tid 2765] [client 193.37.32.52:57479] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-recovery-mode-link-service-edit.php"] [unique_id "afDMcfp92FeOz1h6ILweLgAAAVM"]
[Tue Apr 28 23:04:17.530753 2026] [:error] [pid 2741:tid 2760] [client 193.37.32.46:38979] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user-new-reference.php"] [unique_id "afDMcfp92FeOz1h6ILweMAAAAU4"]
[Tue Apr 28 23:04:17.728825 2026] [:error] [pid 2741:tid 2748] [client 193.37.32.41:64481] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/vendor/stripe/stripe-php/lib/FinancialConnections/"] [unique_id "afDMcfp92FeOz1h6ILweMQAAAUI"]
[Tue Apr 28 23:04:17.941326 2026] [:error] [pid 33864:tid 33879] [client 193.37.32.52:61661] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/vendor/stripe/stripe-php/lib/Service/FinancialConnections/"] [unique_id "afDMcTXchLGZ4QggCsk7JgAAAI0"]
[Tue Apr 28 23:04:18.138960 2026] [:error] [pid 2741:tid 2768] [client 193.37.32.14:49521] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-excerpt-meta.php"] [unique_id "afDMcvp92FeOz1h6ILweNAAAAVY"]
[Tue Apr 28 23:04:18.337460 2026] [:error] [pid 33864:tid 33878] [client 193.37.32.37:47795] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/module.audio-video.riff-http.php"] [unique_id "afDMcjXchLGZ4QggCsk7JwAAAIw"]
[Tue Apr 28 23:04:18.541570 2026] [:error] [pid 2741:tid 2746] [client 193.37.32.53:48777] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/admin.php"] [unique_id "afDMcvp92FeOz1h6ILweNQAAAUA"]
[Tue Apr 28 23:04:18.744334 2026] [:error] [pid 2741:tid 2758] [client 193.37.32.28:39367] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/admin.php"] [unique_id "afDMcvp92FeOz1h6ILweNwAAAUw"]
[Tue Apr 28 23:04:18.944534 2026] [:error] [pid 33864:tid 33867] [client 193.37.32.14:59779] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "afDMcjXchLGZ4QggCsk7KgAAAIE"]
[Tue Apr 28 23:04:19.142944 2026] [:error] [pid 33777:tid 33845] [client 193.37.32.14:31587] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/thickbox/logs1.php"] [unique_id "afDMc7XUCFWqmordGGIdRAAAAQo"]
[Tue Apr 28 23:04:19.343800 2026] [:error] [pid 33777:tid 33842] [client 193.37.32.40:56235] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/admin.php"] [unique_id "afDMc7XUCFWqmordGGIdRwAAAQc"]
[Tue Apr 28 23:04:19.542482 2026] [:error] [pid 2741:tid 2760] [client 193.37.32.45:52897] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/xy.php"] [unique_id "afDMc_p92FeOz1h6ILweOwAAAU4"]
[Tue Apr 28 23:04:19.743488 2026] [:error] [pid 33777:tid 33849] [client 193.37.32.31:52963] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/xy.php"] [unique_id "afDMc7XUCFWqmordGGIdSwAAAQ4"]
[Tue Apr 28 23:04:19.943180 2026] [:error] [pid 33777:tid 33840] [client 193.37.32.14:22455] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/footer-class.php"] [unique_id "afDMc7XUCFWqmordGGIdTQAAAQU"]
[Tue Apr 28 23:04:20.142671 2026] [:error] [pid 33777:tid 33841] [client 193.37.32.38:36859] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/good.php"] [unique_id "afDMdLXUCFWqmordGGIdUAAAAQY"]
[Tue Apr 28 23:04:20.347626 2026] [:error] [pid 2741:tid 2754] [client 193.37.32.38:59931] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/editor/"] [unique_id "afDMdPp92FeOz1h6ILwePAAAAUg"]
[Tue Apr 28 23:04:20.551626 2026] [:error] [pid 33777:tid 33845] [client 193.37.32.129:21465] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/profile/admin.php"] [unique_id "afDMdLXUCFWqmordGGIdUwAAAQo"]
[Tue Apr 28 23:04:20.755990 2026] [:error] [pid 2741:tid 2751] [client 193.37.32.53:26805] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/summia/"] [unique_id "afDMdPp92FeOz1h6ILwePQAAAUU"]
[Tue Apr 28 23:04:20.955143 2026] [:error] [pid 33777:tid 33843] [client 193.37.32.22:23183] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-content/languages/config.php"] [unique_id "afDMdLXUCFWqmordGGIdWAAAAQg"]
[Tue Apr 28 23:04:21.153920 2026] [:error] [pid 33777:tid 33838] [client 193.37.32.46:36127] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-content/admin.php"] [unique_id "afDMdbXUCFWqmordGGIdXQAAAQM"]
[Tue Apr 28 23:04:21.361325 2026] [:error] [pid 33864:tid 33881] [client 193.37.32.32:54237] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "afDMdTXchLGZ4QggCsk7LwAAAI8"]
[Tue Apr 28 23:04:21.562308 2026] [:error] [pid 33777:tid 33837] [client 193.37.32.16:44489] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/h2.php"] [unique_id "afDMdbXUCFWqmordGGIdaAAAAQI"]
[Tue Apr 28 23:04:21.762621 2026] [:error] [pid 33777:tid 33844] [client 193.37.32.29:53427] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/mu-plugins/chosen.php"] [unique_id "afDMdbXUCFWqmordGGIdawAAAQk"]
[Tue Apr 28 23:04:21.963225 2026] [:error] [pid 33864:tid 33871] [client 193.37.32.22:49065] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/upgrade-temp-backup/autoload_classmap.php"] [unique_id "afDMdTXchLGZ4QggCsk7MAAAAIU"]
[Tue Apr 28 23:04:22.161655 2026] [:error] [pid 33775:tid 33782] [client 193.37.32.4:22965] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/Base.php"] [unique_id "afDMdpsYOcoQrq88YbU_8gAAAMM"]
[Tue Apr 28 23:04:22.359581 2026] [:error] [pid 33776:tid 33821] [client 193.37.32.11:25943] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins.bk/contact-form-7/includes/js/jquery-ui/themes/admin.php"] [unique_id "afDMdl-bEJ2CKP3iKABMxQAAAE0"]
[Tue Apr 28 23:04:27.560523 2026] [:error] [pid 50889:tid 50916] [client 193.37.32.21:33365] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins.bk/wordpress-seo/admin/import/plugins/maintenance.php"] [unique_id "afDMe4zszBr00txEzGhpBAAAABg"]
[Tue Apr 28 23:04:27.758613 2026] [:error] [pid 50889:tid 50892] [client 193.37.32.129:62271] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/plugins/wp-mail.php"] [unique_id "afDMe4zszBr00txEzGhpBQAAAAA"]
[Tue Apr 28 23:04:27.956784 2026] [:error] [pid 33777:tid 33852] [client 193.37.32.37:20593] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/wp-conflg.php"] [unique_id "afDMe7XUCFWqmordGGIdowAAARE"]
[Tue Apr 28 23:04:28.154405 2026] [:error] [pid 33777:tid 33836] [client 193.37.32.42:61303] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-config.php"] [unique_id "afDMfLXUCFWqmordGGIdpQAAAQE"]
[Tue Apr 28 23:04:28.354714 2026] [:error] [pid 33777:tid 33859] [client 193.37.32.53:22843] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/lock.php"] [unique_id "afDMfLXUCFWqmordGGIdpwAAARg"]
[Tue Apr 28 23:04:28.554111 2026] [:error] [pid 50889:tid 50899] [client 193.37.32.18:46123] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/com.php"] [unique_id "afDMfIzszBr00txEzGhpCAAAAAc"]
[Tue Apr 28 23:04:28.755357 2026] [:error] [pid 33777:tid 33844] [client 193.37.32.22:33953] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/xxx.php"] [unique_id "afDMfLXUCFWqmordGGIdqgAAAQk"]
[Tue Apr 28 23:04:28.954218 2026] [:error] [pid 50889:tid 50895] [client 193.37.32.130:62369] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/network/uploads/system.php"] [unique_id "afDMfIzszBr00txEzGhpCQAAAAM"]
[Tue Apr 28 23:04:29.152421 2026] [:error] [pid 33777:tid 33839] [client 193.37.32.40:54153] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/plugins/colors/"] [unique_id "afDMfbXUCFWqmordGGIdrQAAAQQ"]
[Tue Apr 28 23:04:29.351984 2026] [:error] [pid 33777:tid 33857] [client 193.37.32.51:21707] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/backups-dup-pro/imports/network/"] [unique_id "afDMfbXUCFWqmordGGIdrwAAARY"]
[Tue Apr 28 23:04:29.551867 2026] [:error] [pid 33777:tid 33848] [client 193.37.32.25:36761] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/ai1wm-backups/includes/"] [unique_id "afDMfbXUCFWqmordGGIdsQAAAQ0"]
[Tue Apr 28 23:04:29.749263 2026] [:error] [pid 33777:tid 33856] [client 193.37.32.45:23425] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/gettest.php"] [unique_id "afDMfbXUCFWqmordGGIdswAAARU"]
[Tue Apr 28 23:04:29.957101 2026] [:error] [pid 33777:tid 33854] [client 193.37.32.21:34105] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/dx.php"] [unique_id "afDMfbXUCFWqmordGGIdtQAAARM"]
[Tue Apr 28 23:04:31.722796 2026] [:error] [pid 33775:tid 33795] [client 193.37.32.52:38507] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/panel.php"] [unique_id "afDMf5sYOcoQrq88YbU_-AAAANA"]
[Tue Apr 28 23:04:31.923338 2026] [:error] [pid 33777:tid 33841] [client 193.37.32.16:28133] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/wp-themes.php"] [unique_id "afDMf7XUCFWqmordGGIdyQAAAQY"]
[Tue Apr 28 23:04:32.124265 2026] [:error] [pid 33777:tid 33858] [client 193.37.32.38:42357] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/widgets/maint/"] [unique_id "afDMgLXUCFWqmordGGIdywAAARc"]
[Tue Apr 28 23:04:32.329486 2026] [:error] [pid 2741:tid 2759] [client 193.37.32.25:59215] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Exception/Transport/"] [unique_id "afDMgPp92FeOz1h6ILweVwAAAU0"]
[Tue Apr 28 23:04:32.527912 2026] [:error] [pid 2741:tid 2755] [client 193.37.32.35:32011] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Response/"] [unique_id "afDMgPp92FeOz1h6ILweWQAAAUk"]
[Tue Apr 28 23:04:32.729130 2026] [:error] [pid 33775:tid 33789] [client 193.37.32.26:53779] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-supports/wp-sing.php"] [unique_id "afDMgJsYOcoQrq88YbU__AAAAMo"]
[Tue Apr 28 23:04:32.930621 2026] [:error] [pid 33776:tid 33821] [client 193.37.32.16:42767] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/button/"] [unique_id "afDMgF-bEJ2CKP3iKABM1gAAAE0"]
[Tue Apr 28 23:04:33.131156 2026] [:error] [pid 33775:tid 33790] [client 193.37.32.17:39075] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/media-text/"] [unique_id "afDMgZsYOcoQrq88YbU__QAAAMs"]
[Tue Apr 28 23:04:33.335985 2026] [:error] [pid 33777:tid 33849] [client 193.37.32.20:25827] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/missing/"] [unique_id "afDMgbXUCFWqmordGGId0wAAAQ4"]
[Tue Apr 28 23:04:38.540996 2026] [:error] [pid 33775:tid 33800] [client 193.37.32.27:53301] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/img/content/media/lnl/"] [unique_id "afDMhpsYOcoQrq88YbVADwAAANU"]
[Tue Apr 28 23:04:38.954162 2026] [:error] [pid 33775:tid 33797] [client 193.37.32.36:41335] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/gallery/"] [unique_id "afDMhpsYOcoQrq88YbVAEQAAANI"]
[Tue Apr 28 23:04:39.153720 2026] [:error] [pid 33864:tid 33880] [client 193.37.32.39:51979] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/l10n/includes/content/v2/uploads/docs/yat/admin.php"] [unique_id "afDMhzXchLGZ4QggCsk7PAAAAI4"]
[Tue Apr 28 23:04:39.352500 2026] [:error] [pid 33864:tid 33885] [client 193.37.32.34:27141] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/cache/adminkontol.php"] [unique_id "afDMhzXchLGZ4QggCsk7PgAAAJM"]
[Tue Apr 28 23:04:39.549857 2026] [:error] [pid 50889:tid 50911] [client 193.37.32.52:50485] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/vx.php"] [unique_id "afDMh4zszBr00txEzGhpDwAAABM"]
[Tue Apr 28 23:04:39.750282 2026] [:error] [pid 50889:tid 50908] [client 193.37.32.22:59205] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/database/"] [unique_id "afDMh4zszBr00txEzGhpEQAAABA"]
[Tue Apr 28 23:04:39.948999 2026] [:error] [pid 50889:tid 50900] [client 193.37.32.50:43053] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/uploads/system.php"] [unique_id "afDMh4zszBr00txEzGhpEwAAAAg"]
[Tue Apr 28 23:04:40.157638 2026] [:error] [pid 33864:tid 33879] [client 193.37.32.51:56745] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/block/img/themes/"] [unique_id "afDMiDXchLGZ4QggCsk7PwAAAI0"]
[Tue Apr 28 23:04:40.480338 2026] [:error] [pid 2741:tid 2754] [client 193.37.32.26:34243] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/preformatted/"] [unique_id "afDMiPp92FeOz1h6ILweYwAAAUg"]
[Tue Apr 28 23:04:50.681929 2026] [:error] [pid 33777:tid 33846] [client 193.37.32.12:34061] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/themes/"] [unique_id "afDMkrXUCFWqmordGGIeigAAAQs"]
[Tue Apr 28 23:04:50.884886 2026] [:error] [pid 50889:tid 50913] [client 193.37.32.53:60287] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/system_core.php"] [unique_id "afDMkozszBr00txEzGhpJAAAABU"]
[Tue Apr 28 23:04:52.092680 2026] [:error] [pid 33775:tid 33795] [client 193.37.32.130:47775] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/maintenance.php"] [unique_id "afDMlJsYOcoQrq88YbVAFwAAANA"]
[Tue Apr 28 23:04:52.293650 2026] [:error] [pid 33776:tid 33813] [client 193.37.32.33:39165] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/edit-tags.php"] [unique_id "afDMlF-bEJ2CKP3iKABM6QAAAEU"]
[Tue Apr 28 23:04:52.496396 2026] [:error] [pid 33777:tid 33859] [client 193.37.32.129:57483] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/w.php"] [unique_id "afDMlLXUCFWqmordGGIekQAAARg"]
[Tue Apr 28 23:04:52.696303 2026] [:error] [pid 33775:tid 33799] [client 193.37.32.26:21665] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-http-client.php"] [unique_id "afDMlJsYOcoQrq88YbVAGwAAANQ"]
[Tue Apr 28 23:04:59.153093 2026] [:error] [pid 33776:tid 33828] [client 193.37.32.32:22041] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/tag-cloud/"] [unique_id "afDMm1-bEJ2CKP3iKABM7QAAAFQ"]
[Tue Apr 28 23:04:59.353938 2026] [:error] [pid 33775:tid 33782] [client 193.37.32.48:56391] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/nic.php"] [unique_id "afDMm5sYOcoQrq88YbVAHQAAAMM"]
[Tue Apr 28 23:04:59.554488 2026] [:error] [pid 2741:tid 2770] [client 193.37.32.42:39039] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/wp-conflg.php"] [unique_id "afDMm_p92FeOz1h6ILwedQAAAVg"]
[Tue Apr 28 23:04:59.754770 2026] [:error] [pid 33775:tid 33797] [client 193.37.32.34:41419] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "afDMm5sYOcoQrq88YbVAHgAAANI"]
[Tue Apr 28 23:05:01.006452 2026] [:error] [pid 33776:tid 33819] [client 193.37.32.32:46545] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "afDMnV-bEJ2CKP3iKABM7wAAAEs"]
[Tue Apr 28 23:05:01.210387 2026] [:error] [pid 33775:tid 33802] [client 193.37.32.16:62205] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/autoload_classmap.php"] [unique_id "afDMnZsYOcoQrq88YbVAJAAAANc"]
[Tue Apr 28 23:05:06.427284 2026] [:error] [pid 33775:tid 33794] [client 193.37.32.16:48637] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/themes/api.php"] [unique_id "afDMopsYOcoQrq88YbVANQAAAM8"]
[Tue Apr 28 23:05:06.633745 2026] [:error] [pid 2741:tid 2755] [client 193.37.32.39:60149] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/plugins/core.php"] [unique_id "afDMovp92FeOz1h6ILwefAAAAUk"]
[Tue Apr 28 23:05:06.847307 2026] [:error] [pid 50889:tid 50897] [client 193.37.32.25:37853] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/components/wp-cron-activation.php"] [unique_id "afDMoozszBr00txEzGhpOQAAAAU"]
[Tue Apr 28 23:05:07.071113 2026] [:error] [pid 33777:tid 33859] [client 193.37.32.50:50313] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/block-library/includes/"] [unique_id "afDMo7XUCFWqmordGGIenQAAARg"]
[Tue Apr 28 23:05:07.292945 2026] [:error] [pid 33864:tid 33880] [client 193.37.32.43:50461] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/base-styles/user/"] [unique_id "afDMozXchLGZ4QggCsk7WQAAAI4"]
[Tue Apr 28 23:05:07.517377 2026] [:error] [pid 33864:tid 33871] [client 193.37.32.9:64479] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/abilities-api/Parse/"] [unique_id "afDMozXchLGZ4QggCsk7WgAAAIU"]
[Tue Apr 28 23:05:07.771119 2026] [:error] [pid 33775:tid 33800] [client 193.37.32.37:21125] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/providers/html-api/"] [unique_id "afDMo5sYOcoQrq88YbVANgAAANU"]
[Wed Apr 29 02:35:56.072162 2026] [proxy_fcgi:error] [pid 33864:tid 33873] [client 195.178.110.186:42154] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 29 03:29:48.921942 2026] [:error] [pid 50889:tid 50894] [client 34.106.122.210:58616] [client 34.106.122.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "afEKrIzszBr00txEzGiSEgAAAAI"]
[Wed Apr 29 08:29:20.774140 2026] [proxy_fcgi:error] [pid 40313:tid 40328] [client 65.111.6.182:35689] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 29 08:29:32.090076 2026] [:error] [pid 40343:tid 40362] [client 104.207.44.160:38019] [client 104.207.44.160] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/s3cmd.ini"] [unique_id "afFQ7GiaWCZjSxz2ZNuP3AAAAY4"]
[Wed Apr 29 08:29:45.576651 2026] [proxy_fcgi:error] [pid 56757:tid 56831] [client 216.26.229.157:46627] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 29 10:34:50.145451 2026] [proxy_fcgi:error] [pid 61541:tid 61617] [client 209.50.180.241:16099] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 29 10:35:02.141228 2026] [:error] [pid 61541:tid 61600] [client 65.111.12.83:41005] [client 65.111.12.83] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/s3cmd.ini"] [unique_id "afFuVloqNK1GZvjPpy5W0gAAAgA"]
[Wed Apr 29 10:35:17.169849 2026] [proxy_fcgi:error] [pid 61628:tid 61650] [client 45.3.40.88:20459] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 29 15:33:31.682983 2026] [proxy_fcgi:error] [pid 61540:tid 61591] [client 35.219.253.206:51240] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 29 15:33:32.022066 2026] [proxy_fcgi:error] [pid 61540:tid 61586] [client 35.219.253.206:38482] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 29 15:34:46.770690 2026] [:error] [pid 45289:tid 45304] [client 45.119.85.39:60344] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG0ll_vGmZY7dOOIwrLmAAAA4w"], referer: https://www.google.com
[Wed Apr 29 15:34:46.770772 2026] [:error] [pid 45289:tid 45304] [client 45.119.85.39:60344] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 116"] [hostname "southerncrosscentre.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG0ll_vGmZY7dOOIwrLmAAAA4w"], referer: https://www.google.com
[Wed Apr 29 20:18:14.955267 2026] [proxy_fcgi:error] [pid 21227:tid 21253] [client 74.7.175.165:35238] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 29 23:20:43.583054 2026] [:error] [pid 21138:tid 21205] [client 34.11.35.77:49624] [client 34.11.35.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "afIhy5uzwUiyMeUnp30KjAAAAQg"]
[Wed Apr 29 23:21:10.583094 2026] [proxy_fcgi:error] [pid 21136:tid 21159] [client 74.7.228.11:49672] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 29 23:24:28.566410 2026] [proxy_fcgi:error] [pid 21536:tid 21561] [client 74.7.228.11:40836] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed Apr 29 23:24:28.749711 2026] [proxy_fcgi:error] [pid 21138:tid 21208] [client 74.7.227.8:45500] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 30 00:10:33.416977 2026] [proxy_fcgi:error] [pid 21138:tid 21215] [client 5.175.178.15:55040] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 30 05:38:11.005632 2026] [proxy_fcgi:error] [pid 52350:tid 52359] [client 138.246.253.24:44838] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 30 07:58:49.171346 2026] [proxy_fcgi:error] [pid 52350:tid 52369] [client 34.91.36.231:49152] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 30 10:50:34.750779 2026] [proxy_fcgi:error] [pid 53641:tid 53670] [client 23.106.28.43:12307] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 30 13:17:21.781294 2026] [proxy_fcgi:error] [pid 52350:tid 52361] [client 5.133.192.146:43949] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 30 18:59:37.072552 2026] [proxy_fcgi:error] [pid 6456:tid 6467] [client 93.158.90.71:44037] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu Apr 30 20:02:49.985732 2026] [proxy_fcgi:error] [pid 5820:tid 5836] [client 138.246.253.24:50466] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 01 00:59:09.733595 2026] [:error] [pid 5820:tid 5837] [client 104.28.246.115:17171] [client 104.28.246.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/style.php"] [unique_id "afOKXQyrLh3-LgH3Xv99HgAAAA8"]
[Fri May 01 00:59:17.281597 2026] [:error] [pid 5731:tid 5742] [client 104.28.246.115:25532] [client 104.28.246.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/style.php"] [unique_id "afOKZQ8tX7TbSfYoUIxbQAAAAIc"]
[Fri May 01 00:59:17.786503 2026] [:error] [pid 5733:tid 5810] [client 104.28.246.115:25540] [client 104.28.246.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/style.php"] [unique_id "afOKZfT55_Ioa9J2OpIRnwAAARQ"]
[Fri May 01 01:42:47.858724 2026] [proxy_fcgi:error] [pid 47620:tid 47636] [client 74.7.241.15:33810] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 01 01:42:49.016438 2026] [proxy_fcgi:error] [pid 5820:tid 5844] [client 74.7.175.165:51784] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 01 01:47:21.783034 2026] [proxy_fcgi:error] [pid 5732:tid 5785] [client 74.7.228.11:52646] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 01 04:56:40.687400 2026] [:error] [pid 5976:tid 5988] [client 92.53.64.155:58584] [client 92.53.64.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "afPCCLbCb0ye2WjKlddy4gAAAQg"]
[Fri May 01 04:56:42.305098 2026] [proxy_fcgi:error] [pid 38016:tid 38092] [client 92.53.64.155:58585] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 01 06:48:13.713886 2026] [proxy_fcgi:error] [pid 6045:tid 6068] [client 88.151.33.122:38406] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 01 08:48:40.287643 2026] [proxy_fcgi:error] [pid 6045:tid 6064] [client 192.36.109.128:51025] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 01 10:31:50.941154 2026] [proxy_fcgi:error] [pid 23768:tid 23775] [client 5.133.192.193:52267] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 01 11:46:39.310049 2026] [:error] [pid 24997:tid 25070] [client 43.165.67.100:57449] [client 43.165.67.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.165.67.100, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "afQiH_OkHa4ScY5oo8wyMwAAAM4"]
[Fri May 01 11:46:40.120968 2026] [proxy_fcgi:error] [pid 24997:tid 25070] [client 43.165.67.100:57449] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 01 11:46:40.947106 2026] [:error] [pid 25085:tid 25106] [client 43.165.67.100:57454] [client 43.165.67.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.165.67.100, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "afQiIPuD8fWRiE0RX0GH9gAAAU8"]
[Fri May 01 11:46:41.349845 2026] [proxy_fcgi:error] [pid 25085:tid 25106] [client 43.165.67.100:57454] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 01 11:46:42.171573 2026] [:error] [pid 24996:tid 25029] [client 43.165.67.100:57462] [client 43.165.67.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.165.67.100, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "afQiIiDBq9mMfUWQQeryfAAAAIE"]
[Fri May 01 11:46:42.563358 2026] [proxy_fcgi:error] [pid 24996:tid 25029] [client 43.165.67.100:57462] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 01 11:46:43.384656 2026] [:error] [pid 25085:tid 25115] [client 43.165.67.100:57466] [client 43.165.67.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.165.67.100, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "afQiI_uD8fWRiE0RX0GH9wAAAVg"]
[Fri May 01 11:46:43.386903 2026] [:error] [pid 25085:tid 25115] [client 43.165.67.100:57466] [client 43.165.67.100] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||southerncrosscentre.au|F|4"] [data "XML=\\x0awp.getUsersBlogs\\x0a\\x0a\\x0aadmin\\x0a\\x0a\\x0aY$1#fsDv%X\\x0a\\x0a\\x0a"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "afQiI_uD8fWRiE0RX0GH9wAAAVg"]
[Fri May 01 11:46:43.594116 2026] [:error] [pid 25085:tid 25101] [client 43.165.67.100:57466] [client 43.165.67.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.165.67.100, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "afQiI_uD8fWRiE0RX0GH-AAAAUo"]
[Fri May 01 11:46:43.943726 2026] [proxy_fcgi:error] [pid 25085:tid 25101] [client 43.165.67.100:57466] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 01 11:46:44.764673 2026] [:error] [pid 24997:tid 25054] [client 43.165.67.100:57468] [client 43.165.67.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.165.67.100, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "afQiJPOkHa4ScY5oo8wyOwAAAMM"]
[Fri May 01 11:46:44.764841 2026] [:error] [pid 24997:tid 25054] [client 43.165.67.100:57468] [client 43.165.67.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 43.165.67.100, counter = 6"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "afQiJPOkHa4ScY5oo8wyOwAAAMM"]
[Fri May 01 11:46:45.584212 2026] [:error] [pid 24995:tid 25004] [client 43.165.67.100:57470] [client 43.165.67.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.165.67.100, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "afQiJedJG9WB_Q_ne0teZwAAAEU"]
[Fri May 01 11:46:45.584463 2026] [:error] [pid 24995:tid 25004] [client 43.165.67.100:57470] [client 43.165.67.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 43.165.67.100, counter = 6"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "afQiJedJG9WB_Q_ne0teZwAAAEU"]
[Fri May 01 11:46:46.406704 2026] [:error] [pid 24996:tid 25036] [client 43.165.67.100:57473] [client 43.165.67.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.165.67.100, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "afQiJiDBq9mMfUWQQerygAAAAIg"]
[Fri May 01 11:46:46.406834 2026] [:error] [pid 24996:tid 25036] [client 43.165.67.100:57473] [client 43.165.67.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 43.165.67.100, counter = 6"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "afQiJiDBq9mMfUWQQerygAAAAIg"]
[Fri May 01 11:46:47.224532 2026] [:error] [pid 25085:tid 25096] [client 43.165.67.100:57478] [client 43.165.67.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.165.67.100, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "afQiJ_uD8fWRiE0RX0GH_AAAAUU"]
[Fri May 01 11:46:47.224702 2026] [:error] [pid 25085:tid 25096] [client 43.165.67.100:57478] [client 43.165.67.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 43.165.67.100, counter = 6"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "afQiJ_uD8fWRiE0RX0GH_AAAAUU"]
[Fri May 01 15:27:13.476650 2026] [proxy_fcgi:error] [pid 33791:tid 33806] [client 146.190.235.58:53452] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 01 15:27:14.299419 2026] [proxy_fcgi:error] [pid 33791:tid 33816] [client 146.190.235.58:53468] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: http://southerncrosscentre.au/
[Fri May 01 15:27:15.648984 2026] [proxy_fcgi:error] [pid 25085:tid 25091] [client 146.190.235.58:46878] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 01 15:27:22.261523 2026] [proxy_fcgi:error] [pid 33791:tid 33803] [client 146.190.235.58:34206] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/
[Fri May 01 17:06:56.718433 2026] [proxy_fcgi:error] [pid 33791:tid 33802] [client 23.80.164.114:5187] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 01 18:49:21.674015 2026] [proxy_fcgi:error] [pid 24997:tid 25064] [client 205.210.31.216:62174] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 01 20:16:03.204512 2026] [proxy_fcgi:error] [pid 24997:tid 25058] [client 74.7.175.165:57442] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 01 23:30:36.932983 2026] [proxy_fcgi:error] [pid 33791:tid 33794] [client 74.7.227.8:57232] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 01 23:30:37.238819 2026] [proxy_fcgi:error] [pid 33791:tid 33799] [client 74.7.228.11:41374] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 00:45:34.380096 2026] [proxy_fcgi:error] [pid 25320:tid 25333] [client 194.116.236.215:46872] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 00:45:38.269125 2026] [proxy_fcgi:error] [pid 33791:tid 33797] [client 194.116.236.215:38092] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 02:35:03.090644 2026] [:error] [pid 33791:tid 33804] [client 45.45.237.225:59326] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/HEAD"] [unique_id "afTyV29ixd-moLycM9CMngAAAAo"]
[Sat May 02 02:35:03.105248 2026] [:error] [pid 25320:tid 25338] [client 45.45.237.225:59342] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "afTyV1c3wJ-3-XaXB3pi4QAAAQ8"]
[Sat May 02 02:35:03.465224 2026] [proxy_fcgi:error] [pid 33791:tid 33809] [client 45.45.237.225:59318] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 05:19:14.781141 2026] [proxy_fcgi:error] [pid 53436:tid 53520] [client 64.89.163.113:63924] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 12:35:12.730578 2026] [:error] [pid 11894:tid 11909] [client 192.96.159.129:59800] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "afV_ADHh6DQF1tkXIKyihgAAAUw"]
[Sat May 02 12:35:14.836306 2026] [proxy_fcgi:error] [pid 52124:tid 52148] [client 192.96.159.129:59801] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 13:41:43.544089 2026] [proxy_fcgi:error] [pid 52010:tid 52045] [client 199.244.88.222:23471] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 15:09:11.440607 2026] [proxy_fcgi:error] [pid 53435:tid 53478] [client 136.117.130.96:61334] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 17:09:43.100893 2026] [proxy_fcgi:error] [pid 11894:tid 11912] [client 146.190.66.231:44002] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 17:09:43.817691 2026] [proxy_fcgi:error] [pid 52010:tid 52049] [client 146.190.66.231:44004] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: http://www.southerncrosscentre.au/
[Sat May 02 17:09:44.936426 2026] [proxy_fcgi:error] [pid 52010:tid 52052] [client 146.190.66.231:36214] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 17:09:50.288000 2026] [proxy_fcgi:error] [pid 52010:tid 52046] [client 146.190.66.231:43820] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://www.southerncrosscentre.au/
[Sat May 02 17:18:53.526552 2026] [proxy_fcgi:error] [pid 52010:tid 52065] [client 54.175.209.11:40136] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 17:18:53.872798 2026] [proxy_fcgi:error] [pid 52010:tid 52052] [client 54.175.209.11:60446] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 17:34:02.534957 2026] [proxy_fcgi:error] [pid 53435:tid 53472] [client 198.235.24.129:58734] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 18:07:49.786523 2026] [proxy_fcgi:error] [pid 53434:tid 53447] [client 74.7.228.11:36822] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 18:46:15.344967 2026] [proxy_fcgi:error] [pid 51917:tid 51929] [client 198.235.24.185:60742] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 20:34:22.455823 2026] [proxy_fcgi:error] [pid 52012:tid 52099] [client 74.7.175.165:55182] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 21:26:27.139985 2026] [proxy_fcgi:error] [pid 22846:tid 22870] [client 5.189.187.165:58684] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 21:26:28.253857 2026] [proxy_fcgi:error] [pid 52012:tid 52088] [client 5.189.187.165:58704] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 21:26:29.289151 2026] [proxy_fcgi:error] [pid 52012:tid 52075] [client 5.189.187.165:58720] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 21:26:30.454105 2026] [proxy_fcgi:error] [pid 53434:tid 53447] [client 5.189.187.165:58732] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 21:26:31.275212 2026] [:error] [pid 51950:tid 51992] [client 5.189.187.165:58748] [client 5.189.187.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "afX7h4oBJzYZ3RKUhdhdrAAAAkw"]
[Sat May 02 21:26:32.701166 2026] [proxy_fcgi:error] [pid 22846:tid 22858] [client 5.189.187.165:58766] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 21:26:34.326764 2026] [proxy_fcgi:error] [pid 53434:tid 53466] [client 5.189.187.165:58780] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 21:26:35.422848 2026] [proxy_fcgi:error] [pid 53434:tid 53454] [client 5.189.187.165:55242] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 21:26:36.966810 2026] [proxy_fcgi:error] [pid 52012:tid 52082] [client 5.189.187.165:55264] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 21:26:41.326433 2026] [proxy_fcgi:error] [pid 53435:tid 53488] [client 5.189.187.165:55280] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 02 22:58:03.885428 2026] [:error] [pid 51950:tid 51984] [client 185.233.100.23:58118] [client 185.233.100.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "afYQ-4oBJzYZ3RKUhdht2AAAAkQ"]
[Sat May 02 22:58:04.392953 2026] [:error] [pid 53436:tid 53502] [client 185.233.100.23:58134] [client 185.233.100.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "afYQ_K9N0xp8fccVM0DeMQAAAIM"]
[Sat May 02 22:58:05.247135 2026] [:error] [pid 11894:tid 11917] [client 185.220.101.26:63352] [client 185.220.101.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "afYQ_THh6DQF1tkXIKzntAAAAVQ"]
[Sat May 02 22:58:06.684593 2026] [:error] [pid 53435:tid 53475] [client 192.159.99.168:10336] [client 192.159.99.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/.DS_Store"] [unique_id "afYQ_oDmp7_z8QkjSzPjEwAAAEM"]
[Sat May 02 22:58:07.314843 2026] [:error] [pid 11894:tid 11912] [client 192.42.116.106:46402] [client 192.42.116.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "afYQ_zHh6DQF1tkXIKznugAAAU8"]
[Sat May 02 22:58:14.201649 2026] [:error] [pid 51950:tid 51980] [client 192.42.116.14:24624] [client 192.42.116.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/.DS_Store"] [unique_id "afYRBooBJzYZ3RKUhdht6QAAAkA"]
[Sat May 02 22:58:18.912389 2026] [:error] [pid 51917:tid 51919] [client 171.25.193.37:43190] [client 171.25.193.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/.DS_Store"] [unique_id "afYRCq7wZviJ7BgcCi9c9wAAAcA"]
[Sat May 02 22:58:29.766995 2026] [:error] [pid 51917:tid 51932] [client 192.159.99.74:10318] [client 192.159.99.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/.DS_Store"] [unique_id "afYRFa7wZviJ7BgcCi9c_wAAAc0"]
[Sat May 02 23:40:13.882587 2026] [:error] [pid 52010:tid 52048] [client 49.213.3.151:36250] [client 49.213.3.151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users"] [unique_id "afYa3QiR6wohDtdeJMBJjgAAAsU"]
[Sun May 03 02:30:06.312310 2026] [proxy_fcgi:error] [pid 52012:tid 52084] [client 146.190.125.158:57494] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 03 02:30:06.962907 2026] [proxy_fcgi:error] [pid 52012:tid 52079] [client 146.190.125.158:57504] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: http://www.southerncrosscentre.au/
[Sun May 03 02:30:07.928772 2026] [proxy_fcgi:error] [pid 52012:tid 52102] [client 146.190.125.158:55586] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 03 02:30:12.254562 2026] [proxy_fcgi:error] [pid 52124:tid 52139] [client 146.190.125.158:55670] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://www.southerncrosscentre.au/
[Sun May 03 04:29:21.433772 2026] [proxy_fcgi:error] [pid 40732:tid 40765] [client 49.0.237.195:58857] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 03 04:29:23.299601 2026] [proxy_fcgi:error] [pid 40732:tid 40761] [client 49.0.237.214:53826] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 03 20:08:10.708160 2026] [proxy_fcgi:error] [pid 54535:tid 54558] [client 74.7.241.15:53572] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 03 20:08:11.733278 2026] [proxy_fcgi:error] [pid 40456:tid 40470] [client 74.7.175.165:43702] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 03 20:17:59.835521 2026] [proxy_fcgi:error] [pid 54535:tid 54540] [client 74.7.228.11:40514] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 03 21:00:52.187179 2026] [proxy_fcgi:error] [pid 37130:tid 37222] [client 192.175.111.228:5768] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 03 21:00:53.616662 2026] [proxy_fcgi:error] [pid 34432:tid 34444] [client 192.175.111.251:59884] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 03 21:00:56.357526 2026] [proxy_fcgi:error] [pid 37126:tid 37151] [client 192.175.111.245:56788] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 03 21:00:57.336984 2026] [proxy_fcgi:error] [pid 37127:tid 37203] [client 192.175.111.236:39502] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 03 21:01:01.342821 2026] [proxy_fcgi:error] [pid 34432:tid 34449] [client 192.175.111.252:32113] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 03 21:01:02.705083 2026] [proxy_fcgi:error] [pid 37127:tid 37199] [client 192.175.111.236:47911] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 03 21:01:05.462444 2026] [proxy_fcgi:error] [pid 34432:tid 34458] [client 192.175.111.249:27479] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 03 21:01:06.406732 2026] [proxy_fcgi:error] [pid 34432:tid 34437] [client 192.175.111.245:42429] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 03 23:25:05.914964 2026] [proxy_fcgi:error] [pid 40456:tid 40482] [client 108.130.166.251:38342] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 03 23:25:06.700763 2026] [proxy_fcgi:error] [pid 37126:tid 37165] [client 108.130.166.251:38352] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 03 23:25:10.486766 2026] [proxy_fcgi:error] [pid 37130:tid 37233] [client 223.181.61.4:31389] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 05:39:32.761269 2026] [proxy_fcgi:error] [pid 57154:tid 57169] [client 91.217.249.195:27539] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 08:19:42.617165 2026] [proxy_fcgi:error] [pid 11959:tid 12011] [client 37.72.140.10:1143] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 08:19:43.701012 2026] [proxy_fcgi:error] [pid 11959:tid 11996] [client 37.72.140.10:1143] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 14:12:04.964868 2026] [proxy_fcgi:error] [pid 11959:tid 12000] [client 35.208.177.175:34196] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 15:10:57.460442 2026] [proxy_fcgi:error] [pid 61150:tid 61168] [client 35.208.75.102:45750] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 15:45:06.579056 2026] [:error] [pid 3341:tid 3349] [client 136.107.232.91:64745] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "afhOgk9o3_LordU0wW7qawAAAIU"]
[Mon May 04 15:45:07.029805 2026] [:error] [pid 3341:tid 3345] [client 136.107.232.91:50034] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "afhOg09o3_LordU0wW7qdAAAAIE"]
[Mon May 04 15:45:07.450985 2026] [:error] [pid 61042:tid 61058] [client 136.107.232.91:51510] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afhOg0nAPPS1fjubA9Qq-AAAAMw"]
[Mon May 04 16:05:57.897310 2026] [proxy_fcgi:error] [pid 61044:tid 61125] [client 106.219.120.150:26869] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 17:58:07.853671 2026] [proxy_fcgi:error] [pid 3341:tid 3357] [client 93.158.90.65:57203] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 18:00:37.516742 2026] [:error] [pid 32471:tid 32487] [client 185.198.240.254:20965] [client 185.198.240.254] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.southerncrosscentre.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afhuRXmjpb9EYq6AqhIqzAAAAQ0"]
[Mon May 04 19:13:38.683512 2026] [autoindex:error] [pid 61043:tid 61088] [client 216.73.161.147:21205] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon May 04 19:27:28.436750 2026] [proxy_fcgi:error] [pid 3341:tid 3346] [client 3.137.206.197:52400] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 20:24:09.237378 2026] [proxy_fcgi:error] [pid 61043:tid 61090] [client 34.24.211.32:55419] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 21:30:24.262784 2026] [autoindex:error] [pid 32471:tid 32490] [client 173.239.224.140:52113] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon May 04 21:30:25.402721 2026] [autoindex:error] [pid 61150:tid 61160] [client 173.239.224.126:43897] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon May 04 21:30:26.850891 2026] [autoindex:error] [pid 61044:tid 61119] [client 173.239.224.119:30573] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon May 04 21:30:28.053512 2026] [proxy_fcgi:error] [pid 61042:tid 61055] [client 173.239.224.125:24935] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 21:30:29.251940 2026] [proxy_fcgi:error] [pid 61044:tid 61113] [client 173.239.224.122:38381] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://www.google.com/
[Mon May 04 21:30:30.675463 2026] [proxy_fcgi:error] [pid 61043:tid 61098] [client 173.239.224.131:46267] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 21:30:32.200252 2026] [proxy_fcgi:error] [pid 61150:tid 61175] [client 173.239.224.141:50277] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 21:30:33.767474 2026] [proxy_fcgi:error] [pid 32471:tid 32488] [client 173.239.224.139:40121] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 21:30:35.287801 2026] [proxy_fcgi:error] [pid 61042:tid 61047] [client 173.239.224.144:27941] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 21:30:37.915233 2026] [proxy_fcgi:error] [pid 61042:tid 61058] [client 173.239.224.137:42687] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 21:30:40.465728 2026] [proxy_fcgi:error] [pid 61043:tid 61084] [client 173.239.224.139:32319] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 21:30:42.139115 2026] [proxy_fcgi:error] [pid 32471:tid 32495] [client 173.239.224.138:41107] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://www.google.com/
[Mon May 04 21:30:44.004834 2026] [proxy_fcgi:error] [pid 61044:tid 61123] [client 173.239.224.146:57177] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 21:30:45.392833 2026] [autoindex:error] [pid 3341:tid 3368] [client 173.239.224.141:55837] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2020/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon May 04 21:30:46.702328 2026] [autoindex:error] [pid 61044:tid 61109] [client 173.239.224.139:36869] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon May 04 21:30:48.094678 2026] [autoindex:error] [pid 3341:tid 3365] [client 173.239.224.127:39299] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon May 04 21:30:49.403948 2026] [autoindex:error] [pid 61042:tid 61058] [client 173.239.224.135:20447] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon May 04 21:30:50.788966 2026] [autoindex:error] [pid 61043:tid 61089] [client 173.239.224.131:35781] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon May 04 21:30:52.206948 2026] [autoindex:error] [pid 61150:tid 61166] [client 173.239.224.120:46711] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon May 04 21:30:53.513346 2026] [autoindex:error] [pid 61150:tid 61157] [client 173.239.224.141:29343] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2026/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon May 04 21:56:02.275251 2026] [proxy_fcgi:error] [pid 32471:tid 32491] [client 84.233.216.142:65353] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 23:04:35.368957 2026] [proxy_fcgi:error] [pid 61042:tid 61055] [client 74.7.175.165:46338] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 23:16:11.651366 2026] [proxy_fcgi:error] [pid 61150:tid 61164] [client 74.7.228.11:50116] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 23:16:52.848569 2026] [proxy_fcgi:error] [pid 61043:tid 61087] [client 74.7.227.8:36548] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 04 23:41:25.295854 2026] [proxy_fcgi:error] [pid 61042:tid 61059] [client 185.12.249.39:43355] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 05 01:00:22.381342 2026] [:error] [pid 61043:tid 61081] [client 185.198.240.93:20033] [client 185.198.240.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afjQpp8-LwtfURjiAbD4TQAAAEY"]
[Tue May 05 02:00:15.203463 2026] [:error] [pid 61150:tid 61158] [client 89.163.146.197:51524] [client 89.163.146.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/txets.php"] [unique_id "afjer-8QXWVLiwIGVpe-2QAAAUU"], referer: www.google.com
[Tue May 05 02:36:12.925134 2026] [proxy_fcgi:error] [pid 61150:tid 61173] [client 164.92.211.188:56070] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 05 02:36:13.741538 2026] [proxy_fcgi:error] [pid 61043:tid 61097] [client 164.92.211.188:56080] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: http://www.southerncrosscentre.au/
[Tue May 05 02:36:15.080893 2026] [proxy_fcgi:error] [pid 61150:tid 61169] [client 164.92.211.188:45682] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 05 02:36:22.295745 2026] [proxy_fcgi:error] [pid 3341:tid 3344] [client 164.92.211.188:53648] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://www.southerncrosscentre.au/
[Tue May 05 07:30:43.472634 2026] [proxy_fcgi:error] [pid 41055:tid 41072] [client 192.175.111.230:13488] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 05 18:11:08.260578 2026] [:error] [pid 25744:tid 25791] [client 172.183.183.210:26625] [client 172.183.183.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.183.183.210, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/wp/xmlrpc.php"] [unique_id "afnCPCR8IuyzjkW06OPQngAAAJE"]
[Tue May 05 18:11:08.593249 2026] [proxy_fcgi:error] [pid 25744:tid 25791] [client 172.183.183.210:26625] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 05 21:06:58.751454 2026] [proxy_fcgi:error] [pid 25743:tid 25762] [client 74.7.228.11:34582] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 05 22:11:54.390575 2026] [proxy_fcgi:error] [pid 54732:tid 54751] [client 74.7.241.15:59058] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 05 22:11:59.345868 2026] [proxy_fcgi:error] [pid 25745:tid 25812] [client 74.7.175.165:37760] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 05 22:16:58.415299 2026] [:error] [pid 2324:tid 2349] [client 194.62.107.95:58549] [client 194.62.107.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "afn72mqe2hrcI52A1HyjgwAAAVc"]
[Wed May 06 06:14:10.878298 2026] [:error] [pid 48759:tid 48831] [client 35.229.209.87:50100] [client 35.229.209.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "afprsqmcftH9JrQl_yHS8wAAAIk"]
[Wed May 06 13:31:58.331375 2026] [proxy_fcgi:error] [pid 9664:tid 9781] [client 146.247.229.2:54299] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 13:32:00.012615 2026] [proxy_fcgi:error] [pid 9653:tid 9721] [client 93.158.95.213:44143] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 14:44:11.636122 2026] [proxy_fcgi:error] [pid 9653:tid 9713] [client 162.250.121.214:55990] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 14:44:12.365441 2026] [proxy_fcgi:error] [pid 9653:tid 9718] [client 162.250.121.214:56006] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 15:05:20.234473 2026] [autoindex:error] [pid 9659:tid 9749] [client 172.98.33.44:24497] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed May 06 15:05:21.663793 2026] [autoindex:error] [pid 13414:tid 13433] [client 45.132.115.24:39717] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed May 06 15:05:22.954427 2026] [autoindex:error] [pid 9789:tid 9792] [client 45.132.115.32:60307] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed May 06 15:05:24.236991 2026] [proxy_fcgi:error] [pid 592:tid 611] [client 172.98.33.39:50073] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 15:05:25.523473 2026] [proxy_fcgi:error] [pid 9664:tid 9775] [client 172.98.33.37:61101] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 15:05:27.245520 2026] [proxy_fcgi:error] [pid 9653:tid 9716] [client 45.132.115.95:21571] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 15:05:28.916170 2026] [proxy_fcgi:error] [pid 592:tid 604] [client 172.98.33.37:42721] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 15:05:30.551992 2026] [proxy_fcgi:error] [pid 9789:tid 9813] [client 45.132.115.98:38043] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 15:05:32.179258 2026] [proxy_fcgi:error] [pid 9653:tid 9715] [client 172.98.33.37:43899] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 15:05:33.764757 2026] [proxy_fcgi:error] [pid 482:tid 496] [client 45.132.115.32:56839] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 15:05:35.285316 2026] [proxy_fcgi:error] [pid 9789:tid 9803] [client 45.132.115.29:30115] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 15:05:36.946706 2026] [proxy_fcgi:error] [pid 9653:tid 9713] [client 45.132.115.102:54469] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 15:05:38.443100 2026] [proxy_fcgi:error] [pid 9789:tid 9805] [client 172.98.33.38:22985] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 15:05:39.644563 2026] [autoindex:error] [pid 9664:tid 9768] [client 172.98.33.44:28147] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2020/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed May 06 15:05:40.804447 2026] [autoindex:error] [pid 592:tid 602] [client 45.132.115.99:23373] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed May 06 15:05:42.095635 2026] [autoindex:error] [pid 482:tid 486] [client 172.98.33.37:57613] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed May 06 15:05:43.334590 2026] [autoindex:error] [pid 9664:tid 9779] [client 45.132.115.25:57429] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed May 06 15:05:44.545448 2026] [autoindex:error] [pid 9789:tid 9799] [client 172.98.33.37:53743] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed May 06 15:05:45.715579 2026] [autoindex:error] [pid 9664:tid 9767] [client 45.132.115.25:42239] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed May 06 15:05:46.949818 2026] [autoindex:error] [pid 9659:tid 9752] [client 172.98.33.41:47951] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2026/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed May 06 17:07:10.050686 2026] [proxy_fcgi:error] [pid 9664:tid 9779] [client 3.82.107.242:43510] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 17:07:10.380479 2026] [proxy_fcgi:error] [pid 9664:tid 9766] [client 3.82.107.242:41536] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 18:29:45.168137 2026] [proxy_fcgi:error] [pid 9653:tid 9711] [client 74.7.228.11:60424] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 21:46:18.304892 2026] [proxy_fcgi:error] [pid 482:tid 488] [client 66.249.79.6:57957] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 22:01:44.637929 2026] [proxy_fcgi:error] [pid 557:tid 565] [client 35.226.199.131:65304] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 22:08:45.461861 2026] [proxy_fcgi:error] [pid 9653:tid 9702] [client 74.7.175.165:54506] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 06 22:43:58.603908 2026] [:error] [pid 592:tid 601] [client 173.239.214.208:54015] [client 173.239.214.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aftTrpiX28mb6xLi2Py3eQAAAoU"]
[Thu May 07 00:20:15.210358 2026] [proxy_fcgi:error] [pid 9659:tid 9742] [client 192.36.109.73:55053] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 00:44:06.208370 2026] [proxy_fcgi:error] [pid 9659:tid 9735] [client 34.136.139.39:61623] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 00:49:49.752532 2026] [proxy_fcgi:error] [pid 9664:tid 9769] [client 34.123.120.96:63543] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 01:06:15.546583 2026] [proxy_fcgi:error] [pid 9664:tid 9769] [client 34.7.233.185:52672] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 01:34:26.332245 2026] [proxy_fcgi:error] [pid 482:tid 484] [client 34.7.233.185:56526] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 02:19:17.336413 2026] [proxy_fcgi:error] [pid 13414:tid 13419] [client 157.173.122.176:43220] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 03:41:53.813896 2026] [proxy_fcgi:error] [pid 592:tid 622] [client 192.36.109.96:56563] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:09:36.944698 2026] [proxy_fcgi:error] [pid 29606:tid 29658] [client 20.43.20.252:22080] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:09:38.397803 2026] [proxy_fcgi:error] [pid 29607:tid 29692] [client 20.43.20.252:22108] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:09:39.592612 2026] [proxy_fcgi:error] [pid 4539:tid 4552] [client 20.43.20.252:22046] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:09:41.219848 2026] [proxy_fcgi:error] [pid 4539:tid 4558] [client 20.43.20.252:22030] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:09:42.534707 2026] [proxy_fcgi:error] [pid 29607:tid 29685] [client 20.43.20.252:22035] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:09:43.725160 2026] [proxy_fcgi:error] [pid 4539:tid 4559] [client 20.43.20.252:22119] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:09:44.765048 2026] [:error] [pid 4539:tid 4552] [client 20.43.20.252:22095] [client 20.43.20.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "afvKOIPEZE1565sDGnxdBwAAAQs"]
[Thu May 07 07:09:45.568933 2026] [autoindex:error] [pid 4539:tid 4550] [client 20.43.20.252:22029] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/post-comments-form/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu May 07 07:09:45.780279 2026] [autoindex:error] [pid 4539:tid 4541] [client 20.43.20.252:22029] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu May 07 07:09:45.991976 2026] [:error] [pid 4539:tid 4557] [client 20.43.20.252:22029] [client 20.43.20.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/120f9.php"] [unique_id "afvKOYPEZE1565sDGnxdCgAAARA"]
[Thu May 07 07:09:47.647643 2026] [:error] [pid 4539:tid 4546] [client 20.43.20.252:22034] [client 20.43.20.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/admin.php"] [unique_id "afvKO4PEZE1565sDGnxdDgAAAQU"]
[Thu May 07 07:09:48.968988 2026] [:error] [pid 4539:tid 4554] [client 20.43.20.252:22121] [client 20.43.20.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/about.php"] [unique_id "afvKPIPEZE1565sDGnxdEQAAAQ0"]
[Thu May 07 07:09:50.129884 2026] [proxy_fcgi:error] [pid 4539:tid 4560] [client 20.43.20.252:22016] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:09:51.365128 2026] [proxy_fcgi:error] [pid 29710:tid 29724] [client 20.43.20.252:21955] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:09:52.326783 2026] [proxy_fcgi:error] [pid 4539:tid 4564] [client 20.43.20.252:22026] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:09:53.551572 2026] [proxy_fcgi:error] [pid 29606:tid 29660] [client 20.43.20.252:22093] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:09:54.813275 2026] [proxy_fcgi:error] [pid 29710:tid 29717] [client 20.43.20.252:22044] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:09:55.822333 2026] [proxy_fcgi:error] [pid 29607:tid 29681] [client 20.43.20.252:22104] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:09:56.711534 2026] [proxy_fcgi:error] [pid 4539:tid 4554] [client 20.43.20.252:22020] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:09:57.657609 2026] [proxy_fcgi:error] [pid 29607:tid 29683] [client 20.43.20.252:22091] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:09:58.604603 2026] [proxy_fcgi:error] [pid 29607:tid 29676] [client 20.43.20.252:22090] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:09:59.349219 2026] [proxy_fcgi:error] [pid 29607:tid 29671] [client 20.43.20.252:22084] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:00.341184 2026] [proxy_fcgi:error] [pid 4539:tid 4548] [client 20.43.20.252:22068] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:01.318174 2026] [proxy_fcgi:error] [pid 29710:tid 29731] [client 20.43.20.252:22105] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:02.042151 2026] [proxy_fcgi:error] [pid 29710:tid 29722] [client 20.43.20.252:22113] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:02.886811 2026] [proxy_fcgi:error] [pid 29605:tid 29615] [client 20.43.20.252:22060] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:03.845620 2026] [proxy_fcgi:error] [pid 29607:tid 29688] [client 20.43.20.252:22136] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:04.929058 2026] [proxy_fcgi:error] [pid 29710:tid 29736] [client 20.43.20.252:22106] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:05.925904 2026] [proxy_fcgi:error] [pid 4539:tid 4564] [client 20.43.20.252:22022] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:06.919128 2026] [proxy_fcgi:error] [pid 29710:tid 29735] [client 20.43.20.252:22131] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:07.848577 2026] [proxy_fcgi:error] [pid 29710:tid 29734] [client 20.43.20.252:22037] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:08.836009 2026] [proxy_fcgi:error] [pid 29710:tid 29721] [client 20.43.20.252:22133] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:09.365538 2026] [:error] [pid 29607:tid 29687] [client 20.43.20.252:22111] [client 20.43.20.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afvKUabP7TJOAh7WSUOHzwAAAJM"]
[Thu May 07 07:10:10.369253 2026] [proxy_fcgi:error] [pid 29710:tid 29724] [client 20.43.20.252:22117] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:11.425697 2026] [proxy_fcgi:error] [pid 29607:tid 29689] [client 20.43.20.252:22023] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:12.444920 2026] [proxy_fcgi:error] [pid 29710:tid 29734] [client 20.43.20.252:22116] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:13.435260 2026] [proxy_fcgi:error] [pid 29605:tid 29620] [client 20.43.20.252:21976] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:14.337881 2026] [proxy_fcgi:error] [pid 4539:tid 4562] [client 20.43.20.252:22139] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:15.280054 2026] [autoindex:error] [pid 29607:tid 29671] [client 20.43.20.252:22114] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu May 07 07:10:15.819439 2026] [proxy_fcgi:error] [pid 29607:tid 29680] [client 20.43.20.252:22114] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:16.641497 2026] [autoindex:error] [pid 29607:tid 29679] [client 20.43.20.252:22052] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu May 07 07:10:17.171547 2026] [proxy_fcgi:error] [pid 29607:tid 29668] [client 20.43.20.252:22052] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:18.135079 2026] [autoindex:error] [pid 29607:tid 29690] [client 20.43.20.252:22142] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu May 07 07:10:18.714537 2026] [proxy_fcgi:error] [pid 29607:tid 29670] [client 20.43.20.252:22142] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:19.878979 2026] [proxy_fcgi:error] [pid 29607:tid 29681] [client 20.43.20.252:22132] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:21.120965 2026] [proxy_fcgi:error] [pid 29710:tid 29732] [client 20.43.20.252:22128] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:22.263169 2026] [proxy_fcgi:error] [pid 4539:tid 4560] [client 20.43.20.252:22083] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:23.129604 2026] [proxy_fcgi:error] [pid 29605:tid 29623] [client 20.43.20.252:22118] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:23.788101 2026] [proxy_fcgi:error] [pid 29605:tid 29634] [client 20.43.20.252:22118] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:24.707931 2026] [proxy_fcgi:error] [pid 29710:tid 29733] [client 20.43.20.252:22112] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:25.888543 2026] [proxy_fcgi:error] [pid 29710:tid 29721] [client 20.43.20.252:22103] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:26.747195 2026] [proxy_fcgi:error] [pid 29710:tid 29736] [client 20.43.20.252:22086] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:27.882501 2026] [proxy_fcgi:error] [pid 29605:tid 29622] [client 20.43.20.252:22027] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:29.162114 2026] [proxy_fcgi:error] [pid 4539:tid 4563] [client 20.43.20.252:22059] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:30.104592 2026] [proxy_fcgi:error] [pid 4539:tid 4545] [client 20.43.20.252:22040] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:31.180716 2026] [proxy_fcgi:error] [pid 4539:tid 4549] [client 20.43.20.252:22143] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:32.325694 2026] [proxy_fcgi:error] [pid 29605:tid 29617] [client 20.43.20.252:22124] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:32.846642 2026] [proxy_fcgi:error] [pid 29605:tid 29638] [client 20.43.20.252:22124] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:33.530990 2026] [autoindex:error] [pid 4539:tid 4558] [client 20.43.20.252:22075] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu May 07 07:10:34.059610 2026] [proxy_fcgi:error] [pid 4539:tid 4554] [client 20.43.20.252:22075] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:34.907513 2026] [proxy_fcgi:error] [pid 4539:tid 4560] [client 20.43.20.252:22123] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:36.430187 2026] [proxy_fcgi:error] [pid 4539:tid 4541] [client 20.43.20.252:22134] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:38.300603 2026] [proxy_fcgi:error] [pid 29605:tid 29624] [client 20.43.20.252:22122] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:39.871840 2026] [proxy_fcgi:error] [pid 4539:tid 4553] [client 20.43.20.252:22110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:40.516576 2026] [proxy_fcgi:error] [pid 4539:tid 4543] [client 20.43.20.252:22110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:41.524318 2026] [proxy_fcgi:error] [pid 4539:tid 4555] [client 20.43.20.252:21954] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:42.726727 2026] [proxy_fcgi:error] [pid 29605:tid 29628] [client 20.43.20.252:22107] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:43.578249 2026] [proxy_fcgi:error] [pid 4539:tid 4560] [client 20.43.20.252:22061] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:44.427866 2026] [autoindex:error] [pid 4539:tid 4544] [client 20.43.20.252:21980] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu May 07 07:10:44.941436 2026] [proxy_fcgi:error] [pid 4539:tid 4563] [client 20.43.20.252:21980] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:45.953786 2026] [proxy_fcgi:error] [pid 29605:tid 29620] [client 20.43.20.252:22109] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:47.653415 2026] [proxy_fcgi:error] [pid 4539:tid 4545] [client 20.43.20.252:22032] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:48.603326 2026] [proxy_fcgi:error] [pid 4539:tid 4552] [client 20.43.20.252:22031] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:49.784071 2026] [proxy_fcgi:error] [pid 29607:tid 29692] [client 20.43.20.252:21956] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:51.899645 2026] [proxy_fcgi:error] [pid 29605:tid 29621] [client 20.43.20.252:22063] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:10:56.124888 2026] [proxy_fcgi:error] [pid 29710:tid 29716] [client 20.43.20.252:22064] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:02.850324 2026] [proxy_fcgi:error] [pid 29710:tid 29713] [client 20.43.20.252:22137] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:05.844604 2026] [proxy_fcgi:error] [pid 29607:tid 29685] [client 20.43.20.252:22096] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:08.819038 2026] [proxy_fcgi:error] [pid 4539:tid 4564] [client 20.43.20.252:22007] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:09.070735 2026] [autoindex:error] [pid 4539:tid 4549] [client 20.43.20.252:22007] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu May 07 07:11:09.985524 2026] [proxy_fcgi:error] [pid 4539:tid 4555] [client 20.43.20.252:22007] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:12.268442 2026] [proxy_fcgi:error] [pid 29710:tid 29712] [client 20.43.20.252:22138] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:14.425282 2026] [proxy_fcgi:error] [pid 29606:tid 29649] [client 20.43.20.252:22129] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:16.275768 2026] [proxy_fcgi:error] [pid 29607:tid 29680] [client 20.43.20.252:21982] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:17.616969 2026] [proxy_fcgi:error] [pid 29710:tid 29724] [client 20.43.20.252:22120] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:18.170661 2026] [proxy_fcgi:error] [pid 29710:tid 29722] [client 20.43.20.252:22120] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:20.251647 2026] [proxy_fcgi:error] [pid 29606:tid 29652] [client 20.43.20.252:22098] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:21.567587 2026] [proxy_fcgi:error] [pid 29710:tid 29734] [client 20.43.20.252:22097] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:23.310375 2026] [proxy_fcgi:error] [pid 4539:tid 4553] [client 20.43.20.252:22130] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:24.860606 2026] [proxy_fcgi:error] [pid 4539:tid 4547] [client 20.43.20.252:22013] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:26.614331 2026] [proxy_fcgi:error] [pid 29607:tid 29668] [client 20.43.20.252:22053] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:28.402843 2026] [proxy_fcgi:error] [pid 4539:tid 4563] [client 20.43.20.252:22062] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:29.526124 2026] [proxy_fcgi:error] [pid 4539:tid 4551] [client 20.43.20.252:22126] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:30.652516 2026] [proxy_fcgi:error] [pid 4539:tid 4545] [client 20.43.20.252:22042] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:31.960142 2026] [proxy_fcgi:error] [pid 29607:tid 29674] [client 20.43.20.252:21986] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:33.431794 2026] [proxy_fcgi:error] [pid 29710:tid 29717] [client 20.43.20.252:22089] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:34.938253 2026] [proxy_fcgi:error] [pid 4539:tid 4562] [client 20.43.20.252:22100] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:36.426200 2026] [autoindex:error] [pid 29710:tid 29721] [client 20.43.20.252:22017] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu May 07 07:11:36.964631 2026] [proxy_fcgi:error] [pid 29710:tid 29718] [client 20.43.20.252:22017] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:38.936198 2026] [proxy_fcgi:error] [pid 29607:tid 29677] [client 20.43.20.252:22018] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:39.447102 2026] [proxy_fcgi:error] [pid 29607:tid 29680] [client 20.43.20.252:22018] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:41.370661 2026] [proxy_fcgi:error] [pid 29710:tid 29731] [client 20.43.20.252:22078] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:43.238867 2026] [proxy_fcgi:error] [pid 29607:tid 29672] [client 20.43.20.252:21964] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:45.642190 2026] [proxy_fcgi:error] [pid 4539:tid 4546] [client 20.43.20.252:21952] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:49.426492 2026] [proxy_fcgi:error] [pid 29710:tid 29727] [client 20.43.20.252:21968] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:51.777596 2026] [proxy_fcgi:error] [pid 4539:tid 4545] [client 20.43.20.252:21969] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:53.547898 2026] [proxy_fcgi:error] [pid 29607:tid 29692] [client 20.43.20.252:21998] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:55.804785 2026] [proxy_fcgi:error] [pid 29710:tid 29732] [client 20.43.20.252:22085] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:11:58.043441 2026] [proxy_fcgi:error] [pid 29607:tid 29690] [client 20.43.20.252:21970] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:00.940572 2026] [proxy_fcgi:error] [pid 29710:tid 29726] [client 20.43.20.252:21978] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:02.390206 2026] [proxy_fcgi:error] [pid 4539:tid 4550] [client 20.43.20.252:21965] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:03.259863 2026] [proxy_fcgi:error] [pid 29710:tid 29731] [client 20.43.20.252:21958] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:04.495844 2026] [proxy_fcgi:error] [pid 29710:tid 29713] [client 20.43.20.252:22043] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:06.108819 2026] [proxy_fcgi:error] [pid 29607:tid 29674] [client 20.43.20.252:22019] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:08.114649 2026] [proxy_fcgi:error] [pid 29606:tid 29657] [client 20.43.20.252:22074] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:09.156373 2026] [proxy_fcgi:error] [pid 29710:tid 29719] [client 20.43.20.252:21990] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:11.672863 2026] [proxy_fcgi:error] [pid 4539:tid 4563] [client 20.43.20.252:22073] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:14.069609 2026] [proxy_fcgi:error] [pid 29605:tid 29633] [client 20.43.20.252:22009] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:22.872975 2026] [proxy_fcgi:error] [pid 29710:tid 29725] [client 20.43.20.252:22047] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:23.695918 2026] [proxy_fcgi:error] [pid 29710:tid 29732] [client 20.43.20.252:22047] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:25.117681 2026] [proxy_fcgi:error] [pid 29710:tid 29724] [client 20.43.20.252:22066] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:26.841884 2026] [proxy_fcgi:error] [pid 4539:tid 4551] [client 20.43.20.252:22135] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:27.913295 2026] [proxy_fcgi:error] [pid 29710:tid 29727] [client 20.43.20.252:21975] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:29.936617 2026] [proxy_fcgi:error] [pid 4539:tid 4561] [client 20.43.20.252:22025] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:31.498746 2026] [proxy_fcgi:error] [pid 29605:tid 29614] [client 20.43.20.252:22092] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:33.192915 2026] [proxy_fcgi:error] [pid 4539:tid 4556] [client 20.43.20.252:22056] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:33.855888 2026] [proxy_fcgi:error] [pid 4539:tid 4565] [client 20.43.20.252:22056] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:36.012598 2026] [proxy_fcgi:error] [pid 29710:tid 29725] [client 20.43.20.252:22036] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:38.359001 2026] [proxy_fcgi:error] [pid 29710:tid 29727] [client 20.43.20.252:22082] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:40.447305 2026] [proxy_fcgi:error] [pid 29606:tid 29644] [client 20.43.20.252:21985] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:41.894283 2026] [proxy_fcgi:error] [pid 29606:tid 29642] [client 20.43.20.252:22094] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:42.401124 2026] [proxy_fcgi:error] [pid 29606:tid 29647] [client 20.43.20.252:22094] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:44.299646 2026] [proxy_fcgi:error] [pid 4539:tid 4559] [client 20.43.20.252:21953] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:45.982253 2026] [proxy_fcgi:error] [pid 29606:tid 29645] [client 20.43.20.252:22024] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:50.469648 2026] [proxy_fcgi:error] [pid 29607:tid 29690] [client 20.43.20.252:21897] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:51.053233 2026] [proxy_fcgi:error] [pid 29607:tid 29688] [client 20.43.20.252:21897] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:54.861418 2026] [proxy_fcgi:error] [pid 4539:tid 4549] [client 20.43.20.252:22057] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:56.665015 2026] [proxy_fcgi:error] [pid 29605:tid 29617] [client 20.43.20.252:21966] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:58.324915 2026] [proxy_fcgi:error] [pid 29710:tid 29717] [client 20.43.20.252:22119] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:12:58.861830 2026] [proxy_fcgi:error] [pid 29710:tid 29713] [client 20.43.20.252:22119] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:01.067831 2026] [proxy_fcgi:error] [pid 29607:tid 29692] [client 20.43.20.252:22079] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:01.659138 2026] [proxy_fcgi:error] [pid 29607:tid 29683] [client 20.43.20.252:22079] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:03.833390 2026] [proxy_fcgi:error] [pid 29606:tid 29648] [client 20.43.20.252:21959] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:05.799702 2026] [autoindex:error] [pid 4539:tid 4552] [client 20.43.20.252:22076] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu May 07 07:13:06.378111 2026] [proxy_fcgi:error] [pid 4539:tid 4545] [client 20.43.20.252:22076] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:07.041797 2026] [proxy_fcgi:error] [pid 4539:tid 4555] [client 20.43.20.252:22076] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:12.011630 2026] [proxy_fcgi:error] [pid 29606:tid 29656] [client 20.43.20.252:22003] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:13.748925 2026] [proxy_fcgi:error] [pid 29607:tid 29679] [client 20.43.20.252:21963] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:14.371329 2026] [proxy_fcgi:error] [pid 29607:tid 29672] [client 20.43.20.252:21963] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:15.764527 2026] [proxy_fcgi:error] [pid 29605:tid 29614] [client 20.43.20.252:21989] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:17.371030 2026] [proxy_fcgi:error] [pid 4539:tid 4564] [client 20.43.20.252:21977] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:18.395774 2026] [proxy_fcgi:error] [pid 4539:tid 4561] [client 20.43.20.252:21891] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:19.625012 2026] [proxy_fcgi:error] [pid 29607:tid 29683] [client 20.43.20.252:21983] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:20.312675 2026] [proxy_fcgi:error] [pid 29607:tid 29690] [client 20.43.20.252:21983] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:21.448659 2026] [proxy_fcgi:error] [pid 29605:tid 29617] [client 20.43.20.252:22008] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:22.050858 2026] [proxy_fcgi:error] [pid 4539:tid 4541] [client 20.43.20.252:21988] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:22.819211 2026] [proxy_fcgi:error] [pid 4539:tid 4549] [client 20.43.20.252:21988] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:23.434983 2026] [proxy_fcgi:error] [pid 4539:tid 4554] [client 20.43.20.252:21988] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:24.709862 2026] [proxy_fcgi:error] [pid 29710:tid 29716] [client 20.43.20.252:22049] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:25.290263 2026] [proxy_fcgi:error] [pid 29710:tid 29729] [client 20.43.20.252:22049] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:26.273362 2026] [autoindex:error] [pid 29605:tid 29633] [client 20.43.20.252:21904] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu May 07 07:13:26.812838 2026] [proxy_fcgi:error] [pid 29605:tid 29630] [client 20.43.20.252:21904] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:28.645839 2026] [proxy_fcgi:error] [pid 4539:tid 4565] [client 20.43.20.252:22058] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:29.161318 2026] [proxy_fcgi:error] [pid 4539:tid 4548] [client 20.43.20.252:22058] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:30.019325 2026] [autoindex:error] [pid 4539:tid 4556] [client 20.43.20.252:22038] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu May 07 07:13:30.612134 2026] [proxy_fcgi:error] [pid 4539:tid 4558] [client 20.43.20.252:22038] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:31.610313 2026] [proxy_fcgi:error] [pid 29607:tid 29678] [client 20.43.20.252:21890] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:34.061756 2026] [proxy_fcgi:error] [pid 29710:tid 29712] [client 20.43.20.252:21971] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:35.447693 2026] [proxy_fcgi:error] [pid 4539:tid 4555] [client 20.43.20.252:21917] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:35.783497 2026] [autoindex:error] [pid 4539:tid 4559] [client 20.43.20.252:21917] AH01276: Cannot serve directory /home/crosscen/public_html/wp-content/uploads/2021/02/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu May 07 07:13:36.334277 2026] [proxy_fcgi:error] [pid 4539:tid 4550] [client 20.43.20.252:21917] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:37.686950 2026] [proxy_fcgi:error] [pid 29606:tid 29659] [client 20.43.20.252:21829] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:38.575956 2026] [proxy_fcgi:error] [pid 29710:tid 29716] [client 20.43.20.252:21889] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:39.085806 2026] [proxy_fcgi:error] [pid 29710:tid 29729] [client 20.43.20.252:21889] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:40.213419 2026] [proxy_fcgi:error] [pid 29605:tid 29627] [client 20.43.20.252:21996] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:40.953852 2026] [:error] [pid 4539:tid 4551] [client 20.43.20.252:22048] [client 20.43.20.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afvLJIPEZE1565sDGnxeOQAAAQo"]
[Thu May 07 07:13:42.049244 2026] [proxy_fcgi:error] [pid 4539:tid 4565] [client 20.43.20.252:22054] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:43.484810 2026] [proxy_fcgi:error] [pid 4539:tid 4551] [client 20.43.20.252:21999] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:43.695957 2026] [autoindex:error] [pid 4539:tid 4547] [client 20.43.20.252:21999] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu May 07 07:13:44.049420 2026] [autoindex:error] [pid 4539:tid 4555] [client 20.43.20.252:21999] AH01276: Cannot serve directory /home/crosscen/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu May 07 07:13:44.598782 2026] [proxy_fcgi:error] [pid 4539:tid 4550] [client 20.43.20.252:21999] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:46.006502 2026] [proxy_fcgi:error] [pid 29606:tid 29642] [client 20.43.20.252:22051] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:47.110979 2026] [proxy_fcgi:error] [pid 4539:tid 4553] [client 20.43.20.252:22055] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:48.432766 2026] [proxy_fcgi:error] [pid 29605:tid 29615] [client 20.43.20.252:22102] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:48.947756 2026] [proxy_fcgi:error] [pid 29605:tid 29617] [client 20.43.20.252:22102] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:50.413076 2026] [proxy_fcgi:error] [pid 29606:tid 29663] [client 20.43.20.252:22125] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:52.791462 2026] [proxy_fcgi:error] [pid 4539:tid 4549] [client 20.43.20.252:22006] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:54.133163 2026] [proxy_fcgi:error] [pid 29710:tid 29734] [client 20.43.20.252:21908] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:55.361058 2026] [proxy_fcgi:error] [pid 4539:tid 4561] [client 20.43.20.252:21911] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:56.924252 2026] [proxy_fcgi:error] [pid 29710:tid 29718] [client 20.43.20.252:21995] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:57.463270 2026] [proxy_fcgi:error] [pid 29710:tid 29731] [client 20.43.20.252:21995] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:13:58.543681 2026] [proxy_fcgi:error] [pid 29710:tid 29723] [client 20.43.20.252:22030] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:14:00.615463 2026] [proxy_fcgi:error] [pid 29605:tid 29630] [client 20.43.20.252:22065] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:14:02.203041 2026] [proxy_fcgi:error] [pid 29710:tid 29724] [client 20.43.20.252:21910] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:14:03.765505 2026] [proxy_fcgi:error] [pid 29607:tid 29675] [client 20.43.20.252:21894] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:14:04.598751 2026] [autoindex:error] [pid 4539:tid 4541] [client 20.43.20.252:22001] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu May 07 07:14:05.204932 2026] [proxy_fcgi:error] [pid 4539:tid 4564] [client 20.43.20.252:22001] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:27:49.627268 2026] [proxy_fcgi:error] [pid 29607:tid 29673] [client 20.104.207.18:27659] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:27:50.402569 2026] [proxy_fcgi:error] [pid 29606:tid 29658] [client 20.104.207.18:27772] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:27:51.149258 2026] [proxy_fcgi:error] [pid 29607:tid 29668] [client 20.104.207.18:27738] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:27:51.923818 2026] [proxy_fcgi:error] [pid 29606:tid 29646] [client 20.104.207.18:27648] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:27:52.656505 2026] [proxy_fcgi:error] [pid 29605:tid 29633] [client 20.104.207.18:27586] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:27:53.403849 2026] [proxy_fcgi:error] [pid 29607:tid 29688] [client 20.104.207.18:27744] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:27:54.121031 2026] [proxy_fcgi:error] [pid 29607:tid 29687] [client 20.104.207.18:27766] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:27:54.692738 2026] [proxy_fcgi:error] [pid 29607:tid 29680] [client 20.104.207.18:27766] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:27:55.441581 2026] [proxy_fcgi:error] [pid 4539:tid 4554] [client 20.104.207.18:27748] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:27:56.221029 2026] [proxy_fcgi:error] [pid 4539:tid 4547] [client 20.104.207.18:27760] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:27:56.990556 2026] [proxy_fcgi:error] [pid 29710:tid 29715] [client 20.104.207.18:27719] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:27:57.725347 2026] [proxy_fcgi:error] [pid 29710:tid 29719] [client 20.104.207.18:27678] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:27:58.257166 2026] [proxy_fcgi:error] [pid 29710:tid 29713] [client 20.104.207.18:27678] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:27:58.990449 2026] [proxy_fcgi:error] [pid 29710:tid 29734] [client 20.104.207.18:27712] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:27:59.775034 2026] [proxy_fcgi:error] [pid 29710:tid 29733] [client 20.104.207.18:27652] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:00.592063 2026] [proxy_fcgi:error] [pid 4539:tid 4563] [client 20.104.207.18:27771] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:01.364355 2026] [proxy_fcgi:error] [pid 29607:tid 29673] [client 20.104.207.18:27747] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:02.130766 2026] [proxy_fcgi:error] [pid 29710:tid 29714] [client 20.104.207.18:27587] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:02.899009 2026] [proxy_fcgi:error] [pid 29710:tid 29713] [client 20.104.207.18:27661] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:03.686177 2026] [proxy_fcgi:error] [pid 29607:tid 29675] [client 20.104.207.18:27750] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:04.432115 2026] [proxy_fcgi:error] [pid 29606:tid 29646] [client 20.104.207.18:27729] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:05.176831 2026] [proxy_fcgi:error] [pid 4539:tid 4563] [client 20.104.207.18:27749] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:05.696398 2026] [proxy_fcgi:error] [pid 4539:tid 4556] [client 20.104.207.18:27749] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:06.513535 2026] [proxy_fcgi:error] [pid 29605:tid 29621] [client 20.104.207.18:27754] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:07.465139 2026] [proxy_fcgi:error] [pid 29710:tid 29731] [client 20.104.207.18:27753] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:08.392024 2026] [proxy_fcgi:error] [pid 4539:tid 4555] [client 20.104.207.18:27767] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:09.468116 2026] [proxy_fcgi:error] [pid 4539:tid 4560] [client 20.104.207.18:27713] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:10.221354 2026] [proxy_fcgi:error] [pid 4539:tid 4541] [client 20.104.207.18:27752] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:10.977368 2026] [proxy_fcgi:error] [pid 29710:tid 29726] [client 20.104.207.18:27730] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:11.702097 2026] [proxy_fcgi:error] [pid 29606:tid 29665] [client 20.104.207.18:27656] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:12.237675 2026] [proxy_fcgi:error] [pid 29606:tid 29642] [client 20.104.207.18:27656] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:12.963529 2026] [proxy_fcgi:error] [pid 29607:tid 29681] [client 20.104.207.18:27743] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:13.734130 2026] [proxy_fcgi:error] [pid 4539:tid 4555] [client 20.104.207.18:27722] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:14.490105 2026] [proxy_fcgi:error] [pid 29607:tid 29677] [client 20.104.207.18:27672] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:15.244513 2026] [proxy_fcgi:error] [pid 29605:tid 29620] [client 20.104.207.18:27711] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:16.005075 2026] [proxy_fcgi:error] [pid 29605:tid 29628] [client 20.104.207.18:27657] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:16.761376 2026] [proxy_fcgi:error] [pid 29606:tid 29655] [client 20.104.207.18:27731] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:17.518935 2026] [proxy_fcgi:error] [pid 29710:tid 29727] [client 20.104.207.18:27726] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:17.935553 2026] [:error] [pid 29605:tid 29626] [client 20.104.207.18:27664] [client 20.104.207.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "afvOkYnxrTjETioEY0T7FwAAAAw"]
[Thu May 07 07:28:18.693607 2026] [proxy_fcgi:error] [pid 29605:tid 29624] [client 20.104.207.18:27775] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:19.422176 2026] [proxy_fcgi:error] [pid 29710:tid 29716] [client 20.104.207.18:27676] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:20.174046 2026] [proxy_fcgi:error] [pid 4539:tid 4560] [client 20.104.207.18:27602] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:20.910774 2026] [proxy_fcgi:error] [pid 4539:tid 4554] [client 20.104.207.18:27673] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:21.676762 2026] [proxy_fcgi:error] [pid 4539:tid 4547] [client 20.104.207.18:27741] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:22.429638 2026] [proxy_fcgi:error] [pid 29606:tid 29650] [client 20.104.207.18:27681] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:23.149265 2026] [proxy_fcgi:error] [pid 29607:tid 29681] [client 20.104.207.18:27653] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:23.892179 2026] [proxy_fcgi:error] [pid 29710:tid 29732] [client 20.104.207.18:27670] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:24.650988 2026] [proxy_fcgi:error] [pid 29710:tid 29733] [client 20.104.207.18:27765] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:25.435963 2026] [proxy_fcgi:error] [pid 4539:tid 4560] [client 20.104.207.18:27674] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:26.178756 2026] [proxy_fcgi:error] [pid 29606:tid 29654] [client 20.104.207.18:27770] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:26.612460 2026] [:error] [pid 4539:tid 4563] [client 20.104.207.18:27669] [client 20.104.207.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tiny.php"] [unique_id "afvOmoPEZE1565sDGnxl3gAAARY"]
[Thu May 07 07:28:27.355946 2026] [proxy_fcgi:error] [pid 4539:tid 4551] [client 20.104.207.18:27732] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:28.134187 2026] [proxy_fcgi:error] [pid 29607:tid 29676] [client 20.104.207.18:27650] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:28.877617 2026] [proxy_fcgi:error] [pid 4539:tid 4555] [client 20.104.207.18:27707] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:29.661348 2026] [proxy_fcgi:error] [pid 29605:tid 29615] [client 20.104.207.18:27618] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:30.421540 2026] [proxy_fcgi:error] [pid 29607:tid 29678] [client 20.104.207.18:27600] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:31.156152 2026] [proxy_fcgi:error] [pid 4539:tid 4558] [client 20.104.207.18:27706] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:31.935843 2026] [proxy_fcgi:error] [pid 29605:tid 29621] [client 20.104.207.18:27758] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:32.719386 2026] [proxy_fcgi:error] [pid 29710:tid 29713] [client 20.104.207.18:27671] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:33.543062 2026] [proxy_fcgi:error] [pid 29710:tid 29729] [client 20.104.207.18:27718] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:34.362041 2026] [proxy_fcgi:error] [pid 29710:tid 29718] [client 20.104.207.18:27763] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:35.162253 2026] [proxy_fcgi:error] [pid 29605:tid 29624] [client 20.104.207.18:27689] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:36.002568 2026] [proxy_fcgi:error] [pid 29710:tid 29712] [client 20.104.207.18:27665] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:36.427917 2026] [:error] [pid 29710:tid 29733] [client 20.104.207.18:27768] [client 20.104.207.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "afvOpP0atTQld9Y2ht8JJgAAANU"]
[Thu May 07 07:28:37.201540 2026] [proxy_fcgi:error] [pid 29710:tid 29715] [client 20.104.207.18:27662] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:38.003779 2026] [proxy_fcgi:error] [pid 29607:tid 29684] [client 20.104.207.18:27759] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:38.749315 2026] [proxy_fcgi:error] [pid 4539:tid 4564] [client 20.104.207.18:27668] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:39.569058 2026] [proxy_fcgi:error] [pid 4539:tid 4547] [client 20.104.207.18:27764] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:40.328108 2026] [proxy_fcgi:error] [pid 4539:tid 4548] [client 20.104.207.18:27773] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:41.067106 2026] [proxy_fcgi:error] [pid 4539:tid 4545] [client 20.104.207.18:27588] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:41.825102 2026] [proxy_fcgi:error] [pid 29710:tid 29735] [client 20.104.207.18:27610] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:42.551598 2026] [proxy_fcgi:error] [pid 29606:tid 29642] [client 20.104.207.18:27682] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:43.327451 2026] [proxy_fcgi:error] [pid 29605:tid 29637] [client 20.104.207.18:27735] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:44.075427 2026] [proxy_fcgi:error] [pid 29710:tid 29716] [client 20.104.207.18:27691] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:44.879636 2026] [proxy_fcgi:error] [pid 29710:tid 29722] [client 20.104.207.18:27762] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:45.646589 2026] [proxy_fcgi:error] [pid 29606:tid 29663] [client 20.104.207.18:27733] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:46.448279 2026] [proxy_fcgi:error] [pid 29605:tid 29620] [client 20.104.207.18:27761] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:47.205610 2026] [proxy_fcgi:error] [pid 4539:tid 4548] [client 20.104.207.18:27717] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:48.028251 2026] [proxy_fcgi:error] [pid 4539:tid 4543] [client 20.104.207.18:27666] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:49.196552 2026] [proxy_fcgi:error] [pid 29607:tid 29687] [client 20.104.207.18:27595] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:49.970902 2026] [proxy_fcgi:error] [pid 29607:tid 29679] [client 20.104.207.18:27714] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:50.759503 2026] [proxy_fcgi:error] [pid 4539:tid 4553] [client 20.104.207.18:27658] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:51.579307 2026] [proxy_fcgi:error] [pid 29607:tid 29677] [client 20.104.207.18:27716] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:52.363850 2026] [proxy_fcgi:error] [pid 4539:tid 4542] [client 20.104.207.18:27603] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:53.194751 2026] [proxy_fcgi:error] [pid 29607:tid 29692] [client 20.104.207.18:27613] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:53.969613 2026] [proxy_fcgi:error] [pid 29605:tid 29629] [client 20.104.207.18:27699] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:54.762053 2026] [proxy_fcgi:error] [pid 29607:tid 29675] [client 20.104.207.18:27585] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:55.486584 2026] [proxy_fcgi:error] [pid 29710:tid 29731] [client 20.104.207.18:27736] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:56.221115 2026] [proxy_fcgi:error] [pid 29710:tid 29727] [client 20.104.207.18:27759] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:57.003307 2026] [proxy_fcgi:error] [pid 29605:tid 29630] [client 20.104.207.18:27733] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:57.751647 2026] [proxy_fcgi:error] [pid 4539:tid 4546] [client 20.104.207.18:27720] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:58.512317 2026] [proxy_fcgi:error] [pid 4539:tid 4544] [client 20.104.207.18:27553] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:28:59.265377 2026] [proxy_fcgi:error] [pid 4539:tid 4542] [client 20.104.207.18:27623] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:00.038228 2026] [proxy_fcgi:error] [pid 4539:tid 4545] [client 20.104.207.18:27724] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:00.786976 2026] [proxy_fcgi:error] [pid 4539:tid 4560] [client 20.104.207.18:27683] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:01.616080 2026] [proxy_fcgi:error] [pid 4539:tid 4552] [client 20.104.207.18:27769] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:02.366044 2026] [proxy_fcgi:error] [pid 4539:tid 4559] [client 20.104.207.18:27655] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:03.146835 2026] [proxy_fcgi:error] [pid 29606:tid 29655] [client 20.104.207.18:27737] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:03.933415 2026] [proxy_fcgi:error] [pid 29606:tid 29648] [client 20.104.207.18:27756] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:04.684466 2026] [proxy_fcgi:error] [pid 29606:tid 29660] [client 20.104.207.18:27684] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:05.438210 2026] [proxy_fcgi:error] [pid 29710:tid 29717] [client 20.104.207.18:27591] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:06.165969 2026] [proxy_fcgi:error] [pid 29606:tid 29646] [client 20.104.207.18:27628] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:06.930751 2026] [proxy_fcgi:error] [pid 29607:tid 29685] [client 20.104.207.18:27551] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:07.677883 2026] [proxy_fcgi:error] [pid 29606:tid 29662] [client 20.104.207.18:27685] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:08.424639 2026] [proxy_fcgi:error] [pid 29606:tid 29658] [client 20.104.207.18:27599] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:09.179261 2026] [proxy_fcgi:error] [pid 29606:tid 29653] [client 20.104.207.18:27679] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:09.914816 2026] [proxy_fcgi:error] [pid 4539:tid 4542] [client 20.104.207.18:27617] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:10.665606 2026] [proxy_fcgi:error] [pid 4539:tid 4541] [client 20.104.207.18:27692] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:11.410829 2026] [proxy_fcgi:error] [pid 4539:tid 4549] [client 20.104.207.18:27751] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:12.145312 2026] [proxy_fcgi:error] [pid 4539:tid 4564] [client 20.104.207.18:27601] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:13.221444 2026] [proxy_fcgi:error] [pid 4539:tid 4560] [client 20.104.207.18:27660] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:14.253011 2026] [proxy_fcgi:error] [pid 29607:tid 29689] [client 20.104.207.18:27698] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:15.002340 2026] [proxy_fcgi:error] [pid 29710:tid 29722] [client 20.104.207.18:27696] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:15.767886 2026] [proxy_fcgi:error] [pid 29710:tid 29729] [client 20.104.207.18:27704] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:16.539712 2026] [proxy_fcgi:error] [pid 29606:tid 29659] [client 20.104.207.18:27677] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:17.348356 2026] [proxy_fcgi:error] [pid 29606:tid 29660] [client 20.104.207.18:27567] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:18.082124 2026] [proxy_fcgi:error] [pid 29605:tid 29620] [client 20.104.207.18:27524] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:18.841131 2026] [proxy_fcgi:error] [pid 29607:tid 29682] [client 20.104.207.18:27643] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:19.566841 2026] [proxy_fcgi:error] [pid 4539:tid 4561] [client 20.104.207.18:27687] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:20.341158 2026] [proxy_fcgi:error] [pid 4539:tid 4547] [client 20.104.207.18:27695] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:20.870891 2026] [proxy_fcgi:error] [pid 4539:tid 4565] [client 20.104.207.18:27695] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:21.633600 2026] [proxy_fcgi:error] [pid 29606:tid 29646] [client 20.104.207.18:27702] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 07:29:22.146390 2026] [proxy_fcgi:error] [pid 29606:tid 29663] [client 20.104.207.18:27702] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 10:42:44.286819 2026] [proxy_fcgi:error] [pid 56150:tid 56153] [client 69.165.67.147:64930] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au
[Thu May 07 10:43:28.265930 2026] [proxy_fcgi:error] [pid 56150:tid 56160] [client 106.219.162.149:19416] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 14:49:28.679839 2026] [:error] [pid 15715:tid 15722] [client 195.178.110.241:34412] [client 195.178.110.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "afw1-CY4dZsLOttMkcdQwwAAAQU"]
[Thu May 07 17:51:47.977063 2026] [proxy_fcgi:error] [pid 28098:tid 28123] [client 34.44.75.28:49714] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 18:20:23.108594 2026] [proxy_fcgi:error] [pid 15715:tid 15733] [client 34.182.166.92:56349] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 21:20:45.678653 2026] [proxy_fcgi:error] [pid 28098:tid 28101] [client 74.7.175.165:41160] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 23:18:04.996033 2026] [proxy_fcgi:error] [pid 15629:tid 15637] [client 158.173.67.162:62757] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 23:33:27.659006 2026] [proxy_fcgi:error] [pid 15715:tid 15723] [client 34.71.55.181:57572] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 23:33:50.279889 2026] [proxy_fcgi:error] [pid 15715:tid 15731] [client 34.67.156.194:60980] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 07 23:40:48.508334 2026] [proxy_fcgi:error] [pid 15715:tid 15719] [client 66.249.79.7:52771] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 00:34:46.658059 2026] [proxy_fcgi:error] [pid 15629:tid 15634] [client 172.241.38.198:58917] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 01:54:47.277142 2026] [proxy_fcgi:error] [pid 15629:tid 15654] [client 74.7.228.11:45550] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 01:59:38.140036 2026] [proxy_fcgi:error] [pid 15631:tid 15703] [client 74.7.227.43:41054] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 02:02:34.904514 2026] [:error] [pid 28098:tid 28117] [client 34.17.147.44:39282] [client 34.17.147.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "afzTusvhwfljlt8trSpFqAAAAFE"]
[Fri May 08 03:33:51.651978 2026] [:error] [pid 20904:tid 20932] [client 34.17.25.88:51402] [client 34.17.25.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "afzpHyhyrEeyp7J4V-I10QAAABE"]
[Fri May 08 03:38:27.357155 2026] [proxy_fcgi:error] [pid 51008:tid 51061] [client 103.208.218.164:51910] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 03:38:30.167321 2026] [proxy_fcgi:error] [pid 51008:tid 51071] [client 103.208.218.164:51910] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 03:38:31.851939 2026] [proxy_fcgi:error] [pid 51008:tid 51066] [client 98.130.43.189:42326] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 03:41:10.589790 2026] [proxy_fcgi:error] [pid 51008:tid 51053] [client 69.49.112.66:46664] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 04:15:57.976417 2026] [proxy_fcgi:error] [pid 51113:tid 51124] [client 192.175.111.233:34670] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 04:15:59.552299 2026] [proxy_fcgi:error] [pid 51007:tid 51030] [client 192.175.111.232:41561] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 04:16:02.714724 2026] [proxy_fcgi:error] [pid 51009:tid 51082] [client 192.175.111.228:61551] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 04:16:03.807835 2026] [proxy_fcgi:error] [pid 51008:tid 51071] [client 192.175.111.229:5374] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 04:16:08.021963 2026] [proxy_fcgi:error] [pid 51008:tid 51049] [client 192.175.111.251:37263] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 04:16:09.558827 2026] [proxy_fcgi:error] [pid 51113:tid 51127] [client 192.175.111.243:10400] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 04:16:12.334871 2026] [proxy_fcgi:error] [pid 51008:tid 51061] [client 192.175.111.247:51086] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 04:16:13.289485 2026] [proxy_fcgi:error] [pid 51007:tid 51035] [client 192.175.111.241:51773] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 04:53:47.408608 2026] [:error] [pid 51113:tid 51126] [client 34.182.122.224:53978] [client 34.182.122.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.local"] [unique_id "afz720Qfs7sWtqkpQIfytgAAAMs"]
[Fri May 08 04:53:47.410202 2026] [:error] [pid 51009:tid 51078] [client 34.182.122.224:53992] [client 34.182.122.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/admin/.env"] [unique_id "afz72-B0GbUWhxgzX9WJiQAAAII"]
[Fri May 08 04:53:47.457714 2026] [:error] [pid 51007:tid 51027] [client 34.182.122.224:53996] [client 34.182.122.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.dev"] [unique_id "afz721MagSGstWKyzzVn9wAAAAU"]
[Fri May 08 04:53:47.466134 2026] [:error] [pid 51009:tid 51094] [client 34.182.122.224:54006] [client 34.182.122.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.docker"] [unique_id "afz72-B0GbUWhxgzX9WJigAAAJI"]
[Fri May 08 04:53:47.575078 2026] [:error] [pid 51008:tid 51060] [client 34.182.122.224:54018] [client 34.182.122.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "afz723B58C2Y1tgLtuL25QAAAEs"]
[Fri May 08 04:53:47.597574 2026] [:error] [pid 51008:tid 51057] [client 34.182.122.224:54030] [client 34.182.122.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/app/.env"] [unique_id "afz723B58C2Y1tgLtuL25gAAAEg"]
[Fri May 08 04:53:47.608970 2026] [:error] [pid 51007:tid 51045] [client 34.182.122.224:54042] [client 34.182.122.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/app/.env.local"] [unique_id "afz721MagSGstWKyzzVn-AAAABc"]
[Fri May 08 04:53:47.610039 2026] [:error] [pid 51009:tid 51100] [client 34.182.122.224:54050] [client 34.182.122.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/api/.env"] [unique_id "afz72-B0GbUWhxgzX9WJiwAAAJg"]
[Fri May 08 04:53:47.701868 2026] [:error] [pid 51008:tid 51049] [client 34.182.122.224:54052] [client 34.182.122.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.development.local"] [unique_id "afz723B58C2Y1tgLtuL25wAAAEA"]
[Fri May 08 04:53:47.720880 2026] [:error] [pid 51008:tid 51050] [client 34.182.122.224:54054] [client 34.182.122.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.dev.local"] [unique_id "afz723B58C2Y1tgLtuL26AAAAEE"]
[Fri May 08 05:23:38.935348 2026] [proxy_fcgi:error] [pid 51008:tid 51052] [client 198.57.247.148:29204] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 05:24:18.616758 2026] [proxy_fcgi:error] [pid 34318:tid 34333] [client 80.77.146.194:37554] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 05:26:06.817815 2026] [proxy_fcgi:error] [pid 34318:tid 34344] [client 199.168.184.42:36910] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 05:27:22.099058 2026] [proxy_fcgi:error] [pid 34318:tid 34343] [client 138.197.106.215:49580] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 05:28:00.972158 2026] [proxy_fcgi:error] [pid 51007:tid 51037] [client 27.112.79.157:49316] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 07:29:32.479512 2026] [proxy_fcgi:error] [pid 51007:tid 51030] [client 54.152.193.242:43812] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 08:24:37.253804 2026] [proxy_fcgi:error] [pid 61356:tid 61402] [client 34.18.154.168:38500] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 08:24:37.339195 2026] [proxy_fcgi:error] [pid 61356:tid 61388] [client 34.18.154.168:38512] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 08:24:37.558318 2026] [proxy_fcgi:error] [pid 61356:tid 61394] [client 34.18.154.168:38524] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 08:24:37.675940 2026] [proxy_fcgi:error] [pid 61356:tid 61409] [client 34.18.154.168:38546] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 08:24:37.676541 2026] [proxy_fcgi:error] [pid 61356:tid 61411] [client 34.18.154.168:38540] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 08:24:37.720401 2026] [proxy_fcgi:error] [pid 61356:tid 61389] [client 34.18.154.168:38558] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 08:24:37.903832 2026] [proxy_fcgi:error] [pid 61356:tid 61410] [client 34.18.154.168:38566] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 08:24:38.002297 2026] [proxy_fcgi:error] [pid 61356:tid 61407] [client 34.18.154.168:38580] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 08:24:38.006297 2026] [proxy_fcgi:error] [pid 51113:tid 51138] [client 34.18.154.168:38584] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 08:24:38.766257 2026] [proxy_fcgi:error] [pid 61356:tid 61403] [client 34.18.154.168:38588] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 12:49:45.535996 2026] [proxy_fcgi:error] [pid 61356:tid 61400] [client 54.152.193.242:35988] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 14:55:39.497831 2026] [proxy_fcgi:error] [pid 61356:tid 61390] [client 138.246.253.24:37298] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 15:28:57.986577 2026] [proxy_fcgi:error] [pid 51007:tid 51025] [client 34.122.144.100:49895] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 16:48:18.230633 2026] [:error] [pid 61356:tid 61388] [client 34.17.207.179:60338] [client 34.17.207.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "af2jUox3vpB8oWhUq2NKuQAAAcA"]
[Fri May 08 16:48:18.247012 2026] [:error] [pid 61355:tid 61374] [client 34.17.207.179:60330] [client 34.17.207.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.local"] [unique_id "af2jUvkhJTi30CBXmMltYQAAAY0"]
[Fri May 08 16:48:18.383024 2026] [:error] [pid 51008:tid 51067] [client 34.17.207.179:60354] [client 34.17.207.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.docker"] [unique_id "af2jUnB58C2Y1tgLtuJ8DAAAAFI"]
[Fri May 08 16:48:18.408703 2026] [:error] [pid 61355:tid 61380] [client 34.17.207.179:60362] [client 34.17.207.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.dev.local"] [unique_id "af2jUvkhJTi30CBXmMltYgAAAZM"]
[Fri May 08 16:48:18.660169 2026] [:error] [pid 61355:tid 61369] [client 34.17.207.179:60368] [client 34.17.207.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/app/.env.local"] [unique_id "af2jUvkhJTi30CBXmMltYwAAAYg"]
[Fri May 08 16:48:18.669113 2026] [:error] [pid 61355:tid 61375] [client 34.17.207.179:60364] [client 34.17.207.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.development.local"] [unique_id "af2jUvkhJTi30CBXmMltZAAAAY4"]
[Fri May 08 16:48:18.674072 2026] [:error] [pid 61355:tid 61373] [client 34.17.207.179:60384] [client 34.17.207.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.dev"] [unique_id "af2jUvkhJTi30CBXmMltZQAAAYw"]
[Fri May 08 16:48:18.765037 2026] [:error] [pid 51009:tid 51079] [client 34.17.207.179:60394] [client 34.17.207.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/api/.env"] [unique_id "af2jUuB0GbUWhxgzX9UEZwAAAIM"]
[Fri May 08 16:48:18.979897 2026] [:error] [pid 51113:tid 51116] [client 34.17.207.179:60408] [client 34.17.207.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/admin/.env"] [unique_id "af2jUkQfs7sWtqkpQIdiXAAAAME"]
[Fri May 08 16:48:19.227103 2026] [:error] [pid 51008:tid 51069] [client 34.17.207.179:60422] [client 34.17.207.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/app/.env"] [unique_id "af2jU3B58C2Y1tgLtuJ8DgAAAFQ"]
[Fri May 08 17:23:10.675065 2026] [:error] [pid 51008:tid 51067] [client 103.255.134.61:46314] [client 103.255.134.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.255.134.61, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af2rfnB58C2Y1tgLtuKBLQAAAFI"]
[Fri May 08 17:23:11.018176 2026] [proxy_fcgi:error] [pid 51008:tid 51067] [client 103.255.134.61:46314] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 17:23:11.690705 2026] [:error] [pid 51008:tid 51064] [client 103.255.134.61:46314] [client 103.255.134.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.255.134.61, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af2rf3B58C2Y1tgLtuKBMAAAAE8"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 08 17:23:11.988935 2026] [proxy_fcgi:error] [pid 51008:tid 51064] [client 103.255.134.61:46314] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 08 17:32:13.293594 2026] [:error] [pid 51009:tid 51093] [client 103.152.249.56:52154] [client 103.152.249.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.152.249.56, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af2tneB0GbUWhxgzX9UNJgAAAJE"]
[Fri May 08 17:32:13.669018 2026] [proxy_fcgi:error] [pid 51009:tid 51093] [client 103.152.249.56:52154] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 17:32:13.934080 2026] [:error] [pid 51009:tid 51088] [client 103.152.249.56:52154] [client 103.152.249.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.152.249.56, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af2tneB0GbUWhxgzX9UNKQAAAIw"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 08 17:32:14.255420 2026] [proxy_fcgi:error] [pid 51009:tid 51088] [client 103.152.249.56:52154] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 08 18:33:51.739773 2026] [:error] [pid 61355:tid 61373] [client 67.205.7.2:33286] [client 67.205.7.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.205.7.2, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af28D_khJTi30CBXmMmO1wAAAYw"]
[Fri May 08 18:33:52.105412 2026] [proxy_fcgi:error] [pid 61355:tid 61373] [client 67.205.7.2:33286] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 18:33:55.134729 2026] [:error] [pid 61355:tid 61379] [client 67.205.7.2:33286] [client 67.205.7.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.205.7.2, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af28E_khJTi30CBXmMmO9QAAAZI"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 08 18:33:55.436950 2026] [proxy_fcgi:error] [pid 61355:tid 61379] [client 67.205.7.2:33286] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 08 19:48:41.882144 2026] [:error] [pid 51113:tid 51125] [client 208.109.231.205:47142] [client 208.109.231.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.109.231.205, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af3NmUQfs7sWtqkpQId0cgAAAMo"]
[Fri May 08 19:48:42.222634 2026] [proxy_fcgi:error] [pid 51113:tid 51125] [client 208.109.231.205:47142] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 20:05:53.994655 2026] [proxy_fcgi:error] [pid 51009:tid 51082] [client 34.32.117.81:35804] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 20:43:40.976507 2026] [:error] [pid 61356:tid 61401] [client 178.18.243.17:48254] [client 178.18.243.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.18.243.17, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af3afIx3vpB8oWhUq2OxywAAAc0"]
[Fri May 08 20:43:42.670798 2026] [proxy_fcgi:error] [pid 61356:tid 61401] [client 178.18.243.17:48254] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 20:43:43.016910 2026] [:error] [pid 61356:tid 61388] [client 178.18.243.17:48254] [client 178.18.243.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.18.243.17, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af3af4x3vpB8oWhUq2Ox0AAAAcA"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 08 20:43:43.337251 2026] [proxy_fcgi:error] [pid 61356:tid 61388] [client 178.18.243.17:48254] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 08 21:07:28.407417 2026] [:error] [pid 51113:tid 51124] [client 52.18.25.48:48706] [client 52.18.25.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.18.25.48, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af3gEEQfs7sWtqkpQId9iQAAAMk"]
[Fri May 08 21:07:28.888055 2026] [proxy_fcgi:error] [pid 51113:tid 51124] [client 52.18.25.48:48706] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 21:07:29.258793 2026] [:error] [pid 51113:tid 51119] [client 52.18.25.48:48706] [client 52.18.25.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.18.25.48, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af3gEUQfs7sWtqkpQId9igAAAMQ"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 08 21:07:29.727681 2026] [proxy_fcgi:error] [pid 51113:tid 51119] [client 52.18.25.48:48706] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 08 21:33:19.659095 2026] [:error] [pid 61356:tid 61388] [client 103.72.97.232:55928] [client 103.72.97.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.72.97.232, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af3mH4x3vpB8oWhUq2PH5wAAAcA"]
[Fri May 08 21:33:20.026748 2026] [proxy_fcgi:error] [pid 61356:tid 61388] [client 103.72.97.232:55928] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 21:33:20.508826 2026] [:error] [pid 61356:tid 61395] [client 103.72.97.232:55928] [client 103.72.97.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.72.97.232, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af3mIIx3vpB8oWhUq2PH6AAAAcc"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 08 21:33:20.817807 2026] [proxy_fcgi:error] [pid 61356:tid 61395] [client 103.72.97.232:55928] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 08 22:03:44.170357 2026] [:error] [pid 51008:tid 51073] [client 44.5.24.195:60846] [client 44.5.24.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 44.5.24.195, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af3tQHB58C2Y1tgLtuKx3wAAAFg"]
[Fri May 08 22:03:44.726408 2026] [proxy_fcgi:error] [pid 51008:tid 51073] [client 44.5.24.195:60846] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 22:03:45.069586 2026] [:error] [pid 51008:tid 51065] [client 44.5.24.195:60846] [client 44.5.24.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 44.5.24.195, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af3tQXB58C2Y1tgLtuKx4wAAAFA"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 08 22:03:45.380443 2026] [proxy_fcgi:error] [pid 51008:tid 51065] [client 44.5.24.195:60846] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 08 22:05:21.706462 2026] [proxy_fcgi:error] [pid 61356:tid 61411] [client 138.197.159.1:56000] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 22:05:22.471862 2026] [proxy_fcgi:error] [pid 61356:tid 61407] [client 138.197.159.1:56016] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: http://southerncrosscentre.au/
[Fri May 08 22:05:23.690822 2026] [proxy_fcgi:error] [pid 61355:tid 61375] [client 138.197.159.1:38914] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 22:05:29.269700 2026] [proxy_fcgi:error] [pid 61355:tid 61382] [client 138.197.159.1:39030] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/
[Fri May 08 22:05:56.194482 2026] [:error] [pid 61356:tid 61391] [client 209.42.19.197:45946] [client 209.42.19.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.42.19.197, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af3txIx3vpB8oWhUq2PWIwAAAcM"]
[Fri May 08 22:05:56.530275 2026] [proxy_fcgi:error] [pid 61356:tid 61391] [client 209.42.19.197:45946] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 22:05:56.838710 2026] [:error] [pid 61356:tid 61405] [client 209.42.19.197:45946] [client 209.42.19.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.42.19.197, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af3txIx3vpB8oWhUq2PWJAAAAdE"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 08 22:05:57.148480 2026] [proxy_fcgi:error] [pid 61356:tid 61405] [client 209.42.19.197:45946] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 08 22:41:48.569923 2026] [:error] [pid 51007:tid 51022] [client 34.40.222.85:39136] [client 34.40.222.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "af32LFMagSGstWKyzzUAPwAAAAA"]
[Fri May 08 23:58:54.966847 2026] [:error] [pid 51009:tid 51082] [client 65.21.250.144:33538] [client 65.21.250.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.21.250.144, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af4IPuB0GbUWhxgzX9VxUAAAAIY"]
[Fri May 08 23:58:56.632031 2026] [proxy_fcgi:error] [pid 51009:tid 51082] [client 65.21.250.144:33538] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 08 23:58:56.949835 2026] [:error] [pid 51009:tid 51080] [client 65.21.250.144:33538] [client 65.21.250.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.21.250.144, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af4IQOB0GbUWhxgzX9VxUQAAAIQ"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 08 23:58:57.258277 2026] [proxy_fcgi:error] [pid 51009:tid 51080] [client 65.21.250.144:33538] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 00:09:46.187796 2026] [:error] [pid 61356:tid 61388] [client 217.154.37.58:53218] [client 217.154.37.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.154.37.58, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af4Kyox3vpB8oWhUq2MC_QAAAcA"]
[Sat May 09 00:09:46.549746 2026] [proxy_fcgi:error] [pid 61356:tid 61388] [client 217.154.37.58:53218] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 00:09:46.868605 2026] [:error] [pid 61356:tid 61398] [client 217.154.37.58:53218] [client 217.154.37.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.154.37.58, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af4Kyox3vpB8oWhUq2MC_wAAAco"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 00:09:47.223568 2026] [proxy_fcgi:error] [pid 61356:tid 61398] [client 217.154.37.58:53218] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 00:25:43.229186 2026] [:error] [pid 61355:tid 61379] [client 142.93.9.162:33598] [client 142.93.9.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.9.162, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af4Oh_khJTi30CBXmMkEkQAAAZI"]
[Sat May 09 00:25:43.604409 2026] [proxy_fcgi:error] [pid 61355:tid 61379] [client 142.93.9.162:33598] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 00:25:44.450542 2026] [:error] [pid 61355:tid 61374] [client 142.93.9.162:33598] [client 142.93.9.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.9.162, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af4OiPkhJTi30CBXmMkElAAAAY0"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 00:25:44.815471 2026] [proxy_fcgi:error] [pid 61355:tid 61374] [client 142.93.9.162:33598] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 00:50:29.592910 2026] [proxy_fcgi:error] [pid 51009:tid 51100] [client 74.7.228.57:45564] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:07:40.285930 2026] [:error] [pid 51113:tid 51118] [client 152.42.134.236:51618] [client 152.42.134.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.134.236, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af4YXEQfs7sWtqkpQIeXOwAAAMM"]
[Sat May 09 01:07:40.572336 2026] [proxy_fcgi:error] [pid 51113:tid 51118] [client 152.42.134.236:51618] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:07:40.886095 2026] [:error] [pid 51113:tid 51130] [client 152.42.134.236:51618] [client 152.42.134.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.134.236, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af4YXEQfs7sWtqkpQIeXPAAAAM8"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 01:07:41.199173 2026] [proxy_fcgi:error] [pid 51113:tid 51130] [client 152.42.134.236:51618] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 01:15:07.534250 2026] [proxy_fcgi:error] [pid 61317:tid 61341] [client 138.246.253.24:50188] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:15.115126 2026] [:error] [pid 61355:tid 61373] [client 13.200.8.87:39484] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "af4da_khJTi30CBXmMkseAAAAYw"]
[Sat May 09 01:29:16.149397 2026] [proxy_fcgi:error] [pid 61317:tid 61337] [client 13.200.8.87:39532] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:16.781461 2026] [:error] [pid 61355:tid 61380] [client 13.200.8.87:39564] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4dbPkhJTi30CBXmMksfwAAAZM"]
[Sat May 09 01:29:17.735669 2026] [proxy_fcgi:error] [pid 61355:tid 61377] [client 13.200.8.87:39584] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:18.654020 2026] [proxy_fcgi:error] [pid 61355:tid 61375] [client 13.200.8.87:42062] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:19.576322 2026] [proxy_fcgi:error] [pid 51007:tid 51043] [client 13.200.8.87:42094] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:20.526119 2026] [proxy_fcgi:error] [pid 61355:tid 61381] [client 13.200.8.87:42120] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:21.466145 2026] [proxy_fcgi:error] [pid 61355:tid 61376] [client 13.200.8.87:42130] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:22.387103 2026] [proxy_fcgi:error] [pid 51008:tid 51057] [client 13.200.8.87:42152] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:23.316623 2026] [proxy_fcgi:error] [pid 61317:tid 61330] [client 13.200.8.87:42186] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:24.240560 2026] [proxy_fcgi:error] [pid 51007:tid 51038] [client 13.200.8.87:42214] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:25.164535 2026] [proxy_fcgi:error] [pid 61355:tid 61385] [client 13.200.8.87:42236] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:26.112723 2026] [proxy_fcgi:error] [pid 61317:tid 61337] [client 13.200.8.87:42282] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:27.031785 2026] [proxy_fcgi:error] [pid 61356:tid 61396] [client 13.200.8.87:42308] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:27.988712 2026] [proxy_fcgi:error] [pid 61317:tid 61335] [client 13.200.8.87:49202] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:28.931485 2026] [proxy_fcgi:error] [pid 51009:tid 51093] [client 13.200.8.87:49236] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:29.862105 2026] [proxy_fcgi:error] [pid 51007:tid 51022] [client 13.200.8.87:49280] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:30.796937 2026] [proxy_fcgi:error] [pid 51009:tid 51091] [client 13.200.8.87:49308] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:31.729874 2026] [proxy_fcgi:error] [pid 61355:tid 61372] [client 13.200.8.87:49336] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:32.664651 2026] [proxy_fcgi:error] [pid 51008:tid 51058] [client 13.200.8.87:49374] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:33.596264 2026] [proxy_fcgi:error] [pid 51009:tid 51086] [client 13.200.8.87:49408] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:34.503833 2026] [proxy_fcgi:error] [pid 61355:tid 61381] [client 13.200.8.87:49436] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:35.455739 2026] [proxy_fcgi:error] [pid 61356:tid 61389] [client 13.200.8.87:49448] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:36.465858 2026] [proxy_fcgi:error] [pid 61355:tid 61376] [client 13.200.8.87:49470] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:37.414899 2026] [proxy_fcgi:error] [pid 51008:tid 51063] [client 13.200.8.87:49498] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:38.398538 2026] [proxy_fcgi:error] [pid 61355:tid 61378] [client 13.200.8.87:47612] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:39.323095 2026] [proxy_fcgi:error] [pid 61356:tid 61406] [client 13.200.8.87:47638] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:40.283107 2026] [proxy_fcgi:error] [pid 51008:tid 51064] [client 13.200.8.87:47666] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:41.249717 2026] [proxy_fcgi:error] [pid 61356:tid 61411] [client 13.200.8.87:47690] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:41.716290 2026] [proxy_fcgi:error] [pid 61356:tid 61394] [client 13.200.8.87:47690] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:42.649894 2026] [proxy_fcgi:error] [pid 34318:tid 34321] [client 13.200.8.87:47726] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:44.689624 2026] [proxy_fcgi:error] [pid 51009:tid 51097] [client 13.200.8.87:47742] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:45.899907 2026] [proxy_fcgi:error] [pid 61317:tid 61325] [client 13.200.8.87:47776] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:46.532031 2026] [:error] [pid 51113:tid 51138] [client 13.200.8.87:47836] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/phpinfo.php.bak"] [unique_id "af4dikQfs7sWtqkpQIeamgAAANc"]
[Sat May 09 01:29:46.693536 2026] [:error] [pid 51113:tid 51130] [client 13.200.8.87:47836] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/phpinfo.php.old"] [unique_id "af4dikQfs7sWtqkpQIeamwAAAM8"]
[Sat May 09 01:29:47.137583 2026] [proxy_fcgi:error] [pid 51113:tid 51134] [client 13.200.8.87:47836] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:47.773731 2026] [:error] [pid 51007:tid 51033] [client 13.200.8.87:33278] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/info.php.bak"] [unique_id "af4di1MagSGstWKyzzUZuwAAAAs"]
[Sat May 09 01:29:48.251803 2026] [proxy_fcgi:error] [pid 51007:tid 51025] [client 13.200.8.87:33278] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:49.208158 2026] [proxy_fcgi:error] [pid 61317:tid 61336] [client 13.200.8.87:33314] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:50.116706 2026] [proxy_fcgi:error] [pid 34318:tid 34339] [client 13.200.8.87:33366] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:51.025160 2026] [proxy_fcgi:error] [pid 34318:tid 34321] [client 13.200.8.87:33416] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:51.940127 2026] [proxy_fcgi:error] [pid 61356:tid 61388] [client 13.200.8.87:33500] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:52.860195 2026] [proxy_fcgi:error] [pid 51009:tid 51082] [client 13.200.8.87:33534] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:53.787129 2026] [proxy_fcgi:error] [pid 61356:tid 61410] [client 13.200.8.87:33594] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:54.715934 2026] [proxy_fcgi:error] [pid 61356:tid 61398] [client 13.200.8.87:33640] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:55.666796 2026] [proxy_fcgi:error] [pid 61356:tid 61412] [client 13.200.8.87:33702] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:56.585569 2026] [proxy_fcgi:error] [pid 34318:tid 34335] [client 13.200.8.87:33756] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:57.503294 2026] [proxy_fcgi:error] [pid 61356:tid 61399] [client 13.200.8.87:33796] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:58.440902 2026] [proxy_fcgi:error] [pid 61355:tid 61379] [client 13.200.8.87:38542] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:29:59.383808 2026] [proxy_fcgi:error] [pid 51008:tid 51068] [client 13.200.8.87:38576] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:30:00.371503 2026] [proxy_fcgi:error] [pid 51007:tid 51031] [client 13.200.8.87:38602] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:30:01.305131 2026] [proxy_fcgi:error] [pid 51007:tid 51038] [client 13.200.8.87:38620] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:30:28.144363 2026] [:error] [pid 61355:tid 61380] [client 34.26.19.194:40500] [client 34.26.19.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "af4dtPkhJTi30CBXmMktqAAAAZM"]
[Sat May 09 01:37:01.010903 2026] [:error] [pid 61356:tid 61389] [client 51.210.158.81:53286] [client 51.210.158.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.158.81, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af4fPYx3vpB8oWhUq2MqOQAAAcE"]
[Sat May 09 01:37:01.372406 2026] [proxy_fcgi:error] [pid 61356:tid 61389] [client 51.210.158.81:53286] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:37:02.043469 2026] [:error] [pid 61356:tid 61398] [client 51.210.158.81:53286] [client 51.210.158.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.158.81, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af4fPox3vpB8oWhUq2MqPAAAAco"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 01:37:02.351937 2026] [proxy_fcgi:error] [pid 61356:tid 61398] [client 51.210.158.81:53286] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 01:51:14.215578 2026] [:error] [pid 61355:tid 61372] [client 54.176.231.244:54184] [client 54.176.231.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "af4ikvkhJTi30CBXmMlEEAAAAYs"]
[Sat May 09 01:51:15.418922 2026] [proxy_fcgi:error] [pid 61355:tid 61376] [client 54.176.231.244:35806] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:16.078908 2026] [:error] [pid 51113:tid 51118] [client 54.176.231.244:35832] [client 54.176.231.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4ilEQfs7sWtqkpQIeePAAAAMM"]
[Sat May 09 01:51:17.035375 2026] [proxy_fcgi:error] [pid 51113:tid 51119] [client 54.176.231.244:35844] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:17.989707 2026] [proxy_fcgi:error] [pid 51007:tid 51035] [client 54.176.231.244:35872] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:18.928764 2026] [proxy_fcgi:error] [pid 61356:tid 61405] [client 54.176.231.244:35906] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:19.892982 2026] [proxy_fcgi:error] [pid 51007:tid 51046] [client 54.176.231.244:35938] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:20.832662 2026] [proxy_fcgi:error] [pid 61356:tid 61406] [client 54.176.231.244:35946] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:21.793987 2026] [proxy_fcgi:error] [pid 61356:tid 61389] [client 54.176.231.244:35994] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:22.754373 2026] [proxy_fcgi:error] [pid 51007:tid 51044] [client 54.176.231.244:36034] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:23.723312 2026] [proxy_fcgi:error] [pid 34318:tid 34341] [client 54.176.231.244:36056] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:24.700914 2026] [proxy_fcgi:error] [pid 61356:tid 61409] [client 54.176.231.244:36092] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:25.656493 2026] [proxy_fcgi:error] [pid 51009:tid 51096] [client 54.176.231.244:39730] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:26.614328 2026] [proxy_fcgi:error] [pid 51009:tid 51099] [client 54.176.231.244:39746] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:27.560364 2026] [proxy_fcgi:error] [pid 51009:tid 51093] [client 54.176.231.244:39776] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:28.572921 2026] [proxy_fcgi:error] [pid 51007:tid 51036] [client 54.176.231.244:39816] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:29.551126 2026] [proxy_fcgi:error] [pid 51007:tid 51042] [client 54.176.231.244:39836] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:30.520932 2026] [proxy_fcgi:error] [pid 51007:tid 51045] [client 54.176.231.244:39854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:31.470112 2026] [proxy_fcgi:error] [pid 34318:tid 34322] [client 54.176.231.244:39892] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:32.434421 2026] [proxy_fcgi:error] [pid 34318:tid 34334] [client 54.176.231.244:39916] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:33.380060 2026] [proxy_fcgi:error] [pid 61317:tid 61335] [client 54.176.231.244:39936] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:34.363121 2026] [proxy_fcgi:error] [pid 61356:tid 61389] [client 54.176.231.244:39962] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:35.316717 2026] [proxy_fcgi:error] [pid 51009:tid 51092] [client 54.176.231.244:55150] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:36.275811 2026] [proxy_fcgi:error] [pid 61356:tid 61404] [client 54.176.231.244:55172] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:37.258872 2026] [proxy_fcgi:error] [pid 61356:tid 61405] [client 54.176.231.244:55202] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:38.246005 2026] [proxy_fcgi:error] [pid 61356:tid 61408] [client 54.176.231.244:55234] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:39.231009 2026] [proxy_fcgi:error] [pid 61356:tid 61411] [client 54.176.231.244:55256] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:40.203832 2026] [proxy_fcgi:error] [pid 61355:tid 61372] [client 54.176.231.244:55286] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:41.488718 2026] [proxy_fcgi:error] [pid 61355:tid 61361] [client 54.176.231.244:55316] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:42.056890 2026] [proxy_fcgi:error] [pid 61355:tid 61373] [client 54.176.231.244:55316] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:43.072722 2026] [proxy_fcgi:error] [pid 61355:tid 61379] [client 54.176.231.244:55354] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:45.164559 2026] [proxy_fcgi:error] [pid 51009:tid 51080] [client 54.176.231.244:55374] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:46.278778 2026] [proxy_fcgi:error] [pid 51009:tid 51083] [client 54.176.231.244:44494] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:46.942161 2026] [:error] [pid 61355:tid 61373] [client 54.176.231.244:44504] [client 54.176.231.244] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/phpinfo.php.bak"] [unique_id "af4isvkhJTi30CBXmMlEawAAAYw"]
[Sat May 09 01:51:47.109517 2026] [:error] [pid 61355:tid 61365] [client 54.176.231.244:44504] [client 54.176.231.244] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/phpinfo.php.old"] [unique_id "af4is_khJTi30CBXmMlEbwAAAYQ"]
[Sat May 09 01:51:47.707009 2026] [proxy_fcgi:error] [pid 61355:tid 61370] [client 54.176.231.244:44504] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:48.369939 2026] [:error] [pid 34318:tid 34337] [client 54.176.231.244:44538] [client 54.176.231.244] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/info.php.bak"] [unique_id "af4itMr3guirgJiKhzAHeQAAARE"]
[Sat May 09 01:51:48.885272 2026] [proxy_fcgi:error] [pid 34318:tid 34325] [client 54.176.231.244:44538] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:49.926040 2026] [proxy_fcgi:error] [pid 61356:tid 61407] [client 54.176.231.244:44574] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:51.016611 2026] [proxy_fcgi:error] [pid 61355:tid 61364] [client 54.176.231.244:44604] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:52.126517 2026] [proxy_fcgi:error] [pid 61356:tid 61393] [client 54.176.231.244:44646] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:53.100327 2026] [proxy_fcgi:error] [pid 61355:tid 61381] [client 54.176.231.244:44670] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:54.061855 2026] [proxy_fcgi:error] [pid 61355:tid 61369] [client 54.176.231.244:44694] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:55.009198 2026] [proxy_fcgi:error] [pid 51008:tid 51062] [client 54.176.231.244:35106] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:55.982428 2026] [proxy_fcgi:error] [pid 61355:tid 61366] [client 54.176.231.244:35170] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:56.946055 2026] [proxy_fcgi:error] [pid 61355:tid 61384] [client 54.176.231.244:35194] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:57.933362 2026] [proxy_fcgi:error] [pid 51007:tid 51038] [client 54.176.231.244:35260] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:58.910875 2026] [proxy_fcgi:error] [pid 51007:tid 51037] [client 54.176.231.244:35298] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:51:59.904592 2026] [proxy_fcgi:error] [pid 51008:tid 51071] [client 54.176.231.244:35364] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:52:00.932918 2026] [proxy_fcgi:error] [pid 61317:tid 61337] [client 54.176.231.244:35406] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:52:01.877763 2026] [proxy_fcgi:error] [pid 61355:tid 61370] [client 54.176.231.244:35430] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 01:52:02.820599 2026] [proxy_fcgi:error] [pid 61356:tid 61396] [client 54.176.231.244:35462] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 02:33:05.870007 2026] [:error] [pid 61355:tid 61383] [client 20.244.183.44:19489] [client 20.244.183.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.244.183.44, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af4sYfkhJTi30CBXmMlcNwAAAZY"]
[Sat May 09 02:33:06.228862 2026] [proxy_fcgi:error] [pid 61355:tid 61383] [client 20.244.183.44:19489] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 02:33:06.700479 2026] [:error] [pid 61355:tid 61374] [client 20.244.183.44:19489] [client 20.244.183.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.244.183.44, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af4sYvkhJTi30CBXmMlcPAAAAY0"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 02:33:06.994955 2026] [proxy_fcgi:error] [pid 61355:tid 61374] [client 20.244.183.44:19489] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 02:33:51.309735 2026] [proxy_fcgi:error] [pid 51007:tid 51046] [client 122.161.79.130:5046] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 02:54:06.869307 2026] [:error] [pid 61355:tid 61373] [client 152.32.209.93:39570] [client 152.32.209.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.32.209.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af4xTvkhJTi30CBXmMlqWwAAAYw"]
[Sat May 09 02:54:07.538283 2026] [proxy_fcgi:error] [pid 61355:tid 61373] [client 152.32.209.93:39570] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 02:54:08.225637 2026] [:error] [pid 61355:tid 61368] [client 152.32.209.93:39570] [client 152.32.209.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.32.209.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af4xUPkhJTi30CBXmMlqYwAAAYc"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 02:54:08.551518 2026] [proxy_fcgi:error] [pid 61355:tid 61368] [client 152.32.209.93:39570] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 03:37:00.424956 2026] [:error] [pid 44219:tid 44239] [client 137.184.223.30:46474] [client 137.184.223.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.223.30, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af47XAyQXxnoCxv60m7cYAAAAAk"]
[Sat May 09 03:37:02.073178 2026] [proxy_fcgi:error] [pid 44219:tid 44239] [client 137.184.223.30:46474] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 03:51:23.806873 2026] [:error] [pid 36311:tid 36317] [client 198.251.71.113:53408] [client 198.251.71.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.251.71.113, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af4-u0QtmBaqm8IvarxIGQAAAMM"]
[Sat May 09 03:51:24.390969 2026] [proxy_fcgi:error] [pid 36311:tid 36317] [client 198.251.71.113:53408] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 03:51:24.891980 2026] [:error] [pid 36311:tid 36328] [client 198.251.71.113:53408] [client 198.251.71.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.251.71.113, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af4-vEQtmBaqm8IvarxIHAAAAM4"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 03:51:25.204702 2026] [proxy_fcgi:error] [pid 36311:tid 36328] [client 198.251.71.113:53408] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 04:00:14.554148 2026] [:error] [pid 9293:tid 9318] [client 45.130.83.113:60107] [client 45.130.83.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.113, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af5AzpR__qEzV5O6Z2OF0QAAANU"]
[Sat May 09 04:00:15.008252 2026] [proxy_fcgi:error] [pid 9293:tid 9318] [client 45.130.83.113:60107] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 04:00:15.723925 2026] [proxy_fcgi:error] [pid 9293:tid 9297] [client 45.130.83.113:60107] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 04:00:17.774500 2026] [proxy_fcgi:error] [pid 9187:tid 9276] [client 45.130.83.116:56923] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 04:05:04.000302 2026] [:error] [pid 9293:tid 9311] [client 198.251.71.113:53746] [client 198.251.71.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.251.71.113, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af5B75R__qEzV5O6Z2OIugAAAM4"]
[Sat May 09 04:05:04.585761 2026] [proxy_fcgi:error] [pid 9293:tid 9311] [client 198.251.71.113:53746] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 04:05:05.361866 2026] [:error] [pid 9293:tid 9300] [client 198.251.71.113:53746] [client 198.251.71.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.251.71.113, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af5B8ZR__qEzV5O6Z2OIxgAAAMM"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 04:05:05.672144 2026] [proxy_fcgi:error] [pid 9293:tid 9300] [client 198.251.71.113:53746] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 04:22:07.758969 2026] [proxy_fcgi:error] [pid 9920:tid 9928] [client 5.133.192.133:45065] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 04:27:51.158676 2026] [:error] [pid 9186:tid 9236] [client 5.134.122.237:33414] [client 5.134.122.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.134.122.237, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af5HRxW4eFOEw1mKOgJnbQAAAEo"]
[Sat May 09 04:27:51.557555 2026] [proxy_fcgi:error] [pid 9186:tid 9236] [client 5.134.122.237:33414] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 04:27:51.944060 2026] [:error] [pid 9186:tid 9232] [client 5.134.122.237:33414] [client 5.134.122.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.134.122.237, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af5HRxW4eFOEw1mKOgJnbgAAAEY"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 04:27:52.260527 2026] [proxy_fcgi:error] [pid 9186:tid 9232] [client 5.134.122.237:33414] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 04:33:40.891160 2026] [:error] [pid 9187:tid 9258] [client 13.200.8.87:56182] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "af5IpBC7An6gkXsRsaHJzAAAAIU"]
[Sat May 09 04:33:41.916939 2026] [proxy_fcgi:error] [pid 9760:tid 9776] [client 13.200.8.87:56200] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 04:33:42.546120 2026] [:error] [pid 9187:tid 9264] [client 13.200.8.87:56206] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "af5IphC7An6gkXsRsaHJ0QAAAIs"]
[Sat May 09 04:33:43.178447 2026] [:error] [pid 9760:tid 9790] [client 13.200.8.87:56218] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.local"] [unique_id "af5Ip2IkCp-C_fh0s7L7sAAAAVg"]
[Sat May 09 04:33:43.808797 2026] [:error] [pid 9186:tid 9240] [client 13.200.8.87:56236] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.production"] [unique_id "af5IpxW4eFOEw1mKOgJoxQAAAE4"]
[Sat May 09 04:33:44.456698 2026] [:error] [pid 9187:tid 9263] [client 13.200.8.87:56254] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.staging"] [unique_id "af5IqBC7An6gkXsRsaHJ0wAAAIo"]
[Sat May 09 04:33:45.084087 2026] [:error] [pid 9833:tid 9849] [client 13.200.8.87:56278] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.development"] [unique_id "af5IqSM9JmxIS0KGZUAmVgAAAYs"]
[Sat May 09 04:33:45.715275 2026] [:error] [pid 9187:tid 9265] [client 13.200.8.87:56310] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.test"] [unique_id "af5IqRC7An6gkXsRsaHJ3gAAAIw"]
[Sat May 09 04:33:46.350724 2026] [:error] [pid 9186:tid 9230] [client 13.200.8.87:56348] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.remote"] [unique_id "af5IqhW4eFOEw1mKOgJoxgAAAEQ"]
[Sat May 09 04:33:46.984249 2026] [:error] [pid 9833:tid 9854] [client 13.200.8.87:56376] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "af5IqiM9JmxIS0KGZUAmWAAAAZA"]
[Sat May 09 04:33:47.614005 2026] [:error] [pid 9187:tid 9274] [client 13.200.8.87:49924] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.backup"] [unique_id "af5IqxC7An6gkXsRsaHJ5QAAAJU"]
[Sat May 09 04:33:48.240205 2026] [:error] [pid 9293:tid 9314] [client 13.200.8.87:49942] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.save"] [unique_id "af5IrJR__qEzV5O6Z2OhggAAANE"]
[Sat May 09 04:33:48.872553 2026] [:error] [pid 9920:tid 9925] [client 13.200.8.87:49960] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.old"] [unique_id "af5IrExitGYhlzgZb5ZFeAAAAcM"]
[Sat May 09 04:33:49.553564 2026] [:error] [pid 9833:tid 9848] [client 13.200.8.87:49990] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.sample"] [unique_id "af5IrSM9JmxIS0KGZUAmXAAAAYo"]
[Sat May 09 04:33:50.183485 2026] [:error] [pid 9663:tid 9684] [client 13.200.8.87:50020] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.example"] [unique_id "af5IrpcWIu01SCxbjwu2wgAAARI"]
[Sat May 09 04:33:50.809983 2026] [:error] [pid 9187:tid 9270] [client 13.200.8.87:50062] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.dev"] [unique_id "af5IrhC7An6gkXsRsaHJ6gAAAJE"]
[Sat May 09 04:33:51.436772 2026] [:error] [pid 9293:tid 9307] [client 13.200.8.87:50082] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.prod"] [unique_id "af5Ir5R__qEzV5O6Z2OhiwAAAMo"]
[Sat May 09 04:33:52.078070 2026] [:error] [pid 9293:tid 9314] [client 13.200.8.87:50100] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.stage"] [unique_id "af5IsJR__qEzV5O6Z2OhkQAAANE"]
[Sat May 09 04:33:52.717023 2026] [:error] [pid 9920:tid 9926] [client 13.200.8.87:50122] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.ci"] [unique_id "af5IsExitGYhlzgZb5ZFggAAAcQ"]
[Sat May 09 04:33:53.346986 2026] [:error] [pid 9187:tid 9276] [client 13.200.8.87:50140] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.docker"] [unique_id "af5IsRC7An6gkXsRsaHJ7wAAAJc"]
[Sat May 09 04:33:53.978656 2026] [:error] [pid 9187:tid 9259] [client 13.200.8.87:50164] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.live"] [unique_id "af5IsRC7An6gkXsRsaHJ9QAAAIY"]
[Sat May 09 04:33:54.620666 2026] [:error] [pid 9920:tid 9928] [client 13.200.8.87:50190] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.preprod"] [unique_id "af5IskxitGYhlzgZb5ZFhgAAAcY"]
[Sat May 09 04:33:55.250948 2026] [:error] [pid 9920:tid 9935] [client 13.200.8.87:50210] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.uat"] [unique_id "af5Is0xitGYhlzgZb5ZFiAAAAc0"]
[Sat May 09 04:33:55.877739 2026] [:error] [pid 9920:tid 9923] [client 13.200.8.87:50248] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.dist"] [unique_id "af5Is0xitGYhlzgZb5ZFigAAAcE"]
[Sat May 09 04:33:56.502824 2026] [:error] [pid 9186:tid 9242] [client 13.200.8.87:50274] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.swp"] [unique_id "af5ItBW4eFOEw1mKOgJo0wAAAFA"]
[Sat May 09 04:33:57.135967 2026] [:error] [pid 9293:tid 9306] [client 13.200.8.87:50302] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env~"] [unique_id "af5ItZR__qEzV5O6Z2OhnwAAAMk"]
[Sat May 09 04:33:57.764047 2026] [:error] [pid 9920:tid 9929] [client 13.200.8.87:48246] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env1"] [unique_id "af5ItUxitGYhlzgZb5ZFkQAAAcc"]
[Sat May 09 04:33:58.398744 2026] [:error] [pid 9663:tid 9689] [client 13.200.8.87:48282] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env2"] [unique_id "af5ItpcWIu01SCxbjwu2yQAAARc"]
[Sat May 09 04:33:59.035768 2026] [:error] [pid 9663:tid 9686] [client 13.200.8.87:48312] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env_copy"] [unique_id "af5It5cWIu01SCxbjwu2ygAAARQ"]
[Sat May 09 04:33:59.670927 2026] [:error] [pid 9760:tid 9776] [client 13.200.8.87:48336] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.txt"] [unique_id "af5It2IkCp-C_fh0s7L7vgAAAUo"]
[Sat May 09 04:34:00.303798 2026] [:error] [pid 9293:tid 9301] [client 13.200.8.87:48362] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.json"] [unique_id "af5IuJR__qEzV5O6Z2OhqAAAAMQ"]
[Sat May 09 04:34:00.936779 2026] [:error] [pid 9187:tid 9270] [client 13.200.8.87:48388] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.yaml"] [unique_id "af5IuBC7An6gkXsRsaHKAwAAAJE"]
[Sat May 09 04:34:01.564871 2026] [:error] [pid 9293:tid 9314] [client 13.200.8.87:48394] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env.yml"] [unique_id "af5IuZR__qEzV5O6Z2OhrQAAANE"]
[Sat May 09 04:34:02.203682 2026] [:error] [pid 9663:tid 9687] [client 13.200.8.87:48416] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/app/.env"] [unique_id "af5IupcWIu01SCxbjwu2zwAAARU"]
[Sat May 09 04:34:02.833492 2026] [:error] [pid 9663:tid 9678] [client 13.200.8.87:48452] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/apps/.env"] [unique_id "af5IupcWIu01SCxbjwu20QAAAQw"]
[Sat May 09 04:34:03.457444 2026] [:error] [pid 9293:tid 9321] [client 13.200.8.87:48472] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/api/.env"] [unique_id "af5Iu5R__qEzV5O6Z2OhvQAAANg"]
[Sat May 09 04:34:04.085120 2026] [:error] [pid 9920:tid 9931] [client 13.200.8.87:48488] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/web/.env"] [unique_id "af5IvExitGYhlzgZb5ZFlgAAAck"]
[Sat May 09 04:34:04.713866 2026] [:error] [pid 9663:tid 9689] [client 13.200.8.87:48520] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/site/.env"] [unique_id "af5IvJcWIu01SCxbjwu21wAAARc"]
[Sat May 09 04:34:05.341874 2026] [:error] [pid 9293:tid 9298] [client 13.200.8.87:48534] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/public/.env"] [unique_id "af5IvZR__qEzV5O6Z2OhxgAAAME"]
[Sat May 09 04:34:05.974278 2026] [:error] [pid 9186:tid 9245] [client 13.200.8.87:48552] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/admin/.env"] [unique_id "af5IvRW4eFOEw1mKOgJo3AAAAFM"]
[Sat May 09 04:34:06.602589 2026] [:error] [pid 9186:tid 9237] [client 13.200.8.87:48560] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/backend/.env"] [unique_id "af5IvhW4eFOEw1mKOgJo3QAAAEs"]
[Sat May 09 04:34:07.232802 2026] [:error] [pid 9186:tid 9242] [client 13.200.8.87:48588] [client 13.200.8.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/server/.env"] [unique_id "af5IvxW4eFOEw1mKOgJo3wAAAFA"]
[Sat May 09 04:39:29.496763 2026] [:error] [pid 9293:tid 9315] [client 172.93.53.131:37464] [client 172.93.53.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.93.53.131, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af5KAZR__qEzV5O6Z2OkBwAAANI"]
[Sat May 09 04:39:29.879342 2026] [proxy_fcgi:error] [pid 9293:tid 9315] [client 172.93.53.131:37464] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 04:39:30.209931 2026] [:error] [pid 9293:tid 9312] [client 172.93.53.131:37464] [client 172.93.53.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.93.53.131, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af5KApR__qEzV5O6Z2OkCwAAAM8"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 04:39:30.524943 2026] [proxy_fcgi:error] [pid 9293:tid 9312] [client 172.93.53.131:37464] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 04:56:35.601945 2026] [proxy_fcgi:error] [pid 9760:tid 9774] [client 23.180.120.134:24082] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 06:59:41.472399 2026] [:error] [pid 9293:tid 9309] [client 45.130.83.97:50539] [client 45.130.83.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.97, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af5q3ZR__qEzV5O6Z2PkzQAAAMw"]
[Sat May 09 06:59:41.479649 2026] [:error] [pid 9187:tid 9255] [client 45.92.229.118:24339] [client 45.92.229.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.118, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af5q3RC7An6gkXsRsaH7CwAAAII"]
[Sat May 09 06:59:41.832026 2026] [proxy_fcgi:error] [pid 9293:tid 9309] [client 45.130.83.97:50539] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 06:59:41.841249 2026] [proxy_fcgi:error] [pid 9187:tid 9255] [client 45.92.229.118:24339] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 07:15:11.606128 2026] [:error] [pid 9760:tid 9766] [client 45.92.229.121:54525] [client 45.92.229.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.121, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af5uf2IkCp-C_fh0s7IR4QAAAUA"]
[Sat May 09 07:15:11.960534 2026] [proxy_fcgi:error] [pid 9760:tid 9766] [client 45.92.229.121:54525] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 08:15:06.836423 2026] [proxy_fcgi:error] [pid 9293:tid 9317] [client 23.80.147.53:47743] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 08:36:36.231253 2026] [proxy_fcgi:error] [pid 9184:tid 9202] [client 5.133.192.197:40719] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 08:47:04.837008 2026] [:error] [pid 9920:tid 9934] [client 15.235.159.113:54266] [client 15.235.159.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.235.159.113, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af6ECExitGYhlzgZb5aJlwAAAcw"]
[Sat May 09 08:47:05.628283 2026] [proxy_fcgi:error] [pid 9920:tid 9934] [client 15.235.159.113:54266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 08:47:06.334651 2026] [:error] [pid 9920:tid 9928] [client 15.235.159.113:54266] [client 15.235.159.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.235.159.113, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af6ECkxitGYhlzgZb5aJmQAAAcY"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 08:47:06.637137 2026] [proxy_fcgi:error] [pid 9920:tid 9928] [client 15.235.159.113:54266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 09:07:08.624350 2026] [:error] [pid 9760:tid 9770] [client 217.174.153.81:36504] [client 217.174.153.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.174.153.81, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af6IvGIkCp-C_fh0s7IdMAAAAUQ"]
[Sat May 09 09:07:08.984860 2026] [proxy_fcgi:error] [pid 9760:tid 9770] [client 217.174.153.81:36504] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 09:07:09.490176 2026] [:error] [pid 9760:tid 9775] [client 217.174.153.81:36504] [client 217.174.153.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.174.153.81, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af6IvWIkCp-C_fh0s7IdMgAAAUk"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 09:07:09.813217 2026] [proxy_fcgi:error] [pid 9760:tid 9775] [client 217.174.153.81:36504] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 09:38:59.019862 2026] [proxy_fcgi:error] [pid 9186:tid 9227] [client 192.175.111.238:21288] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 10:08:45.338926 2026] [:error] [pid 9663:tid 9675] [client 172.104.149.237:42874] [client 172.104.149.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.104.149.237, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af6XLZcWIu01SCxbjwv9JwAAAQk"]
[Sat May 09 10:08:47.011542 2026] [proxy_fcgi:error] [pid 9663:tid 9675] [client 172.104.149.237:42874] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 10:08:47.494394 2026] [:error] [pid 9663:tid 9688] [client 172.104.149.237:42874] [client 172.104.149.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.104.149.237, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af6XL5cWIu01SCxbjwv9LQAAARY"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 10:08:47.801679 2026] [proxy_fcgi:error] [pid 9663:tid 9688] [client 172.104.149.237:42874] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 10:27:08.133406 2026] [proxy_fcgi:error] [pid 9920:tid 9928] [client 3.236.12.189:60058] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 10:27:10.916582 2026] [proxy_fcgi:error] [pid 9663:tid 9668] [client 3.236.12.189:50234] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 10:27:13.230907 2026] [proxy_fcgi:error] [pid 9293:tid 9303] [client 3.236.12.189:49650] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 10:27:15.734079 2026] [proxy_fcgi:error] [pid 9920:tid 9945] [client 3.236.12.189:38122] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 10:33:16.567769 2026] [:error] [pid 9760:tid 9790] [client 159.198.74.128:57772] [client 159.198.74.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.198.74.128, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af6c7GIkCp-C_fh0s7ImBwAAAVg"]
[Sat May 09 10:33:16.913207 2026] [proxy_fcgi:error] [pid 9760:tid 9790] [client 159.198.74.128:57772] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 10:33:17.753479 2026] [:error] [pid 9760:tid 9785] [client 159.198.74.128:57772] [client 159.198.74.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.198.74.128, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af6c7WIkCp-C_fh0s7ImEwAAAVM"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 10:33:18.080663 2026] [proxy_fcgi:error] [pid 9760:tid 9785] [client 159.198.74.128:57772] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 10:42:59.768900 2026] [:error] [pid 9184:tid 9207] [client 78.100.170.217:53792] [client 78.100.170.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.100.170.217, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af6fM4jfODqb_i0Fm995aAAAAAo"]
[Sat May 09 10:42:59.973735 2026] [:error] [pid 9184:tid 9213] [client 157.66.47.86:16412] [client 157.66.47.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.66.47.86, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af6fM4jfODqb_i0Fm995aQAAABA"]
[Sat May 09 10:43:00.159619 2026] [proxy_fcgi:error] [pid 9184:tid 9207] [client 78.100.170.217:53792] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 10:43:00.347407 2026] [proxy_fcgi:error] [pid 9184:tid 9213] [client 157.66.47.86:16412] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 10:43:00.572810 2026] [:error] [pid 9184:tid 9197] [client 78.100.170.217:53792] [client 78.100.170.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.100.170.217, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af6fNIjfODqb_i0Fm995agAAAAA"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 10:43:00.754173 2026] [:error] [pid 9184:tid 9198] [client 157.66.47.86:16412] [client 157.66.47.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.66.47.86, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af6fNIjfODqb_i0Fm995awAAAAE"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 10:43:00.922332 2026] [proxy_fcgi:error] [pid 9184:tid 9197] [client 78.100.170.217:53792] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 10:43:01.089199 2026] [proxy_fcgi:error] [pid 9184:tid 9198] [client 157.66.47.86:16412] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 10:57:54.390298 2026] [:error] [pid 9920:tid 9928] [client 51.222.71.146:48656] [client 51.222.71.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.222.71.146, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af6iskxitGYhlzgZb5anoQAAAcY"]
[Sat May 09 10:57:55.043166 2026] [proxy_fcgi:error] [pid 9920:tid 9928] [client 51.222.71.146:48656] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 11:28:11.287317 2026] [proxy_fcgi:error] [pid 9293:tid 9297] [client 192.36.109.84:44941] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 12:28:43.870530 2026] [:error] [pid 9833:tid 9851] [client 154.0.171.161:41542] [client 154.0.171.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.0.171.161, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af63-yM9JmxIS0KGZUBrAgAAAY0"]
[Sat May 09 12:28:44.214429 2026] [proxy_fcgi:error] [pid 9833:tid 9851] [client 154.0.171.161:41542] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 12:28:48.579050 2026] [:error] [pid 9833:tid 9841] [client 154.0.171.161:41542] [client 154.0.171.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.0.171.161, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af64ACM9JmxIS0KGZUBrBgAAAYM"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 12:28:48.881538 2026] [proxy_fcgi:error] [pid 9833:tid 9841] [client 154.0.171.161:41542] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 12:31:51.890894 2026] [proxy_fcgi:error] [pid 9293:tid 9298] [client 43.164.197.146:53567] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 12:56:44.227515 2026] [:error] [pid 9663:tid 9672] [client 103.124.95.168:59110] [client 103.124.95.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.124.95.168, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af6-jJcWIu01SCxbjwsdOAAAAQY"]
[Sat May 09 12:56:44.591093 2026] [proxy_fcgi:error] [pid 9663:tid 9672] [client 103.124.95.168:59110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 12:56:45.039328 2026] [:error] [pid 9663:tid 9677] [client 103.124.95.168:59110] [client 103.124.95.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.124.95.168, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af6-jZcWIu01SCxbjwsdOQAAAQs"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 12:56:45.333526 2026] [proxy_fcgi:error] [pid 9663:tid 9677] [client 103.124.95.168:59110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 13:06:34.368504 2026] [:error] [pid 9293:tid 9314] [client 171.111.192.222:59780] [client 171.111.192.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 171.111.192.222, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af7A2pR__qEzV5O6Z2N4QAAAANE"]
[Sat May 09 13:06:34.909906 2026] [proxy_fcgi:error] [pid 9293:tid 9314] [client 171.111.192.222:59780] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 14:19:16.576184 2026] [:error] [pid 9186:tid 9242] [client 45.92.229.120:32519] [client 45.92.229.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.120, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af7R5BW4eFOEw1mKOgLHQAAAAFA"]
[Sat May 09 14:19:16.962074 2026] [proxy_fcgi:error] [pid 9186:tid 9242] [client 45.92.229.120:32519] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 14:41:39.412911 2026] [:error] [pid 9663:tid 9666] [client 20.118.17.81:1968] [client 20.118.17.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.118.17.81, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af7XI5cWIu01SCxbjwsu6gAAAQA"]
[Sat May 09 14:41:39.745940 2026] [proxy_fcgi:error] [pid 9663:tid 9666] [client 20.118.17.81:1968] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 14:41:40.556212 2026] [:error] [pid 9663:tid 9686] [client 20.118.17.81:1968] [client 20.118.17.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.118.17.81, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af7XJJcWIu01SCxbjwsu7QAAARQ"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 14:41:40.922192 2026] [proxy_fcgi:error] [pid 9663:tid 9686] [client 20.118.17.81:1968] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 14:52:34.331272 2026] [:error] [pid 9833:tid 9838] [client 45.92.229.139:63497] [client 45.92.229.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.139, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af7ZsiM9JmxIS0KGZUB6mQAAAYA"]
[Sat May 09 14:52:34.703221 2026] [proxy_fcgi:error] [pid 9833:tid 9838] [client 45.92.229.139:63497] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 15:42:07.770028 2026] [:error] [pid 9186:tid 9236] [client 162.241.203.162:40916] [client 162.241.203.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.203.162, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af7lTxW4eFOEw1mKOgLUGgAAAEo"]
[Sat May 09 15:42:08.111141 2026] [proxy_fcgi:error] [pid 9186:tid 9236] [client 162.241.203.162:40916] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 15:42:09.735377 2026] [:error] [pid 9186:tid 9250] [client 162.241.203.162:40916] [client 162.241.203.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.203.162, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af7lURW4eFOEw1mKOgLUGwAAAFg"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 15:42:10.018455 2026] [proxy_fcgi:error] [pid 9186:tid 9250] [client 162.241.203.162:40916] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 16:08:30.065309 2026] [:error] [pid 9293:tid 9312] [client 103.101.162.198:43386] [client 103.101.162.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.101.162.198, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af7rfpR__qEzV5O6Z2OsIgAAAM8"]
[Sat May 09 16:08:30.444529 2026] [proxy_fcgi:error] [pid 9293:tid 9312] [client 103.101.162.198:43386] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 16:08:30.789006 2026] [:error] [pid 9293:tid 9321] [client 103.101.162.198:43386] [client 103.101.162.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.101.162.198, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af7rfpR__qEzV5O6Z2OsIwAAANg"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 16:08:31.107021 2026] [proxy_fcgi:error] [pid 9293:tid 9321] [client 103.101.162.198:43386] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 17:00:12.051589 2026] [:error] [pid 9186:tid 9229] [client 92.205.188.156:51718] [client 92.205.188.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.188.156, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af73nBW4eFOEw1mKOgLeFQAAAEM"]
[Sat May 09 17:00:12.640179 2026] [proxy_fcgi:error] [pid 9186:tid 9229] [client 92.205.188.156:51718] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 17:00:12.928122 2026] [:error] [pid 9186:tid 9227] [client 92.205.188.156:51718] [client 92.205.188.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.188.156, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af73nBW4eFOEw1mKOgLeGQAAAEE"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 17:00:13.240335 2026] [proxy_fcgi:error] [pid 9186:tid 9227] [client 92.205.188.156:51718] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 17:05:14.773882 2026] [:error] [pid 9187:tid 9254] [client 45.92.229.131:48423] [client 45.92.229.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.131, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af74yhC7An6gkXsRsaG7SgAAAIE"]
[Sat May 09 17:05:15.124533 2026] [proxy_fcgi:error] [pid 9187:tid 9254] [client 45.92.229.131:48423] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 17:21:02.467945 2026] [:error] [pid 9920:tid 9929] [client 15.207.212.133:44164] [client 15.207.212.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.207.212.133, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af78fkxitGYhlzgZb5b4TQAAAcc"]
[Sat May 09 17:21:02.825923 2026] [proxy_fcgi:error] [pid 9920:tid 9929] [client 15.207.212.133:44164] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 17:21:03.235118 2026] [:error] [pid 9920:tid 9924] [client 15.207.212.133:44164] [client 15.207.212.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.207.212.133, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af78f0xitGYhlzgZb5b4TgAAAcI"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 17:21:03.537835 2026] [proxy_fcgi:error] [pid 9920:tid 9924] [client 15.207.212.133:44164] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 17:42:26.418371 2026] [:error] [pid 9187:tid 9259] [client 80.97.49.108:58306] [client 80.97.49.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.97.49.108, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af8BghC7An6gkXsRsaHJvQAAAIY"]
[Sat May 09 17:42:26.980120 2026] [proxy_fcgi:error] [pid 9187:tid 9259] [client 80.97.49.108:58306] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 17:42:27.384709 2026] [:error] [pid 9187:tid 9257] [client 80.97.49.108:58306] [client 80.97.49.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.97.49.108, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af8BgxC7An6gkXsRsaHJwQAAAIQ"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 17:42:27.687705 2026] [proxy_fcgi:error] [pid 9187:tid 9257] [client 80.97.49.108:58306] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 17:43:44.957755 2026] [:error] [pid 9760:tid 9771] [client 45.130.83.94:27399] [client 45.130.83.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.94, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af8B0GIkCp-C_fh0s7JRNAAAAUU"]
[Sat May 09 17:43:45.291766 2026] [proxy_fcgi:error] [pid 9760:tid 9771] [client 45.130.83.94:27399] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 18:03:11.782653 2026] [:error] [pid 9833:tid 9860] [client 65.21.141.183:58802] [client 65.21.141.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.21.141.183, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af8GXyM9JmxIS0KGZUCOkwAAAZY"]
[Sat May 09 18:03:11.831930 2026] [:error] [pid 9293:tid 9317] [client 98.89.94.37:48310] [client 98.89.94.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.89.94.37, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af8GX5R__qEzV5O6Z2PLLgAAANQ"]
[Sat May 09 18:03:12.159720 2026] [proxy_fcgi:error] [pid 9293:tid 9317] [client 98.89.94.37:48310] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 18:03:12.309023 2026] [proxy_fcgi:error] [pid 9833:tid 9860] [client 65.21.141.183:58802] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 18:03:12.851575 2026] [:error] [pid 9293:tid 9299] [client 98.89.94.37:48310] [client 98.89.94.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.89.94.37, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af8GYJR__qEzV5O6Z2PLMwAAAMI"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 18:03:13.015559 2026] [:error] [pid 9833:tid 9848] [client 65.21.141.183:58802] [client 65.21.141.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.21.141.183, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af8GYSM9JmxIS0KGZUCOlAAAAYo"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 18:03:13.251699 2026] [proxy_fcgi:error] [pid 9293:tid 9299] [client 98.89.94.37:48310] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 18:03:13.347287 2026] [proxy_fcgi:error] [pid 9833:tid 9848] [client 65.21.141.183:58802] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 18:53:37.774724 2026] [:error] [pid 9187:tid 9253] [client 194.62.107.72:59505] [client 194.62.107.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "af8SMRC7An6gkXsRsaHlmAAAAIA"]
[Sat May 09 19:15:19.266600 2026] [proxy_fcgi:error] [pid 9663:tid 9683] [client 35.213.206.9:51380] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 19:44:42.155354 2026] [:error] [pid 9663:tid 9675] [client 62.171.132.27:33652] [client 62.171.132.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.171.132.27, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af8eKpcWIu01SCxbjwteBAAAAQk"]
[Sat May 09 19:44:42.522226 2026] [proxy_fcgi:error] [pid 9663:tid 9675] [client 62.171.132.27:33652] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 19:44:42.894953 2026] [:error] [pid 9663:tid 9669] [client 62.171.132.27:33652] [client 62.171.132.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.171.132.27, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af8eKpcWIu01SCxbjwteBQAAAQM"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 19:44:43.214670 2026] [proxy_fcgi:error] [pid 9663:tid 9669] [client 62.171.132.27:33652] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 19:52:39.969848 2026] [:error] [pid 9293:tid 9315] [client 85.214.94.237:57092] [client 85.214.94.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.94.237, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af8gB5R__qEzV5O6Z2PoHwAAANI"]
[Sat May 09 19:52:40.281796 2026] [proxy_fcgi:error] [pid 9293:tid 9315] [client 85.214.94.237:57092] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 19:52:41.509599 2026] [:error] [pid 9293:tid 9311] [client 85.214.94.237:57092] [client 85.214.94.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.94.237, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af8gCZR__qEzV5O6Z2PoIQAAAM4"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 19:52:41.817494 2026] [proxy_fcgi:error] [pid 9293:tid 9311] [client 85.214.94.237:57092] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 21:13:34.945209 2026] [:error] [pid 55353:tid 55357] [client 45.14.225.211:37910] [client 45.14.225.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.14.225.211, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af8y_iDuyNO3XosoIYRE2wAAAQI"]
[Sat May 09 21:13:36.597916 2026] [proxy_fcgi:error] [pid 55353:tid 55357] [client 45.14.225.211:37910] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 21:13:36.878718 2026] [:error] [pid 55353:tid 55356] [client 45.14.225.211:37910] [client 45.14.225.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.14.225.211, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af8zACDuyNO3XosoIYRE3wAAAQE"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 21:13:37.227256 2026] [proxy_fcgi:error] [pid 55353:tid 55356] [client 45.14.225.211:37910] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 21:35:48.551649 2026] [:error] [pid 55186:tid 55254] [client 199.189.224.103:49271] [client 199.189.224.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 199.189.224.103, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af84NJPIspqZdXg7QQuu-gAAAEU"]
[Sat May 09 21:35:48.909095 2026] [proxy_fcgi:error] [pid 55186:tid 55254] [client 199.189.224.103:49271] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 21:35:49.450809 2026] [:error] [pid 55186:tid 55266] [client 199.189.224.103:49271] [client 199.189.224.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 199.189.224.103, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af84NZPIspqZdXg7QQuu-wAAAFE"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 21:35:49.755122 2026] [proxy_fcgi:error] [pid 55186:tid 55266] [client 199.189.224.103:49271] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 22:10:22.906980 2026] [:error] [pid 55186:tid 55267] [client 94.46.170.157:43366] [client 94.46.170.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.46.170.157, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9ATpPIspqZdXg7QQu1XAAAAFI"]
[Sat May 09 22:10:23.191729 2026] [proxy_fcgi:error] [pid 55186:tid 55267] [client 94.46.170.157:43366] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 22:10:23.869474 2026] [:error] [pid 55186:tid 55259] [client 94.46.170.157:43366] [client 94.46.170.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.46.170.157, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9AT5PIspqZdXg7QQu1XgAAAEo"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 22:10:24.180002 2026] [proxy_fcgi:error] [pid 55186:tid 55259] [client 94.46.170.157:43366] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 22:17:49.977114 2026] [:error] [pid 55353:tid 55365] [client 157.90.251.56:39312] [client 157.90.251.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.90.251.56, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9CDSDuyNO3XosoIYRbvgAAAQo"]
[Sat May 09 22:17:50.326492 2026] [proxy_fcgi:error] [pid 55353:tid 55365] [client 157.90.251.56:39312] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 22:17:50.610251 2026] [:error] [pid 55353:tid 55369] [client 157.90.251.56:39312] [client 157.90.251.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.90.251.56, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9CDiDuyNO3XosoIYRbwQAAAQ4"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 22:17:50.924459 2026] [proxy_fcgi:error] [pid 55353:tid 55369] [client 157.90.251.56:39312] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 22:25:23.116839 2026] [:error] [pid 55191:tid 55298] [client 57.132.163.249:50746] [client 57.132.163.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.132.163.249, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9D0_Mcqx1kfQsw7c4XTwAAAJU"]
[Sat May 09 22:25:23.495307 2026] [proxy_fcgi:error] [pid 55191:tid 55298] [client 57.132.163.249:50746] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 22:25:23.958743 2026] [:error] [pid 55191:tid 55299] [client 57.132.163.249:50746] [client 57.132.163.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.132.163.249, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9D0_Mcqx1kfQsw7c4XUAAAAJY"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 22:25:24.264257 2026] [proxy_fcgi:error] [pid 55191:tid 55299] [client 57.132.163.249:50746] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 22:47:46.675351 2026] [:error] [pid 55353:tid 55367] [client 104.251.216.50:56886] [client 104.251.216.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.251.216.50, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9JEiDuyNO3XosoIYRoQwAAAQw"]
[Sat May 09 22:47:47.201420 2026] [proxy_fcgi:error] [pid 55353:tid 55367] [client 104.251.216.50:56886] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 22:47:47.533460 2026] [:error] [pid 55353:tid 55358] [client 104.251.216.50:56886] [client 104.251.216.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.251.216.50, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9JEyDuyNO3XosoIYRoRQAAAQM"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 22:47:47.820536 2026] [proxy_fcgi:error] [pid 55353:tid 55358] [client 104.251.216.50:56886] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 22:54:36.971699 2026] [:error] [pid 55186:tid 55254] [client 212.90.148.8:53858] [client 212.90.148.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.90.148.8, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9KrJPIspqZdXg7QQu_DQAAAEU"]
[Sat May 09 22:54:37.342440 2026] [proxy_fcgi:error] [pid 55186:tid 55254] [client 212.90.148.8:53858] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 22:54:37.808063 2026] [:error] [pid 55186:tid 55252] [client 212.90.148.8:53858] [client 212.90.148.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.90.148.8, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9KrZPIspqZdXg7QQu_DgAAAEM"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 22:54:38.121214 2026] [proxy_fcgi:error] [pid 55186:tid 55252] [client 212.90.148.8:53858] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 23:16:05.413116 2026] [:error] [pid 55353:tid 55357] [client 145.239.194.219:39124] [client 145.239.194.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 145.239.194.219, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9PtSDuyNO3XosoIYRxEAAAAQI"]
[Sat May 09 23:16:05.978508 2026] [proxy_fcgi:error] [pid 55353:tid 55357] [client 145.239.194.219:39124] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 23:16:06.545732 2026] [:error] [pid 55353:tid 55370] [client 145.239.194.219:39124] [client 145.239.194.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 145.239.194.219, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9PtiDuyNO3XosoIYRxEgAAAQ8"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 23:16:06.840087 2026] [proxy_fcgi:error] [pid 55353:tid 55370] [client 145.239.194.219:39124] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 23:23:05.740049 2026] [:error] [pid 55191:tid 55289] [client 5.9.94.107:37350] [client 5.9.94.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.9.94.107, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9RWfMcqx1kfQsw7c4lJwAAAIw"]
[Sat May 09 23:23:06.100920 2026] [proxy_fcgi:error] [pid 55191:tid 55289] [client 5.9.94.107:37350] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 23:23:07.046779 2026] [:error] [pid 55191:tid 55293] [client 5.9.94.107:37350] [client 5.9.94.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.9.94.107, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9RW_Mcqx1kfQsw7c4lKAAAAJA"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 23:23:07.355059 2026] [proxy_fcgi:error] [pid 55191:tid 55293] [client 5.9.94.107:37350] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 23:50:46.188558 2026] [:error] [pid 55353:tid 55373] [client 43.239.92.149:40970] [client 43.239.92.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.239.92.149, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9X1iDuyNO3XosoIYR6LQAAARI"]
[Sat May 09 23:50:46.535285 2026] [proxy_fcgi:error] [pid 55353:tid 55373] [client 43.239.92.149:40970] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 09 23:50:46.905111 2026] [:error] [pid 55353:tid 55370] [client 43.239.92.149:40970] [client 43.239.92.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.239.92.149, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9X1iDuyNO3XosoIYR6LgAAAQ8"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 09 23:50:47.214331 2026] [proxy_fcgi:error] [pid 55353:tid 55370] [client 43.239.92.149:40970] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 00:25:17.591435 2026] [:error] [pid 55353:tid 55368] [client 217.20.124.76:60208] [client 217.20.124.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.20.124.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9f7SDuyNO3XosoIYSBSwAAAQ0"]
[Sun May 10 00:25:19.271455 2026] [proxy_fcgi:error] [pid 55353:tid 55368] [client 217.20.124.76:60208] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 00:25:19.544989 2026] [:error] [pid 55353:tid 55377] [client 217.20.124.76:60208] [client 217.20.124.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.20.124.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9f7yDuyNO3XosoIYSBTAAAARY"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 00:25:19.874609 2026] [proxy_fcgi:error] [pid 55353:tid 55377] [client 217.20.124.76:60208] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 00:40:08.610873 2026] [:error] [pid 62831:tid 62850] [client 146.196.64.107:57480] [client 146.196.64.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.196.64.107, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9jaOYBNqNhtZ_l7qBXGAAAABE"]
[Sun May 10 00:40:08.978601 2026] [proxy_fcgi:error] [pid 62831:tid 62850] [client 146.196.64.107:57480] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 00:40:11.054600 2026] [:error] [pid 62831:tid 62849] [client 146.196.64.107:57480] [client 146.196.64.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.196.64.107, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9ja-YBNqNhtZ_l7qBXHQAAABA"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 00:40:11.389336 2026] [proxy_fcgi:error] [pid 62831:tid 62849] [client 146.196.64.107:57480] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 01:02:54.852268 2026] [:error] [pid 62831:tid 62852] [client 157.90.251.56:44114] [client 157.90.251.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.90.251.56, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9ovuYBNqNhtZ_l7qBfzgAAABM"]
[Sun May 10 01:02:55.437470 2026] [proxy_fcgi:error] [pid 62831:tid 62852] [client 157.90.251.56:44114] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 01:02:55.730476 2026] [:error] [pid 62831:tid 62853] [client 157.90.251.56:44114] [client 157.90.251.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.90.251.56, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9ov-YBNqNhtZ_l7qBf0AAAABQ"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 01:02:56.031814 2026] [proxy_fcgi:error] [pid 62831:tid 62853] [client 157.90.251.56:44114] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 01:11:02.812239 2026] [:error] [pid 55353:tid 55379] [client 70.36.101.111:43580] [client 70.36.101.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 70.36.101.111, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9qpiDuyNO3XosoIYSNIQAAARg"]
[Sun May 10 01:11:03.149256 2026] [proxy_fcgi:error] [pid 55353:tid 55379] [client 70.36.101.111:43580] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 01:11:03.853002 2026] [:error] [pid 55353:tid 55358] [client 70.36.101.111:43580] [client 70.36.101.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 70.36.101.111, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9qpyDuyNO3XosoIYSNJAAAAQM"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 01:11:04.225581 2026] [proxy_fcgi:error] [pid 55353:tid 55358] [client 70.36.101.111:43580] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 01:40:17.164210 2026] [:error] [pid 55186:tid 55264] [client 103.152.249.56:41426] [client 103.152.249.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.152.249.56, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9xgZPIspqZdXg7QQvWMwAAAE8"]
[Sun May 10 01:40:17.511707 2026] [proxy_fcgi:error] [pid 55186:tid 55264] [client 103.152.249.56:41426] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 01:40:18.726572 2026] [:error] [pid 55186:tid 55260] [client 103.152.249.56:41426] [client 103.152.249.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.152.249.56, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af9xgpPIspqZdXg7QQvWNQAAAEs"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 01:40:19.023374 2026] [proxy_fcgi:error] [pid 55186:tid 55260] [client 103.152.249.56:41426] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 02:00:08.280301 2026] [:error] [pid 55186:tid 55254] [client 5.75.134.69:44486] [client 5.75.134.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.75.134.69, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af92KJPIspqZdXg7QQvYLAAAAEU"]
[Sun May 10 02:00:08.642955 2026] [proxy_fcgi:error] [pid 55186:tid 55254] [client 5.75.134.69:44486] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 02:00:09.014204 2026] [:error] [pid 55186:tid 55257] [client 5.75.134.69:44486] [client 5.75.134.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.75.134.69, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af92KZPIspqZdXg7QQvYLgAAAEg"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 02:00:09.321711 2026] [proxy_fcgi:error] [pid 55186:tid 55257] [client 5.75.134.69:44486] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 02:07:37.608536 2026] [:error] [pid 55182:tid 55217] [client 95.216.210.177:60752] [client 95.216.210.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.216.210.177, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af936TaxmP-S8ASrqQn8kwAAAMU"]
[Sun May 10 02:07:37.967413 2026] [proxy_fcgi:error] [pid 55182:tid 55217] [client 95.216.210.177:60752] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 02:07:38.349916 2026] [:error] [pid 55182:tid 55215] [client 95.216.210.177:60752] [client 95.216.210.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.216.210.177, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af936jaxmP-S8ASrqQn8lAAAAMM"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 02:07:38.651583 2026] [proxy_fcgi:error] [pid 55182:tid 55215] [client 95.216.210.177:60752] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 02:14:59.292817 2026] [:error] [pid 55186:tid 55273] [client 23.22.236.16:51070] [client 23.22.236.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.22.236.16, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af95o5PIspqZdXg7QQvaDwAAAFg"]
[Sun May 10 02:14:59.639838 2026] [proxy_fcgi:error] [pid 55186:tid 55273] [client 23.22.236.16:51070] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 02:14:59.965497 2026] [:error] [pid 55186:tid 55264] [client 23.22.236.16:51070] [client 23.22.236.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.22.236.16, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af95o5PIspqZdXg7QQvaEAAAAE8"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 02:15:00.276882 2026] [proxy_fcgi:error] [pid 55186:tid 55264] [client 23.22.236.16:51070] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 02:28:28.450531 2026] [:error] [pid 55353:tid 55375] [client 38.99.81.38:34766] [client 38.99.81.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.99.81.38, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af98zCDuyNO3XosoIYSaugAAARQ"]
[Sun May 10 02:28:28.778815 2026] [proxy_fcgi:error] [pid 55353:tid 55375] [client 38.99.81.38:34766] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 02:28:29.201076 2026] [:error] [pid 55353:tid 55371] [client 38.99.81.38:34766] [client 38.99.81.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.99.81.38, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af98zSDuyNO3XosoIYSauwAAARA"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 02:28:29.523890 2026] [proxy_fcgi:error] [pid 55353:tid 55371] [client 38.99.81.38:34766] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 03:01:42.545978 2026] [:error] [pid 62831:tid 62855] [client 57.132.163.249:56422] [client 57.132.163.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.132.163.249, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-EluYBNqNhtZ_l7qCBfwAAABY"]
[Sun May 10 03:01:42.907132 2026] [proxy_fcgi:error] [pid 62831:tid 62855] [client 57.132.163.249:56422] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 03:01:43.370206 2026] [:error] [pid 62831:tid 62842] [client 57.132.163.249:56422] [client 57.132.163.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.132.163.249, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-El-YBNqNhtZ_l7qCBgAAAAAk"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 03:01:43.669315 2026] [proxy_fcgi:error] [pid 62831:tid 62842] [client 57.132.163.249:56422] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 03:15:48.894191 2026] [:error] [pid 55186:tid 55254] [client 46.235.40.21:50694] [client 46.235.40.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.235.40.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-H5JPIspqZdXg7QQvhPwAAAEU"]
[Sun May 10 03:15:49.210553 2026] [proxy_fcgi:error] [pid 55186:tid 55254] [client 46.235.40.21:50694] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 03:15:49.591777 2026] [:error] [pid 55186:tid 55269] [client 46.235.40.21:50694] [client 46.235.40.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.235.40.21, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-H5ZPIspqZdXg7QQvhQAAAAFQ"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 03:15:49.896663 2026] [proxy_fcgi:error] [pid 55186:tid 55269] [client 46.235.40.21:50694] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 03:22:36.282507 2026] [:error] [pid 55353:tid 55377] [client 5.196.62.228:37436] [client 5.196.62.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.196.62.228, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-JfCDuyNO3XosoIYSkMAAAARY"]
[Sun May 10 03:22:36.633017 2026] [proxy_fcgi:error] [pid 55353:tid 55377] [client 5.196.62.228:37436] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 03:22:37.119921 2026] [:error] [pid 55353:tid 55362] [client 5.196.62.228:37436] [client 5.196.62.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.196.62.228, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-JfSDuyNO3XosoIYSkMgAAAQc"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 03:22:37.432047 2026] [proxy_fcgi:error] [pid 55353:tid 55362] [client 5.196.62.228:37436] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 03:28:58.194332 2026] [:error] [pid 54523:tid 54544] [client 95.216.210.177:42384] [client 95.216.210.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.216.210.177, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-K-lag0VrOOAfRpVyj3wAAANE"]
[Sun May 10 03:28:59.857389 2026] [proxy_fcgi:error] [pid 54523:tid 54544] [client 95.216.210.177:42384] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 03:29:00.187142 2026] [:error] [pid 54523:tid 54529] [client 95.216.210.177:42384] [client 95.216.210.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.216.210.177, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-K_Fag0VrOOAfRpVyj4AAAAMI"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 03:29:00.522475 2026] [proxy_fcgi:error] [pid 54523:tid 54529] [client 95.216.210.177:42384] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 03:55:29.552023 2026] [:error] [pid 62910:tid 62920] [client 104.234.53.175:30737] [client 104.234.53.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.175, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-RMd5YAy_h5VqgWqhHDQAAAMg"]
[Sun May 10 03:55:30.279602 2026] [proxy_fcgi:error] [pid 62910:tid 62920] [client 104.234.53.175:30737] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 03:55:30.985593 2026] [proxy_fcgi:error] [pid 62910:tid 62918] [client 104.234.53.175:30737] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 03:56:12.683046 2026] [proxy_fcgi:error] [pid 32915:tid 32943] [client 104.234.53.147:40111] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 03:56:13.291918 2026] [proxy_fcgi:error] [pid 32915:tid 32940] [client 104.234.53.147:40111] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 04:21:10.643065 2026] [:error] [pid 62803:tid 62884] [client 45.76.149.200:37496] [client 45.76.149.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.76.149.200, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-XNk5oy4jU7eVtNaXkQAAAAJQ"]
[Sun May 10 04:21:10.976305 2026] [proxy_fcgi:error] [pid 62803:tid 62884] [client 45.76.149.200:37496] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 04:21:11.292724 2026] [:error] [pid 62803:tid 62865] [client 45.76.149.200:37496] [client 45.76.149.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.76.149.200, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-XN05oy4jU7eVtNaXkQQAAAIE"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 04:21:11.601042 2026] [proxy_fcgi:error] [pid 62803:tid 62865] [client 45.76.149.200:37496] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 04:41:55.495700 2026] [:error] [pid 62803:tid 62885] [client 178.79.173.199:45836] [client 178.79.173.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.79.173.199, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-cE05oy4jU7eVtNaXmqwAAAJU"]
[Sun May 10 04:41:55.840267 2026] [proxy_fcgi:error] [pid 62803:tid 62885] [client 178.79.173.199:45836] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 04:41:56.164513 2026] [:error] [pid 62803:tid 62870] [client 178.79.173.199:45836] [client 178.79.173.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.79.173.199, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-cFE5oy4jU7eVtNaXmrAAAAIY"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 04:41:56.468888 2026] [proxy_fcgi:error] [pid 62803:tid 62870] [client 178.79.173.199:45836] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 04:55:47.696382 2026] [:error] [pid 32915:tid 32938] [client 91.224.199.123:46122] [client 91.224.199.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.199.123, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-fUzg8EIe76RX8AUaDoQAAARI"]
[Sun May 10 04:55:48.043018 2026] [proxy_fcgi:error] [pid 32915:tid 32938] [client 91.224.199.123:46122] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 04:55:48.371101 2026] [:error] [pid 32915:tid 32930] [client 91.224.199.123:46122] [client 91.224.199.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.199.123, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-fVDg8EIe76RX8AUaDowAAAQo"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 04:55:48.663138 2026] [proxy_fcgi:error] [pid 32915:tid 32930] [client 91.224.199.123:46122] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 05:16:04.512772 2026] [:error] [pid 62802:tid 62854] [client 103.143.207.18:58302] [client 103.143.207.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.143.207.18, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-kFKt9wnaRe0v-Mka-MgAAAFE"]
[Sun May 10 05:16:04.872875 2026] [proxy_fcgi:error] [pid 62802:tid 62854] [client 103.143.207.18:58302] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 05:16:05.623714 2026] [:error] [pid 62802:tid 62837] [client 103.143.207.18:58302] [client 103.143.207.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.143.207.18, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-kFat9wnaRe0v-Mka-NgAAAEA"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 05:16:05.933465 2026] [proxy_fcgi:error] [pid 62802:tid 62837] [client 103.143.207.18:58302] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 05:35:00.129612 2026] [:error] [pid 32915:tid 32934] [client 92.205.188.156:45708] [client 92.205.188.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.188.156, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-ohDg8EIe76RX8AUaSQwAAAQ4"]
[Sun May 10 05:35:00.510871 2026] [proxy_fcgi:error] [pid 32915:tid 32934] [client 92.205.188.156:45708] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 05:35:00.783765 2026] [:error] [pid 32915:tid 32940] [client 92.205.188.156:45708] [client 92.205.188.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.188.156, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-ohDg8EIe76RX8AUaSRQAAARQ"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 05:35:01.082969 2026] [proxy_fcgi:error] [pid 32915:tid 32940] [client 92.205.188.156:45708] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 05:41:18.541296 2026] [:error] [pid 62801:tid 62832] [client 84.247.137.247:56248] [client 84.247.137.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.137.247, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-p_hMFDul6kZmcchAr4wAAABY"]
[Sun May 10 05:41:19.327151 2026] [proxy_fcgi:error] [pid 62801:tid 62832] [client 84.247.137.247:56248] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 05:41:19.663002 2026] [:error] [pid 62801:tid 62826] [client 84.247.137.247:56248] [client 84.247.137.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.137.247, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-p_xMFDul6kZmcchAr5QAAABA"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 05:41:19.978250 2026] [proxy_fcgi:error] [pid 62801:tid 62826] [client 84.247.137.247:56248] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 05:47:27.493467 2026] [:error] [pid 62802:tid 62843] [client 94.46.170.34:44610] [client 94.46.170.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.46.170.34, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-rb6t9wnaRe0v-MkbERgAAAEY"]
[Sun May 10 05:47:28.082277 2026] [proxy_fcgi:error] [pid 62802:tid 62843] [client 94.46.170.34:44610] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 05:47:28.433961 2026] [:error] [pid 62802:tid 62849] [client 94.46.170.34:44610] [client 94.46.170.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.46.170.34, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-rcKt9wnaRe0v-MkbESAAAAEw"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 05:47:28.728358 2026] [proxy_fcgi:error] [pid 62802:tid 62849] [client 94.46.170.34:44610] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 05:51:26.843936 2026] [:error] [pid 62801:tid 62822] [client 109.237.65.32:51966] [client 109.237.65.32] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users"] [unique_id "af-sXhMFDul6kZmcchAtbAAAAAw"]
[Sun May 10 05:51:31.055510 2026] [proxy_fcgi:error] [pid 62802:tid 62844] [client 87.106.33.73:51304] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 05:51:31.060775 2026] [proxy_fcgi:error] [pid 62910:tid 62929] [client 87.106.33.73:51290] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 05:51:31.387553 2026] [proxy_fcgi:error] [pid 62910:tid 62924] [client 87.106.33.73:51278] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 05:51:44.075510 2026] [proxy_fcgi:error] [pid 62910:tid 62935] [client 131.72.236.158:43530] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 05:51:52.354363 2026] [proxy_fcgi:error] [pid 62910:tid 62913] [client 172.93.54.168:58324] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:11:12.994143 2026] [:error] [pid 32915:tid 32930] [client 94.46.170.34:59204] [client 94.46.170.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.46.170.34, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-xADg8EIe76RX8AUagfAAAAQo"]
[Sun May 10 06:11:13.323106 2026] [proxy_fcgi:error] [pid 32915:tid 32930] [client 94.46.170.34:59204] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:11:13.649457 2026] [:error] [pid 32915:tid 32926] [client 94.46.170.34:59204] [client 94.46.170.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.46.170.34, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-xATg8EIe76RX8AUagfgAAAQY"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 06:11:13.953093 2026] [proxy_fcgi:error] [pid 32915:tid 32926] [client 94.46.170.34:59204] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 06:17:56.085874 2026] [:error] [pid 62803:tid 62885] [client 199.189.224.103:64603] [client 199.189.224.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 199.189.224.103, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-ylE5oy4jU7eVtNaX5lAAAAJU"]
[Sun May 10 06:17:56.453861 2026] [proxy_fcgi:error] [pid 62803:tid 62885] [client 199.189.224.103:64603] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:17:56.875122 2026] [:error] [pid 62803:tid 62876] [client 199.189.224.103:64603] [client 199.189.224.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 199.189.224.103, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-ylE5oy4jU7eVtNaX5lQAAAIw"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 06:17:57.295518 2026] [proxy_fcgi:error] [pid 62803:tid 62876] [client 199.189.224.103:64603] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 06:30:34.499871 2026] [:error] [pid 32915:tid 32921] [client 45.76.149.200:53726] [client 45.76.149.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.76.149.200, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-1ijg8EIe76RX8AUalkwAAAQE"]
[Sun May 10 06:30:36.175646 2026] [proxy_fcgi:error] [pid 32915:tid 32921] [client 45.76.149.200:53726] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:30:37.175767 2026] [:error] [pid 32915:tid 32925] [client 45.76.149.200:53726] [client 45.76.149.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.76.149.200, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-1jTg8EIe76RX8AUallwAAAQU"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 06:30:37.474856 2026] [proxy_fcgi:error] [pid 32915:tid 32925] [client 45.76.149.200:53726] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 06:42:10.102396 2026] [:error] [pid 32915:tid 32928] [client 34.19.200.13:49198] [client 34.19.200.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.19.200.13, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-4Qjg8EIe76RX8AUapBAAAAQg"]
[Sun May 10 06:42:10.462542 2026] [proxy_fcgi:error] [pid 32915:tid 32928] [client 34.19.200.13:49198] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:10.688943 2026] [:error] [pid 32915:tid 32925] [client 34.19.200.13:49198] [client 34.19.200.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users"] [unique_id "af-4Qjg8EIe76RX8AUapBgAAAQU"]
[Sun May 10 06:42:10.813676 2026] [proxy_fcgi:error] [pid 32915:tid 32937] [client 34.19.200.13:49194] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:11.230489 2026] [proxy_fcgi:error] [pid 32915:tid 32934] [client 34.19.200.13:49198] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:11.661580 2026] [proxy_fcgi:error] [pid 62802:tid 62847] [client 34.19.200.13:49246] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:11.698942 2026] [proxy_fcgi:error] [pid 62803:tid 62864] [client 34.19.200.13:49208] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:11.714866 2026] [proxy_fcgi:error] [pid 62803:tid 62872] [client 34.19.200.13:49242] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:11.750749 2026] [proxy_fcgi:error] [pid 62802:tid 62846] [client 34.19.200.13:49276] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:11.960899 2026] [proxy_fcgi:error] [pid 62803:tid 62869] [client 34.19.200.13:49252] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:12.008661 2026] [proxy_fcgi:error] [pid 62910:tid 62936] [client 34.19.200.13:49204] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:12.029438 2026] [proxy_fcgi:error] [pid 62802:tid 62837] [client 34.19.200.13:49228] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:12.048510 2026] [proxy_fcgi:error] [pid 62910:tid 62933] [client 34.19.200.13:49248] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:12.242661 2026] [proxy_fcgi:error] [pid 62910:tid 62925] [client 34.19.200.13:49270] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:12.312981 2026] [proxy_fcgi:error] [pid 32915:tid 32927] [client 34.19.200.13:49268] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:13.978560 2026] [proxy_fcgi:error] [pid 32915:tid 32944] [client 34.19.200.13:49198] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:13.992853 2026] [proxy_fcgi:error] [pid 32915:tid 32922] [client 34.19.200.13:49206] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:14.202457 2026] [:error] [pid 32915:tid 32940] [client 34.19.200.13:49198] [client 34.19.200.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.19.200.13, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "af-4Rjg8EIe76RX8AUapDQAAARQ"]
[Sun May 10 06:42:14.545708 2026] [proxy_fcgi:error] [pid 32915:tid 32935] [client 34.19.200.13:49206] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:14.609488 2026] [proxy_fcgi:error] [pid 32915:tid 32940] [client 34.19.200.13:49198] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:14.684508 2026] [proxy_fcgi:error] [pid 62910:tid 62932] [client 34.19.200.13:49294] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:14.701222 2026] [proxy_fcgi:error] [pid 62803:tid 62881] [client 34.19.200.13:49330] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:14.873149 2026] [proxy_fcgi:error] [pid 62910:tid 62918] [client 34.19.200.13:49286] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:14.918594 2026] [proxy_fcgi:error] [pid 62910:tid 62920] [client 34.19.200.13:49344] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:42:15.062701 2026] [proxy_fcgi:error] [pid 32915:tid 32921] [client 34.19.200.13:49328] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:43:34.172166 2026] [:error] [pid 62803:tid 62877] [client 104.234.53.188:60867] [client 104.234.53.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.188, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-4lk5oy4jU7eVtNaX8xQAAAI0"]
[Sun May 10 06:43:34.541122 2026] [proxy_fcgi:error] [pid 62803:tid 62877] [client 104.234.53.188:60867] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:47:50.841280 2026] [:error] [pid 62910:tid 62913] [client 108.160.152.22:43634] [client 108.160.152.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.160.152.22, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-5lt5YAy_h5VqgWqhrmwAAAME"]
[Sun May 10 06:47:51.159939 2026] [proxy_fcgi:error] [pid 62910:tid 62913] [client 108.160.152.22:43634] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 06:47:51.587728 2026] [:error] [pid 62910:tid 62921] [client 108.160.152.22:43634] [client 108.160.152.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.160.152.22, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-5l95YAy_h5VqgWqhrnQAAAMk"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 06:47:51.892078 2026] [proxy_fcgi:error] [pid 62910:tid 62921] [client 108.160.152.22:43634] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 06:51:20.163389 2026] [:error] [pid 62803:tid 62868] [client 104.234.53.177:44319] [client 104.234.53.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.177, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-6aE5oy4jU7eVtNaX97gAAAIQ"]
[Sun May 10 06:51:20.551941 2026] [proxy_fcgi:error] [pid 62803:tid 62868] [client 104.234.53.177:44319] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 07:12:03.105769 2026] [:error] [pid 32915:tid 32937] [client 92.205.188.156:53942] [client 92.205.188.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.188.156, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-_Qzg8EIe76RX8AUaw3wAAARE"]
[Sun May 10 07:12:03.459199 2026] [proxy_fcgi:error] [pid 32915:tid 32937] [client 92.205.188.156:53942] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 07:12:04.049553 2026] [:error] [pid 32915:tid 32934] [client 92.205.188.156:53942] [client 92.205.188.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.188.156, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af-_RDg8EIe76RX8AUaw4QAAAQ4"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 07:12:04.362118 2026] [proxy_fcgi:error] [pid 32915:tid 32934] [client 92.205.188.156:53942] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 07:18:26.056416 2026] [:error] [pid 32915:tid 32942] [client 217.20.124.76:42014] [client 217.20.124.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.20.124.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_Awjg8EIe76RX8AUaylwAAARY"]
[Sun May 10 07:18:26.422418 2026] [proxy_fcgi:error] [pid 32915:tid 32942] [client 217.20.124.76:42014] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 07:18:26.695577 2026] [:error] [pid 32915:tid 32926] [client 217.20.124.76:42014] [client 217.20.124.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.20.124.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_Awjg8EIe76RX8AUaymQAAAQY"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 07:18:26.997687 2026] [proxy_fcgi:error] [pid 32915:tid 32926] [client 217.20.124.76:42014] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 07:31:12.362207 2026] [:error] [pid 46330:tid 46379] [client 104.234.53.186:59441] [client 104.234.53.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.186, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_DwIztrhd3evDQvs8seAAAAEc"]
[Sun May 10 07:31:12.716456 2026] [proxy_fcgi:error] [pid 46330:tid 46379] [client 104.234.53.186:59441] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 07:39:29.919586 2026] [:error] [pid 46330:tid 46371] [client 62.171.132.27:35012] [client 62.171.132.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.171.132.27, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_FsYztrhd3evDQvs8u8wAAAEI"]
[Sun May 10 07:39:30.275670 2026] [proxy_fcgi:error] [pid 46330:tid 46371] [client 62.171.132.27:35012] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 07:39:33.270438 2026] [:error] [pid 46330:tid 46389] [client 62.171.132.27:35012] [client 62.171.132.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.171.132.27, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_FtYztrhd3evDQvs8u-AAAAEw"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 07:39:33.570634 2026] [proxy_fcgi:error] [pid 46330:tid 46389] [client 62.171.132.27:35012] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 07:50:31.020702 2026] [:error] [pid 46330:tid 46368] [client 104.234.53.194:31369] [client 104.234.53.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.194, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_IR4ztrhd3evDQvs8xewAAAEA"]
[Sun May 10 07:50:31.632963 2026] [proxy_fcgi:error] [pid 46330:tid 46368] [client 104.234.53.194:31369] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 07:50:35.869049 2026] [proxy_fcgi:error] [pid 52634:tid 52645] [client 192.175.111.233:46949] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 08:57:37.783372 2026] [:error] [pid 52634:tid 52641] [client 146.196.64.107:40670] [client 146.196.64.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.196.64.107, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_YAdwp8XoWCwFb54CacwAAAMM"]
[Sun May 10 08:57:38.129075 2026] [proxy_fcgi:error] [pid 52634:tid 52641] [client 146.196.64.107:40670] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 08:57:38.491213 2026] [:error] [pid 52634:tid 52661] [client 146.196.64.107:40670] [client 146.196.64.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.196.64.107, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_YAtwp8XoWCwFb54CadAAAANc"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 08:57:38.807167 2026] [proxy_fcgi:error] [pid 52634:tid 52661] [client 146.196.64.107:40670] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 09:57:13.324960 2026] [:error] [pid 46330:tid 46378] [client 163.227.192.154:47100] [client 163.227.192.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.227.192.154, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_l-Yztrhd3evDQvs9EfQAAAEY"]
[Sun May 10 09:57:13.674203 2026] [proxy_fcgi:error] [pid 46330:tid 46378] [client 163.227.192.154:47100] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 09:57:14.014728 2026] [:error] [pid 46330:tid 46411] [client 163.227.192.154:47100] [client 163.227.192.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.227.192.154, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_l-oztrhd3evDQvs9EfgAAAFc"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 09:57:14.317075 2026] [proxy_fcgi:error] [pid 46330:tid 46411] [client 163.227.192.154:47100] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:29.276947 2026] [:error] [pid 46331:tid 46367] [client 143.198.224.35:49840] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s1QP02hpYETwsZpghEwAAAIU"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:29.276947 2026] [:error] [pid 46329:tid 46349] [client 143.198.224.35:49854] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s1eFo7Z2I88d0gPJcygAAABA"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:29.277016 2026] [:error] [pid 52634:tid 52648] [client 143.198.224.35:49850] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s1dwp8XoWCwFb54CzkwAAAMo"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:29.643288 2026] [proxy_fcgi:error] [pid 46329:tid 46349] [client 143.198.224.35:49854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:29.812089 2026] [:error] [pid 46329:tid 46351] [client 143.198.224.35:49854] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s1eFo7Z2I88d0gPJcywAAABI"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:29.934239 2026] [proxy_fcgi:error] [pid 52634:tid 52648] [client 143.198.224.35:49850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:30.102878 2026] [:error] [pid 52634:tid 52638] [client 143.198.224.35:49850] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s1twp8XoWCwFb54CzlQAAAMA"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:30.144120 2026] [proxy_fcgi:error] [pid 46331:tid 46367] [client 143.198.224.35:49840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:30.230742 2026] [proxy_fcgi:error] [pid 46329:tid 46351] [client 143.198.224.35:49854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:30.314279 2026] [:error] [pid 46331:tid 46383] [client 143.198.224.35:49840] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s1gP02hpYETwsZpghFAAAAIs"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:30.400375 2026] [:error] [pid 46329:tid 46335] [client 143.198.224.35:49854] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s1uFo7Z2I88d0gPJczAAAAAI"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:30.437557 2026] [proxy_fcgi:error] [pid 52634:tid 52638] [client 143.198.224.35:49850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:30.606508 2026] [:error] [pid 52634:tid 52661] [client 143.198.224.35:49850] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s1twp8XoWCwFb54CzlwAAANc"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:30.620946 2026] [proxy_fcgi:error] [pid 46331:tid 46383] [client 143.198.224.35:49840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:30.702539 2026] [proxy_fcgi:error] [pid 46329:tid 46335] [client 143.198.224.35:49854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:30.790496 2026] [:error] [pid 46331:tid 46375] [client 143.198.224.35:49840] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s1gP02hpYETwsZpghFQAAAIg"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:30.871628 2026] [:error] [pid 46329:tid 46338] [client 143.198.224.35:49854] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s1uFo7Z2I88d0gPJczQAAAAU"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:30.896785 2026] [proxy_fcgi:error] [pid 52634:tid 52661] [client 143.198.224.35:49850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:31.065372 2026] [:error] [pid 52634:tid 52653] [client 143.198.224.35:49850] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s19wp8XoWCwFb54CzmAAAAM8"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:31.081294 2026] [proxy_fcgi:error] [pid 46331:tid 46375] [client 143.198.224.35:49840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:31.158666 2026] [proxy_fcgi:error] [pid 46329:tid 46338] [client 143.198.224.35:49854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:31.250625 2026] [:error] [pid 46331:tid 46377] [client 143.198.224.35:49840] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s1wP02hpYETwsZpghFgAAAIk"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:31.328157 2026] [:error] [pid 46329:tid 46334] [client 143.198.224.35:49854] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s1-Fo7Z2I88d0gPJczgAAAAE"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:31.399771 2026] [proxy_fcgi:error] [pid 52634:tid 52653] [client 143.198.224.35:49850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:31.542877 2026] [proxy_fcgi:error] [pid 46331:tid 46377] [client 143.198.224.35:49840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:31.568691 2026] [:error] [pid 52634:tid 52641] [client 143.198.224.35:49850] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s19wp8XoWCwFb54CzmgAAAMM"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:31.620602 2026] [proxy_fcgi:error] [pid 46329:tid 46334] [client 143.198.224.35:49854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:31.712395 2026] [:error] [pid 46331:tid 46370] [client 143.198.224.35:49840] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s1wP02hpYETwsZpghFwAAAIY"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:31.789956 2026] [:error] [pid 46329:tid 46337] [client 143.198.224.35:49854] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s1-Fo7Z2I88d0gPJczwAAAAQ"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:31.882073 2026] [proxy_fcgi:error] [pid 52634:tid 52641] [client 143.198.224.35:49850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:32.000013 2026] [proxy_fcgi:error] [pid 46331:tid 46370] [client 143.198.224.35:49840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:32.050877 2026] [:error] [pid 52634:tid 52659] [client 143.198.224.35:49850] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2Nwp8XoWCwFb54CzmwAAANU"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:32.068855 2026] [proxy_fcgi:error] [pid 46329:tid 46337] [client 143.198.224.35:49854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:32.169324 2026] [:error] [pid 46331:tid 46366] [client 143.198.224.35:49840] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2AP02hpYETwsZpghGAAAAIQ"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:32.237516 2026] [:error] [pid 46329:tid 46356] [client 143.198.224.35:49854] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2OFo7Z2I88d0gPJc0QAAABc"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:32.338763 2026] [proxy_fcgi:error] [pid 52634:tid 52659] [client 143.198.224.35:49850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:32.468144 2026] [proxy_fcgi:error] [pid 46331:tid 46366] [client 143.198.224.35:49840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:32.507449 2026] [:error] [pid 52634:tid 52662] [client 143.198.224.35:49850] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2Nwp8XoWCwFb54CznAAAANg"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:32.525955 2026] [proxy_fcgi:error] [pid 46329:tid 46356] [client 143.198.224.35:49854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:32.637140 2026] [:error] [pid 46331:tid 46363] [client 143.198.224.35:49840] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2AP02hpYETwsZpghGQAAAII"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:32.694716 2026] [:error] [pid 46329:tid 46346] [client 143.198.224.35:49854] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2OFo7Z2I88d0gPJc0gAAAA0"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:32.809691 2026] [proxy_fcgi:error] [pid 52634:tid 52662] [client 143.198.224.35:49850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:32.923702 2026] [proxy_fcgi:error] [pid 46331:tid 46363] [client 143.198.224.35:49840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:32.978297 2026] [:error] [pid 52634:tid 52655] [client 143.198.224.35:49850] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2Nwp8XoWCwFb54CznQAAANE"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:32.978465 2026] [proxy_fcgi:error] [pid 46329:tid 46346] [client 143.198.224.35:49854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:33.092983 2026] [:error] [pid 46331:tid 46395] [client 143.198.224.35:49840] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2QP02hpYETwsZpghGgAAAJI"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:33.147173 2026] [:error] [pid 46329:tid 46348] [client 143.198.224.35:49854] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2eFo7Z2I88d0gPJc0wAAAA8"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:33.258282 2026] [proxy_fcgi:error] [pid 52634:tid 52655] [client 143.198.224.35:49850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:33.397031 2026] [proxy_fcgi:error] [pid 46331:tid 46395] [client 143.198.224.35:49840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:33.427403 2026] [:error] [pid 52634:tid 52654] [client 143.198.224.35:49850] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2dwp8XoWCwFb54CzngAAANA"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:33.428292 2026] [proxy_fcgi:error] [pid 46329:tid 46348] [client 143.198.224.35:49854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:33.567366 2026] [:error] [pid 46331:tid 46403] [client 143.198.224.35:49840] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2QP02hpYETwsZpghGwAAAJY"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:33.597183 2026] [:error] [pid 46329:tid 46354] [client 143.198.224.35:49854] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2eFo7Z2I88d0gPJc1AAAABU"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:33.705857 2026] [proxy_fcgi:error] [pid 52634:tid 52654] [client 143.198.224.35:49850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:33.859010 2026] [proxy_fcgi:error] [pid 46331:tid 46403] [client 143.198.224.35:49840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:33.874454 2026] [:error] [pid 52634:tid 52657] [client 143.198.224.35:49850] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2dwp8XoWCwFb54CznwAAANM"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:33.886249 2026] [proxy_fcgi:error] [pid 46329:tid 46354] [client 143.198.224.35:49854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:34.028605 2026] [:error] [pid 46331:tid 46392] [client 143.198.224.35:49840] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2gP02hpYETwsZpghHAAAAJA"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:34.055255 2026] [:error] [pid 46329:tid 46352] [client 143.198.224.35:49854] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2uFo7Z2I88d0gPJc1QAAABM"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:34.163388 2026] [proxy_fcgi:error] [pid 52634:tid 52657] [client 143.198.224.35:49850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:34.332419 2026] [:error] [pid 52634:tid 52643] [client 143.198.224.35:49850] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2twp8XoWCwFb54CzoAAAAMU"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:34.342516 2026] [proxy_fcgi:error] [pid 46329:tid 46352] [client 143.198.224.35:49854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:34.345394 2026] [proxy_fcgi:error] [pid 46331:tid 46392] [client 143.198.224.35:49840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:34.511682 2026] [:error] [pid 46329:tid 46333] [client 143.198.224.35:49854] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2uFo7Z2I88d0gPJc1gAAAAA"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:34.517290 2026] [:error] [pid 46331:tid 46393] [client 143.198.224.35:49840] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2gP02hpYETwsZpghHgAAAJE"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:34.623029 2026] [proxy_fcgi:error] [pid 52634:tid 52643] [client 143.198.224.35:49850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:34.792007 2026] [:error] [pid 52634:tid 52660] [client 143.198.224.35:49850] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2twp8XoWCwFb54CzoQAAANY"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:34.798772 2026] [proxy_fcgi:error] [pid 46329:tid 46333] [client 143.198.224.35:49854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:34.803884 2026] [proxy_fcgi:error] [pid 46331:tid 46393] [client 143.198.224.35:49840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:34.967962 2026] [:error] [pid 46329:tid 46344] [client 143.198.224.35:49854] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2uFo7Z2I88d0gPJc2AAAAAs"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:34.972744 2026] [:error] [pid 46331:tid 46386] [client 143.198.224.35:49840] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2gP02hpYETwsZpghHwAAAI0"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:35.087748 2026] [proxy_fcgi:error] [pid 52634:tid 52660] [client 143.198.224.35:49850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:35.256616 2026] [:error] [pid 52634:tid 52658] [client 143.198.224.35:49850] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s29wp8XoWCwFb54CzogAAANQ"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:35.258206 2026] [proxy_fcgi:error] [pid 46329:tid 46344] [client 143.198.224.35:49854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:35.268557 2026] [proxy_fcgi:error] [pid 46331:tid 46386] [client 143.198.224.35:49840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:35.427562 2026] [:error] [pid 46329:tid 46347] [client 143.198.224.35:49854] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2-Fo7Z2I88d0gPJc2QAAAA4"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:35.437794 2026] [:error] [pid 46331:tid 46372] [client 143.198.224.35:49840] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2wP02hpYETwsZpghIAAAAIc"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:35.542536 2026] [proxy_fcgi:error] [pid 52634:tid 52658] [client 143.198.224.35:49850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:35.710003 2026] [proxy_fcgi:error] [pid 46329:tid 46347] [client 143.198.224.35:49854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:35.711301 2026] [:error] [pid 52634:tid 52638] [client 143.198.224.35:49850] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s29wp8XoWCwFb54CzpAAAAMA"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:35.721717 2026] [proxy_fcgi:error] [pid 46331:tid 46372] [client 143.198.224.35:49840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:35.878651 2026] [:error] [pid 46329:tid 46342] [client 143.198.224.35:49854] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2-Fo7Z2I88d0gPJc2gAAAAk"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:35.890639 2026] [:error] [pid 46331:tid 46401] [client 143.198.224.35:49840] [client 143.198.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_s2wP02hpYETwsZpghIQAAAJU"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:36.008493 2026] [proxy_fcgi:error] [pid 52634:tid 52638] [client 143.198.224.35:49850] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:36.168658 2026] [proxy_fcgi:error] [pid 46329:tid 46342] [client 143.198.224.35:49854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:26:36.181308 2026] [proxy_fcgi:error] [pid 46331:tid 46401] [client 143.198.224.35:49840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:05.104737 2026] [:error] [pid 52634:tid 52652] [client 206.189.136.93:54472] [client 206.189.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_t6dwp8XoWCwFb54C0PgAAAM4"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:05.107251 2026] [:error] [pid 46330:tid 46402] [client 206.189.136.93:54460] [client 206.189.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_t6Yztrhd3evDQvs9KzgAAAFI"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:05.107287 2026] [:error] [pid 52634:tid 52644] [client 206.189.136.93:54450] [client 206.189.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_t6dwp8XoWCwFb54C0PwAAAMY"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:05.480064 2026] [proxy_fcgi:error] [pid 52634:tid 52652] [client 206.189.136.93:54472] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:05.480805 2026] [proxy_fcgi:error] [pid 46330:tid 46402] [client 206.189.136.93:54460] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:05.616870 2026] [:error] [pid 52634:tid 52641] [client 206.189.136.93:54472] [client 206.189.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_t6dwp8XoWCwFb54C0QQAAAMM"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:05.616941 2026] [:error] [pid 46330:tid 46406] [client 206.189.136.93:54460] [client 206.189.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_t6Yztrhd3evDQvs9KzwAAAFQ"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:05.786906 2026] [proxy_fcgi:error] [pid 52634:tid 52644] [client 206.189.136.93:54450] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:05.918524 2026] [proxy_fcgi:error] [pid 52634:tid 52641] [client 206.189.136.93:54472] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:05.922940 2026] [:error] [pid 52634:tid 52650] [client 206.189.136.93:54450] [client 206.189.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_t6dwp8XoWCwFb54C0QgAAAMw"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:05.948673 2026] [proxy_fcgi:error] [pid 46330:tid 46406] [client 206.189.136.93:54460] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:06.054525 2026] [:error] [pid 52634:tid 52651] [client 206.189.136.93:54472] [client 206.189.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_t6twp8XoWCwFb54C0QwAAAM0"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:06.085067 2026] [:error] [pid 46330:tid 46410] [client 206.189.136.93:54460] [client 206.189.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_t6oztrhd3evDQvs9K0AAAAFY"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:06.238572 2026] [proxy_fcgi:error] [pid 52634:tid 52650] [client 206.189.136.93:54450] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:06.348841 2026] [proxy_fcgi:error] [pid 52634:tid 52651] [client 206.189.136.93:54472] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:06.375625 2026] [:error] [pid 52634:tid 52659] [client 206.189.136.93:54450] [client 206.189.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_t6twp8XoWCwFb54C0RAAAANU"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:06.396809 2026] [proxy_fcgi:error] [pid 46330:tid 46410] [client 206.189.136.93:54460] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:06.485010 2026] [:error] [pid 52634:tid 52638] [client 206.189.136.93:54472] [client 206.189.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_t6twp8XoWCwFb54C0RQAAAMA"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:06.533588 2026] [:error] [pid 46330:tid 46378] [client 206.189.136.93:54460] [client 206.189.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_t6oztrhd3evDQvs9K0QAAAEY"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:06.680139 2026] [proxy_fcgi:error] [pid 52634:tid 52659] [client 206.189.136.93:54450] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:06.780979 2026] [proxy_fcgi:error] [pid 52634:tid 52638] [client 206.189.136.93:54472] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:06.816371 2026] [:error] [pid 52634:tid 52649] [client 206.189.136.93:54450] [client 206.189.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_t6twp8XoWCwFb54C0RgAAAMs"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:06.849340 2026] [proxy_fcgi:error] [pid 46330:tid 46378] [client 206.189.136.93:54460] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:06.985745 2026] [:error] [pid 46330:tid 46412] [client 206.189.136.93:54460] [client 206.189.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_t6oztrhd3evDQvs9K0gAAAFg"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:07.121719 2026] [proxy_fcgi:error] [pid 52634:tid 52649] [client 206.189.136.93:54450] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:07.260450 2026] [:error] [pid 52634:tid 52645] [client 206.189.136.93:54450] [client 206.189.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_t69wp8XoWCwFb54C0SQAAAMc"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:07.305530 2026] [proxy_fcgi:error] [pid 46330:tid 46412] [client 206.189.136.93:54460] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:07.442797 2026] [:error] [pid 46330:tid 46400] [client 206.189.136.93:54460] [client 206.189.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_t64ztrhd3evDQvs9K0wAAAFE"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:07.566278 2026] [proxy_fcgi:error] [pid 52634:tid 52645] [client 206.189.136.93:54450] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:07.703105 2026] [:error] [pid 52634:tid 52643] [client 206.189.136.93:54450] [client 206.189.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_t69wp8XoWCwFb54C0SgAAAMU"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:07.748130 2026] [proxy_fcgi:error] [pid 46330:tid 46400] [client 206.189.136.93:54460] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:08.002798 2026] [proxy_fcgi:error] [pid 52634:tid 52643] [client 206.189.136.93:54450] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:08.340726 2026] [:error] [pid 52634:tid 52655] [client 206.189.136.93:54472] [client 206.189.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "af_t7Nwp8XoWCwFb54C0TAAAANE"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 10:31:08.627327 2026] [proxy_fcgi:error] [pid 52634:tid 52655] [client 206.189.136.93:54472] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 11:45:19.381528 2026] [proxy_fcgi:error] [pid 52634:tid 52660] [client 43.165.70.156:58741] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 13:06:52.110941 2026] [:error] [pid 46330:tid 46381] [client 190.92.174.31:40436] [client 190.92.174.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.31, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agASbIztrhd3evDQvs9h3QAAAEg"]
[Sun May 10 13:06:53.932271 2026] [proxy_fcgi:error] [pid 46330:tid 46381] [client 190.92.174.31:40436] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 13:06:54.314438 2026] [:error] [pid 46330:tid 46371] [client 190.92.174.31:40436] [client 190.92.174.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.31, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agASboztrhd3evDQvs9h3gAAAEI"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 13:06:54.613170 2026] [proxy_fcgi:error] [pid 46330:tid 46371] [client 190.92.174.31:40436] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 13:25:49.722369 2026] [:error] [pid 52634:tid 52650] [client 5.75.134.69:42994] [client 5.75.134.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.75.134.69, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agAW3dwp8XoWCwFb54DjbAAAAMw"]
[Sun May 10 13:25:50.055362 2026] [proxy_fcgi:error] [pid 52634:tid 52650] [client 5.75.134.69:42994] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 13:25:50.365452 2026] [:error] [pid 52634:tid 52656] [client 5.75.134.69:42994] [client 5.75.134.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.75.134.69, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agAW3twp8XoWCwFb54DjbQAAANI"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 13:25:50.657468 2026] [proxy_fcgi:error] [pid 52634:tid 52656] [client 5.75.134.69:42994] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 14:16:46.619626 2026] [:error] [pid 46331:tid 46361] [client 104.234.53.175:27233] [client 104.234.53.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.175, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agAizgP02hpYETwsZpg5kQAAAIA"]
[Sun May 10 14:16:46.921275 2026] [proxy_fcgi:error] [pid 46331:tid 46361] [client 104.234.53.175:27233] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 14:18:29.395093 2026] [:error] [pid 46331:tid 46366] [client 138.59.146.149:61650] [client 138.59.146.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.59.146.149, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agAjNQP02hpYETwsZpg57gAAAIQ"]
[Sun May 10 14:18:29.732019 2026] [proxy_fcgi:error] [pid 46331:tid 46366] [client 138.59.146.149:61650] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 14:18:30.300885 2026] [:error] [pid 46331:tid 46363] [client 138.59.146.149:61650] [client 138.59.146.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.59.146.149, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agAjNgP02hpYETwsZpg58AAAAII"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 14:18:30.677333 2026] [proxy_fcgi:error] [pid 46331:tid 46363] [client 138.59.146.149:61650] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 14:21:30.534967 2026] [:error] [pid 46331:tid 46392] [client 209.38.251.46:58816] [client 209.38.251.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.38.251.46, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agAj6gP02hpYETwsZpg6TAAAAJA"]
[Sun May 10 14:21:30.833598 2026] [proxy_fcgi:error] [pid 46331:tid 46392] [client 209.38.251.46:58816] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 14:21:31.107790 2026] [:error] [pid 46331:tid 46385] [client 209.38.251.46:58816] [client 209.38.251.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.38.251.46, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agAj6wP02hpYETwsZpg6TQAAAIw"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 14:21:31.417503 2026] [proxy_fcgi:error] [pid 46331:tid 46385] [client 209.38.251.46:58816] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 15:31:03.993435 2026] [:error] [pid 46331:tid 46362] [client 65.0.43.106:45016] [client 65.0.43.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.0.43.106, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agA0NwP02hpYETwsZphDUgAAAIE"]
[Sun May 10 15:31:04.323714 2026] [proxy_fcgi:error] [pid 46331:tid 46362] [client 65.0.43.106:45016] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 15:31:04.881884 2026] [:error] [pid 46331:tid 46393] [client 65.0.43.106:45016] [client 65.0.43.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.0.43.106, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agA0OAP02hpYETwsZphDUwAAAJE"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 15:31:05.191864 2026] [proxy_fcgi:error] [pid 46331:tid 46393] [client 65.0.43.106:45016] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 15:39:57.947866 2026] [:error] [pid 14779:tid 14791] [client 209.38.233.133:59358] [client 209.38.233.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.38.233.133, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agA2TVXzPaW9Hap8yc8LNwAAAUo"]
[Sun May 10 15:39:58.329516 2026] [proxy_fcgi:error] [pid 14779:tid 14791] [client 209.38.233.133:59358] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 15:39:59.868705 2026] [:error] [pid 14779:tid 14794] [client 209.38.233.133:59358] [client 209.38.233.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.38.233.133, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agA2T1XzPaW9Hap8yc8LOQAAAU0"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 15:40:00.162621 2026] [proxy_fcgi:error] [pid 14779:tid 14794] [client 209.38.233.133:59358] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 16:16:02.302863 2026] [:error] [pid 14779:tid 14802] [client 202.10.46.108:36822] [client 202.10.46.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.10.46.108, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agA-wlXzPaW9Hap8yc8QRwAAAVU"]
[Sun May 10 16:16:02.666001 2026] [proxy_fcgi:error] [pid 14779:tid 14802] [client 202.10.46.108:36822] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 16:16:02.982129 2026] [:error] [pid 14779:tid 14782] [client 202.10.46.108:36822] [client 202.10.46.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.10.46.108, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agA-wlXzPaW9Hap8yc8QSAAAAUE"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 16:16:03.289250 2026] [proxy_fcgi:error] [pid 14779:tid 14782] [client 202.10.46.108:36822] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 17:02:54.182560 2026] [proxy_fcgi:error] [pid 49703:tid 49715] [client 23.27.22.202:62212] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 17:06:37.072916 2026] [:error] [pid 52244:tid 52250] [client 103.69.196.177:50212] [client 103.69.196.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.69.196.177, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agBKnYbFDG6vNPrleiYsKwAAAEI"]
[Sun May 10 17:06:37.390930 2026] [proxy_fcgi:error] [pid 52244:tid 52250] [client 103.69.196.177:50212] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 17:06:40.271636 2026] [:error] [pid 52244:tid 52254] [client 103.69.196.177:50212] [client 103.69.196.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.69.196.177, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agBKoIbFDG6vNPrleiYsLQAAAEY"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 17:06:40.576468 2026] [proxy_fcgi:error] [pid 52244:tid 52254] [client 103.69.196.177:50212] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 17:17:08.373662 2026] [proxy_fcgi:error] [pid 54626:tid 54637] [client 100.26.234.3:54888] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 17:17:08.733851 2026] [proxy_fcgi:error] [pid 54628:tid 54686] [client 100.26.234.3:41964] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 20:49:25.756749 2026] [:error] [pid 16038:tid 16080] [client 47.79.145.1:54190] [client 47.79.145.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.79.145.1, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agB-1U4hf5Tcsfa2scJZNwAAAYw"]
[Sun May 10 20:49:26.294253 2026] [proxy_fcgi:error] [pid 16038:tid 16080] [client 47.79.145.1:54190] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 20:49:26.712991 2026] [:error] [pid 16038:tid 16081] [client 47.79.145.1:54190] [client 47.79.145.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.79.145.1, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agB-1k4hf5Tcsfa2scJZOAAAAY0"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 20:49:27.017677 2026] [proxy_fcgi:error] [pid 16038:tid 16081] [client 47.79.145.1:54190] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 22:33:18.427944 2026] [:error] [pid 16096:tid 16116] [client 45.11.97.227:60236] [client 45.11.97.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.11.97.227, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agCXLq8wyxcrT50p9kvlnQAAAE8"]
[Sun May 10 22:33:20.653438 2026] [proxy_fcgi:error] [pid 16096:tid 16116] [client 45.11.97.227:60236] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 22:33:21.000913 2026] [:error] [pid 16096:tid 16105] [client 45.11.97.227:60236] [client 45.11.97.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.11.97.227, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agCXMK8wyxcrT50p9kvloQAAAEQ"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 22:33:21.295854 2026] [proxy_fcgi:error] [pid 16096:tid 16105] [client 45.11.97.227:60236] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 10 22:44:18.724164 2026] [proxy_fcgi:error] [pid 16096:tid 16124] [client 66.249.79.8:58206] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 23:11:38.865253 2026] [proxy_fcgi:error] [pid 16037:tid 16063] [client 74.7.228.47:47646] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 10 23:11:40.276507 2026] [proxy_fcgi:error] [pid 16096:tid 16124] [client 74.7.242.34:47718] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 02:10:20.373079 2026] [proxy_fcgi:error] [pid 16037:tid 16046] [client 74.7.227.1:57392] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 02:23:25.775978 2026] [:error] [pid 16037:tid 16045] [client 14.225.219.71:44854] [client 14.225.219.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.225.219.71, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agDNHXzjLQfyYTkAdSSoQAAAAAQ"]
[Mon May 11 02:23:27.452831 2026] [proxy_fcgi:error] [pid 16037:tid 16045] [client 14.225.219.71:44854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 02:23:27.842278 2026] [:error] [pid 16037:tid 16050] [client 14.225.219.71:44854] [client 14.225.219.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.225.219.71, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agDNH3zjLQfyYTkAdSSoQwAAAAk"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 02:23:28.138079 2026] [proxy_fcgi:error] [pid 16037:tid 16050] [client 14.225.219.71:44854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 03:12:23.663220 2026] [proxy_fcgi:error] [pid 37030:tid 37035] [client 136.144.43.115:52305] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 03:16:18.096306 2026] [proxy_fcgi:error] [pid 9842:tid 9868] [client 158.173.67.175:27837] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 03:21:19.663370 2026] [proxy_fcgi:error] [pid 9842:tid 9852] [client 213.109.202.57:50702] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 03:27:33.380350 2026] [:error] [pid 16037:tid 16061] [client 185.169.4.152:56367] [client 185.169.4.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/"] [unique_id "agDcJXzjLQfyYTkAdSSzSAAAABQ"], referer: binance.com
[Mon May 11 04:23:32.648607 2026] [:error] [pid 65261:tid 65328] [client 138.59.146.149:63784] [client 138.59.146.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.59.146.149, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agDpRJu_9uQJeFrcOssmZQAAAIU"]
[Mon May 11 04:23:33.003350 2026] [proxy_fcgi:error] [pid 65261:tid 65328] [client 138.59.146.149:63784] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 04:23:33.584715 2026] [:error] [pid 65261:tid 65332] [client 138.59.146.149:63784] [client 138.59.146.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.59.146.149, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agDpRZu_9uQJeFrcOssmZgAAAIk"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 04:23:33.898660 2026] [proxy_fcgi:error] [pid 65261:tid 65332] [client 138.59.146.149:63784] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 04:23:54.944114 2026] [:error] [pid 65259:tid 65291] [client 47.79.145.1:58570] [client 47.79.145.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.79.145.1, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agDpWgPsXLnMa32ma5BHiQAAABc"]
[Mon May 11 04:23:55.226562 2026] [proxy_fcgi:error] [pid 65259:tid 65291] [client 47.79.145.1:58570] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 04:23:55.611163 2026] [:error] [pid 65259:tid 65278] [client 47.79.145.1:58570] [client 47.79.145.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.79.145.1, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agDpWwPsXLnMa32ma5BHigAAAAo"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 04:23:55.895079 2026] [proxy_fcgi:error] [pid 65259:tid 65278] [client 47.79.145.1:58570] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 04:46:00.827803 2026] [:error] [pid 65260:tid 65315] [client 104.244.79.40:41598] [client 104.244.79.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.79.40, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agDuiDqbzwIHjP6Y_3FqPQAAAFM"]
[Mon May 11 04:46:01.436925 2026] [proxy_fcgi:error] [pid 65260:tid 65315] [client 104.244.79.40:41598] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 04:46:01.781328 2026] [:error] [pid 65260:tid 65300] [client 104.244.79.40:41598] [client 104.244.79.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.79.40, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agDuiTqbzwIHjP6Y_3FqPgAAAEQ"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 04:46:02.073456 2026] [proxy_fcgi:error] [pid 65260:tid 65300] [client 104.244.79.40:41598] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 05:11:55.471080 2026] [:error] [pid 65366:tid 65389] [client 15.235.229.40:54646] [client 15.235.229.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.235.229.40, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agD0m6hVGdYzapDtv-HkaAAAANQ"]
[Mon May 11 05:11:56.134656 2026] [proxy_fcgi:error] [pid 65366:tid 65389] [client 15.235.229.40:54646] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 05:11:56.477064 2026] [:error] [pid 65366:tid 65383] [client 15.235.229.40:54646] [client 15.235.229.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.235.229.40, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agD0nKhVGdYzapDtv-HkaQAAAM4"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 05:11:56.777326 2026] [proxy_fcgi:error] [pid 65366:tid 65383] [client 15.235.229.40:54646] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 05:26:40.441720 2026] [:error] [pid 65366:tid 65373] [client 93.89.225.48:39084] [client 93.89.225.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.89.225.48, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agD4EKhVGdYzapDtv-HnVgAAAMU"]
[Mon May 11 05:26:40.774514 2026] [proxy_fcgi:error] [pid 65366:tid 65373] [client 93.89.225.48:39084] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 05:26:41.155472 2026] [:error] [pid 65366:tid 65369] [client 93.89.225.48:39084] [client 93.89.225.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.89.225.48, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agD4EahVGdYzapDtv-HnWQAAAME"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 05:26:41.462618 2026] [proxy_fcgi:error] [pid 65366:tid 65369] [client 93.89.225.48:39084] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 05:54:08.292946 2026] [:error] [pid 65261:tid 65327] [client 94.136.170.74:42464] [client 94.136.170.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.136.170.74, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agD-gJu_9uQJeFrcOss2cgAAAIQ"]
[Mon May 11 05:54:08.622565 2026] [proxy_fcgi:error] [pid 65261:tid 65327] [client 94.136.170.74:42464] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 05:54:08.902929 2026] [:error] [pid 65261:tid 65337] [client 94.136.170.74:42464] [client 94.136.170.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.136.170.74, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agD-gJu_9uQJeFrcOss2dQAAAI4"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 05:54:09.215468 2026] [proxy_fcgi:error] [pid 65261:tid 65337] [client 94.136.170.74:42464] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 06:22:29.276909 2026] [:error] [pid 65366:tid 65371] [client 20.118.19.166:1654] [client 20.118.19.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.118.19.166, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agEFJahVGdYzapDtv-HyQQAAAMM"]
[Mon May 11 06:22:29.644014 2026] [proxy_fcgi:error] [pid 65366:tid 65371] [client 20.118.19.166:1654] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 06:22:30.222488 2026] [:error] [pid 65366:tid 65379] [client 20.118.19.166:1654] [client 20.118.19.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.118.19.166, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agEFJqhVGdYzapDtv-HyQwAAAMo"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 06:22:30.533189 2026] [proxy_fcgi:error] [pid 65366:tid 65379] [client 20.118.19.166:1654] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 06:46:54.408730 2026] [:error] [pid 65261:tid 65345] [client 69.49.112.64:57312] [client 69.49.112.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.64, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agEK3pu_9uQJeFrcOss9CgAAAJY"]
[Mon May 11 06:46:54.760624 2026] [proxy_fcgi:error] [pid 65261:tid 65345] [client 69.49.112.64:57312] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 06:46:55.114724 2026] [:error] [pid 65261:tid 65342] [client 69.49.112.64:57312] [client 69.49.112.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.64, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agEK35u_9uQJeFrcOss9DAAAAJM"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 06:46:55.466054 2026] [proxy_fcgi:error] [pid 65261:tid 65342] [client 69.49.112.64:57312] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 07:49:44.370569 2026] [proxy_fcgi:error] [pid 35052:tid 35062] [client 74.7.228.57:50552] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 10:18:59.166353 2026] [:error] [pid 35052:tid 35062] [client 5.9.73.60:36350] [client 5.9.73.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.9.73.60, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agE8k-HjpNNnFJrMXu22qAAAAUc"]
[Mon May 11 10:18:59.632037 2026] [proxy_fcgi:error] [pid 35052:tid 35062] [client 5.9.73.60:36350] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 10:18:59.926523 2026] [:error] [pid 35052:tid 35064] [client 5.9.73.60:36350] [client 5.9.73.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.9.73.60, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agE8k-HjpNNnFJrMXu22qQAAAUk"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 10:19:00.280857 2026] [proxy_fcgi:error] [pid 35052:tid 35064] [client 5.9.73.60:36350] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 11:21:47.318948 2026] [:error] [pid 35052:tid 35067] [client 157.66.47.86:34386] [client 157.66.47.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.66.47.86, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agFLS-HjpNNnFJrMXu3H2gAAAUw"]
[Mon May 11 11:21:47.722660 2026] [proxy_fcgi:error] [pid 35052:tid 35067] [client 157.66.47.86:34386] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 11:21:48.090712 2026] [:error] [pid 35052:tid 35070] [client 157.66.47.86:34386] [client 157.66.47.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.66.47.86, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agFLTOHjpNNnFJrMXu3H3AAAAU8"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 11:21:48.460701 2026] [proxy_fcgi:error] [pid 35052:tid 35070] [client 157.66.47.86:34386] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 11:33:15.249456 2026] [:error] [pid 35052:tid 35072] [client 192.254.250.166:33384] [client 192.254.250.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.254.250.166, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agFN--HjpNNnFJrMXu3K6gAAAVE"]
[Mon May 11 11:33:16.946843 2026] [proxy_fcgi:error] [pid 35052:tid 35072] [client 192.254.250.166:33384] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 11:33:17.263945 2026] [:error] [pid 35052:tid 35065] [client 192.254.250.166:33384] [client 192.254.250.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.254.250.166, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agFN_eHjpNNnFJrMXu3K6wAAAUo"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 11:33:17.655340 2026] [proxy_fcgi:error] [pid 35052:tid 35065] [client 192.254.250.166:33384] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 14:29:26.460398 2026] [:error] [pid 58750:tid 58763] [client 168.119.170.38:55340] [client 168.119.170.38] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agF3RjBVaNG3wJtPBU-LlgAAAUs"]
[Mon May 11 14:43:08.196535 2026] [:error] [pid 58750:tid 58763] [client 168.119.170.38:49120] [client 168.119.170.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.119.170.38, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agF6fDBVaNG3wJtPBU-Q4AAAAUs"]
[Mon May 11 14:43:09.869540 2026] [proxy_fcgi:error] [pid 58750:tid 58763] [client 168.119.170.38:49120] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 14:43:10.224338 2026] [:error] [pid 58750:tid 58761] [client 168.119.170.38:49120] [client 168.119.170.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.119.170.38, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agF6fjBVaNG3wJtPBU-Q4QAAAUk"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 14:43:10.530820 2026] [proxy_fcgi:error] [pid 58750:tid 58761] [client 168.119.170.38:49120] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 15:15:03.878970 2026] [proxy_fcgi:error] [pid 58616:tid 58665] [client 185.12.251.124:39063] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 15:54:17.106373 2026] [:error] [pid 4645:tid 4649] [client 35.204.205.120:51812] [client 35.204.205.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "agGLKXy4dxn8-Cx5vOWMGgAAAEE"]
[Mon May 11 15:54:52.433828 2026] [:error] [pid 4645:tid 4671] [client 110.173.132.115:49700] [client 110.173.132.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 110.173.132.115, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agGLTHy4dxn8-Cx5vOWMMAAAAFc"]
[Mon May 11 15:54:52.788731 2026] [proxy_fcgi:error] [pid 4645:tid 4671] [client 110.173.132.115:49700] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 15:54:53.179856 2026] [:error] [pid 4645:tid 4653] [client 110.173.132.115:49700] [client 110.173.132.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 110.173.132.115, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agGLTXy4dxn8-Cx5vOWMMgAAAEU"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 15:54:53.471371 2026] [proxy_fcgi:error] [pid 4645:tid 4653] [client 110.173.132.115:49700] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 17:19:33.690124 2026] [:error] [pid 4685:tid 4702] [client 104.244.79.40:60502] [client 104.244.79.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.79.40, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agGfJXwrjbU4NZilCZ_OGgAAAQ4"]
[Mon May 11 17:19:34.035117 2026] [proxy_fcgi:error] [pid 4685:tid 4702] [client 104.244.79.40:60502] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 17:19:34.493447 2026] [:error] [pid 4685:tid 4699] [client 104.244.79.40:60502] [client 104.244.79.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.79.40, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agGfJnwrjbU4NZilCZ_OGwAAAQs"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 17:19:34.799446 2026] [proxy_fcgi:error] [pid 4685:tid 4699] [client 104.244.79.40:60502] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 18:19:27.945553 2026] [proxy_fcgi:error] [pid 4645:tid 4658] [client 185.12.250.104:50505] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 19:02:02.456703 2026] [:error] [pid 4645:tid 4670] [client 45.117.169.86:35988] [client 45.117.169.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.117.169.86, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agG3Kny4dxn8-Cx5vOWp8gAAAFY"]
[Mon May 11 19:02:03.052809 2026] [proxy_fcgi:error] [pid 4645:tid 4670] [client 45.117.169.86:35988] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 19:02:03.930503 2026] [:error] [pid 4645:tid 4653] [client 45.117.169.86:35988] [client 45.117.169.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.117.169.86, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agG3K3y4dxn8-Cx5vOWp9AAAAEU"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 19:02:04.230796 2026] [proxy_fcgi:error] [pid 4645:tid 4653] [client 45.117.169.86:35988] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 19:16:46.476568 2026] [:error] [pid 58677:tid 58710] [client 103.72.97.232:44788] [client 103.72.97.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.72.97.232, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agG6nhasRhyteIXf1RVeAwAAAJY"]
[Mon May 11 19:16:46.846946 2026] [proxy_fcgi:error] [pid 58677:tid 58710] [client 103.72.97.232:44788] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 19:16:48.462964 2026] [:error] [pid 58677:tid 58692] [client 103.72.97.232:44788] [client 103.72.97.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.72.97.232, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agG6oBasRhyteIXf1RVeBAAAAIQ"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 19:16:48.790456 2026] [proxy_fcgi:error] [pid 58677:tid 58692] [client 103.72.97.232:44788] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 19:24:17.887448 2026] [:error] [pid 58677:tid 58701] [client 202.10.46.108:51662] [client 202.10.46.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.10.46.108, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agG8YRasRhyteIXf1RVfogAAAI0"]
[Mon May 11 19:24:18.245609 2026] [proxy_fcgi:error] [pid 58677:tid 58701] [client 202.10.46.108:51662] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 19:24:18.570142 2026] [:error] [pid 58677:tid 58703] [client 202.10.46.108:51662] [client 202.10.46.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.10.46.108, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agG8YhasRhyteIXf1RVfowAAAI8"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 19:24:18.868840 2026] [proxy_fcgi:error] [pid 58677:tid 58703] [client 202.10.46.108:51662] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 19:40:06.683329 2026] [:error] [pid 58750:tid 58760] [client 202.10.45.93:51598] [client 202.10.45.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.10.45.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agHAFjBVaNG3wJtPBU-r2wAAAUg"]
[Mon May 11 19:40:07.028850 2026] [proxy_fcgi:error] [pid 58750:tid 58760] [client 202.10.45.93:51598] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 19:40:09.186460 2026] [:error] [pid 58750:tid 58759] [client 202.10.45.93:51598] [client 202.10.45.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.10.45.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agHAGTBVaNG3wJtPBU-r3AAAAUc"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 19:40:09.487122 2026] [proxy_fcgi:error] [pid 58750:tid 58759] [client 202.10.45.93:51598] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 19:51:57.637527 2026] [proxy_fcgi:error] [pid 58616:tid 58647] [client 66.249.79.8:37872] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 19:59:42.076878 2026] [:error] [pid 4685:tid 4698] [client 212.227.107.242:47762] [client 212.227.107.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.227.107.242, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agHErnwrjbU4NZilCZ_5MQAAAQo"]
[Mon May 11 19:59:42.434046 2026] [proxy_fcgi:error] [pid 4685:tid 4698] [client 212.227.107.242:47762] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 19:59:43.013766 2026] [:error] [pid 4685:tid 4694] [client 212.227.107.242:47762] [client 212.227.107.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.227.107.242, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agHEr3wrjbU4NZilCZ_5MgAAAQY"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 19:59:43.323391 2026] [proxy_fcgi:error] [pid 4685:tid 4694] [client 212.227.107.242:47762] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 11 20:36:51.307333 2026] [proxy_fcgi:error] [pid 4685:tid 4710] [client 34.193.251.180:36351] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 20:40:51.139435 2026] [proxy_fcgi:error] [pid 4685:tid 4698] [client 74.7.228.57:56792] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 22:03:34.453705 2026] [proxy_fcgi:error] [pid 58677:tid 58690] [client 74.7.228.47:51150] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 11 22:37:48.206946 2026] [proxy_fcgi:error] [pid 58615:tid 58633] [client 52.30.156.26:52604] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 12 00:03:00.438419 2026] [:error] [pid 58616:tid 58650] [client 34.34.120.218:42056] [client 34.34.120.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "agH9tNnsbeF5ioCAecj83wAAAMQ"]
[Tue May 12 00:28:35.611370 2026] [proxy_fcgi:error] [pid 4645:tid 4658] [client 66.249.79.6:39672] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 12 00:45:54.909857 2026] [proxy_fcgi:error] [pid 58677:tid 58695] [client 54.216.223.245:60110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 12 01:05:48.056973 2026] [proxy_fcgi:error] [pid 58616:tid 58646] [client 16.147.207.53:54770] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 12 01:05:48.534133 2026] [proxy_fcgi:error] [pid 58616:tid 58651] [client 16.147.207.53:54770] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 12 09:16:30.822195 2026] [:error] [pid 39958:tid 40028] [client 34.17.127.203:42282] [client 34.17.127.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "agJ_buVI9FVDxXB2XxhBWQAAAIk"]
[Tue May 12 10:58:18.829103 2026] [proxy_fcgi:error] [pid 55559:tid 55633] [client 198.12.69.93:46348] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 12 10:59:47.138788 2026] [proxy_fcgi:error] [pid 42143:tid 42160] [client 198.12.69.93:53854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 12 17:49:36.624803 2026] [proxy_fcgi:error] [pid 39958:tid 40037] [client 194.132.201.114:36609] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 12 21:08:36.728289 2026] [proxy_fcgi:error] [pid 42143:tid 42166] [client 66.249.79.6:58446] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 12 22:09:29.299409 2026] [proxy_fcgi:error] [pid 21242:tid 21269] [client 156.245.246.6:52692] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au
[Wed May 13 00:54:07.301990 2026] [proxy_fcgi:error] [pid 40061:tid 40084] [client 74.7.230.49:56158] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:08:36.460253 2026] [autoindex:error] [pid 42143:tid 42147] [client 141.98.11.120:58684] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed May 13 03:17:39.412260 2026] [:error] [pid 39958:tid 40041] [client 65.108.36.152:42726] [client 65.108.36.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.108.36.152, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "agN80-VI9FVDxXB2XxieOQAAAJY"]
[Wed May 13 03:17:39.753863 2026] [proxy_fcgi:error] [pid 39958:tid 40041] [client 65.108.36.152:42726] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:17:51.979935 2026] [proxy_fcgi:error] [pid 42143:tid 42166] [client 165.22.99.169:43796] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:17:52.577637 2026] [proxy_fcgi:error] [pid 42143:tid 42159] [client 165.22.99.169:43796] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:17:53.582618 2026] [proxy_fcgi:error] [pid 55559:tid 55626] [client 192.99.100.166:53836] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:17:59.495100 2026] [proxy_fcgi:error] [pid 55559:tid 55633] [client 180.93.137.9:49834] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:18:01.582021 2026] [proxy_fcgi:error] [pid 39958:tid 40023] [client 77.237.247.134:49782] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:18:05.013647 2026] [proxy_fcgi:error] [pid 39958:tid 40033] [client 3.70.164.132:56546] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:18:11.330992 2026] [proxy_fcgi:error] [pid 39957:tid 40000] [client 131.72.236.221:49984] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:18:12.711751 2026] [proxy_fcgi:error] [pid 39957:tid 39999] [client 131.72.236.221:49984] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:18:20.955753 2026] [proxy_fcgi:error] [pid 40061:tid 40087] [client 51.38.81.255:43932] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:18:21.166862 2026] [proxy_fcgi:error] [pid 21242:tid 21254] [client 35.226.7.126:47874] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:18:21.189665 2026] [:error] [pid 40061:tid 40066] [client 192.99.100.166:59292] [client 192.99.100.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users"] [unique_id "agN8_bycIKt8hxHMBYssIgAAAMM"]
[Wed May 13 03:18:23.061847 2026] [:error] [pid 40061:tid 40076] [client 3.93.122.67:49666] [client 3.93.122.67] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users"] [unique_id "agN8_7ycIKt8hxHMBYssIwAAAM0"]
[Wed May 13 03:18:32.785086 2026] [proxy_fcgi:error] [pid 21242:tid 21251] [client 162.55.27.181:40966] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:18:39.441122 2026] [proxy_fcgi:error] [pid 40061:tid 40081] [client 162.55.27.181:40980] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:19:02.808605 2026] [proxy_fcgi:error] [pid 21242:tid 21265] [client 65.108.36.152:38772] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:19:05.271023 2026] [proxy_fcgi:error] [pid 21242:tid 21254] [client 65.108.36.152:38772] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:19:06.212967 2026] [:error] [pid 39956:tid 39967] [client 162.241.73.198:17962] [client 162.241.73.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users"] [unique_id "agN9Ko2K3wZDsNji3MwpEQAAAAI"]
[Wed May 13 03:19:21.260401 2026] [proxy_fcgi:error] [pid 40061:tid 40082] [client 162.240.228.207:57110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:19:30.091008 2026] [proxy_fcgi:error] [pid 39958:tid 40033] [client 27.50.77.95:59980] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:19:40.709430 2026] [proxy_fcgi:error] [pid 42143:tid 42166] [client 157.180.91.87:34810] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:19:54.388002 2026] [proxy_fcgi:error] [pid 39957:tid 40015] [client 68.183.200.133:58696] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:19:58.426385 2026] [proxy_fcgi:error] [pid 42143:tid 42169] [client 162.55.27.181:41148] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:20:03.654038 2026] [proxy_fcgi:error] [pid 39957:tid 40009] [client 192.99.100.166:44070] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:20:30.852352 2026] [proxy_fcgi:error] [pid 42143:tid 42158] [client 160.187.68.132:49402] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:20:32.695498 2026] [proxy_fcgi:error] [pid 42143:tid 42155] [client 178.18.246.56:42280] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:20:45.712025 2026] [proxy_fcgi:error] [pid 39958:tid 40038] [client 82.223.204.40:45698] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:20:46.569491 2026] [proxy_fcgi:error] [pid 39958:tid 40028] [client 82.223.204.40:45698] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:20:46.858727 2026] [proxy_fcgi:error] [pid 42143:tid 42157] [client 27.50.77.95:47836] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:20:54.634293 2026] [proxy_fcgi:error] [pid 42143:tid 42162] [client 192.99.100.166:41074] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:21:18.688506 2026] [proxy_fcgi:error] [pid 40061:tid 40085] [client 51.38.81.255:48434] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:21:24.369117 2026] [proxy_fcgi:error] [pid 42143:tid 42167] [client 51.91.98.45:34320] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:21:25.387473 2026] [proxy_fcgi:error] [pid 42143:tid 42170] [client 27.50.77.95:46300] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:22:21.091118 2026] [proxy_fcgi:error] [pid 39958:tid 40030] [client 167.86.113.243:41402] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:22:29.202688 2026] [proxy_fcgi:error] [pid 40061:tid 40085] [client 185.16.36.161:54196] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:22:34.604993 2026] [proxy_fcgi:error] [pid 40061:tid 40084] [client 178.156.155.70:56216] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:22:41.026321 2026] [proxy_fcgi:error] [pid 42143:tid 42167] [client 65.108.36.152:50538] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:23:51.300578 2026] [proxy_fcgi:error] [pid 21242:tid 21246] [client 65.21.229.34:58134] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:24:18.878388 2026] [proxy_fcgi:error] [pid 40061:tid 40084] [client 51.38.81.255:56102] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:24:36.022829 2026] [proxy_fcgi:error] [pid 55559:tid 55617] [client 34.100.167.237:37744] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:25:25.097714 2026] [proxy_fcgi:error] [pid 39958:tid 40024] [client 162.43.89.76:36268] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:26:08.118804 2026] [proxy_fcgi:error] [pid 39957:tid 39996] [client 192.99.100.166:59654] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:27:25.216708 2026] [proxy_fcgi:error] [pid 39957:tid 40015] [client 162.240.228.207:39450] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:27:37.150627 2026] [proxy_fcgi:error] [pid 39957:tid 40009] [client 148.72.155.199:39118] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:28:02.553306 2026] [proxy_fcgi:error] [pid 39957:tid 40015] [client 160.187.68.132:35894] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:28:10.659067 2026] [proxy_fcgi:error] [pid 42143:tid 42171] [client 131.72.236.221:33552] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:28:32.024069 2026] [proxy_fcgi:error] [pid 39958:tid 40024] [client 162.241.73.198:21906] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:28:39.091629 2026] [proxy_fcgi:error] [pid 21242:tid 21247] [client 178.156.155.70:43946] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:29:39.184674 2026] [proxy_fcgi:error] [pid 40061:tid 40083] [client 192.99.100.166:52060] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:29:42.260834 2026] [proxy_fcgi:error] [pid 21242:tid 21264] [client 176.9.144.171:53744] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:31:07.832089 2026] [proxy_fcgi:error] [pid 55559:tid 55620] [client 51.91.98.45:49998] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:32:28.877282 2026] [proxy_fcgi:error] [pid 55559:tid 55645] [client 3.70.164.132:38994] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:35:38.817617 2026] [proxy_fcgi:error] [pid 42143:tid 42157] [client 35.195.125.166:56245] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:35:40.406396 2026] [proxy_fcgi:error] [pid 40061:tid 40074] [client 27.50.77.95:45194] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:35:44.849182 2026] [proxy_fcgi:error] [pid 39957:tid 39997] [client 163.227.92.57:59682] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:35:58.885113 2026] [proxy_fcgi:error] [pid 42143:tid 42151] [client 150.241.245.183:41242] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:36:40.296030 2026] [proxy_fcgi:error] [pid 40061:tid 40087] [client 103.97.126.89:44820] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:37:26.916233 2026] [proxy_fcgi:error] [pid 55559:tid 55626] [client 77.237.247.134:37274] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:52:51.261688 2026] [proxy_fcgi:error] [pid 20486:tid 20590] [client 74.7.241.48:59538] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 03:52:52.700429 2026] [proxy_fcgi:error] [pid 20486:tid 20593] [client 74.7.244.46:54908] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 08:23:56.800800 2026] [proxy_fcgi:error] [pid 23780:tid 23809] [client 43.162.122.59:52238] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 11:01:32.996691 2026] [:error] [pid 23787:tid 23854] [client 160.187.68.132:52076] [client 160.187.68.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.187.68.132, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agPpjB1cs5wE7VT6wirSFQAAAIY"]
[Wed May 13 11:01:34.718908 2026] [proxy_fcgi:error] [pid 23787:tid 23854] [client 160.187.68.132:52076] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 11:01:35.154207 2026] [:error] [pid 23787:tid 23848] [client 160.187.68.132:52076] [client 160.187.68.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.187.68.132, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agPpjx1cs5wE7VT6wirSGAAAAIA"], referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 11:01:35.523800 2026] [proxy_fcgi:error] [pid 23787:tid 23848] [client 160.187.68.132:52076] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 11:32:34.263857 2026] [:error] [pid 23780:tid 23796] [client 167.71.136.93:43104] [client 167.71.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agPw0nXgOibPjrXgeTBkzAAAAAI"]
[Wed May 13 11:32:34.641989 2026] [proxy_fcgi:error] [pid 23780:tid 23796] [client 167.71.136.93:43104] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 11:32:35.091100 2026] [:error] [pid 23780:tid 23817] [client 167.71.136.93:43104] [client 167.71.136.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.136.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agPw03XgOibPjrXgeTBkzQAAABc"], referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 11:32:35.439562 2026] [proxy_fcgi:error] [pid 23780:tid 23817] [client 167.71.136.93:43104] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 11:46:48.544628 2026] [:error] [pid 3259:tid 3278] [client 65.1.104.84:47572] [client 65.1.104.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.1.104.84, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agP0KOWJB4YwcPVLeArWCQAAARE"]
[Wed May 13 11:46:49.155851 2026] [proxy_fcgi:error] [pid 3259:tid 3278] [client 65.1.104.84:47572] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 11:46:49.484951 2026] [:error] [pid 3259:tid 3275] [client 65.1.104.84:47572] [client 65.1.104.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.1.104.84, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agP0KeWJB4YwcPVLeArWEgAAAQ4"], referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 11:46:49.807249 2026] [proxy_fcgi:error] [pid 3259:tid 3275] [client 65.1.104.84:47572] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 12:12:22.552772 2026] [:error] [pid 23887:tid 23905] [client 139.59.242.14:53632] [client 139.59.242.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.242.14, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agP6JtSKmvZJZkXBFDBzTAAAAMo"]
[Wed May 13 12:12:22.929111 2026] [proxy_fcgi:error] [pid 23887:tid 23905] [client 139.59.242.14:53632] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 12:12:23.213570 2026] [:error] [pid 23887:tid 23919] [client 139.59.242.14:53632] [client 139.59.242.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.242.14, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agP6J9SKmvZJZkXBFDBzTQAAANg"], referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 12:12:23.540554 2026] [proxy_fcgi:error] [pid 23887:tid 23919] [client 139.59.242.14:53632] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 12:14:56.129643 2026] [:error] [pid 27332:tid 27349] [client 52.221.129.59:36644] [client 52.221.129.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.221.129.59, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agP6wI6Y5F_V9bmyC4ZzxwAAAU8"]
[Wed May 13 12:14:56.476157 2026] [proxy_fcgi:error] [pid 27332:tid 27349] [client 52.221.129.59:36644] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 13:07:01.168549 2026] [:error] [pid 27332:tid 27338] [client 5.78.145.152:45516] [client 5.78.145.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.78.145.152, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agQG9Y6Y5F_V9bmyC4aFyQAAAUQ"]
[Wed May 13 13:07:01.759896 2026] [proxy_fcgi:error] [pid 27332:tid 27338] [client 5.78.145.152:45516] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 13:07:03.298325 2026] [:error] [pid 27332:tid 27352] [client 5.78.145.152:45516] [client 5.78.145.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.78.145.152, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agQG946Y5F_V9bmyC4aF1wAAAVI"], referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 13:07:03.605038 2026] [proxy_fcgi:error] [pid 27332:tid 27352] [client 5.78.145.152:45516] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 13:09:29.003745 2026] [:error] [pid 27332:tid 27335] [client 162.43.89.76:35334] [client 162.43.89.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.43.89.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agQHiY6Y5F_V9bmyC4aG_QAAAUE"]
[Wed May 13 13:09:29.344140 2026] [proxy_fcgi:error] [pid 27332:tid 27335] [client 162.43.89.76:35334] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 13:09:29.801761 2026] [:error] [pid 27332:tid 27339] [client 162.43.89.76:35334] [client 162.43.89.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.43.89.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agQHiY6Y5F_V9bmyC4aG_wAAAUU"], referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 13:09:30.115685 2026] [proxy_fcgi:error] [pid 27332:tid 27339] [client 162.43.89.76:35334] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 14:15:07.118359 2026] [:error] [pid 27332:tid 27346] [client 13.50.125.54:56360] [client 13.50.125.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.50.125.54, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agQW646Y5F_V9bmyC4ae3gAAAUw"]
[Wed May 13 14:15:08.787894 2026] [proxy_fcgi:error] [pid 27332:tid 27346] [client 13.50.125.54:56360] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 14:15:09.096072 2026] [:error] [pid 27332:tid 27345] [client 13.50.125.54:56360] [client 13.50.125.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.50.125.54, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agQW7Y6Y5F_V9bmyC4ae5QAAAUs"], referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 14:15:09.427272 2026] [proxy_fcgi:error] [pid 27332:tid 27345] [client 13.50.125.54:56360] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 14:29:14.692686 2026] [:error] [pid 3259:tid 3279] [client 167.172.73.193:33458] [client 167.172.73.193] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agQaOuWJB4YwcPVLeAoLzQAAARI"]
[Wed May 13 15:51:04.880845 2026] [proxy_fcgi:error] [pid 3259:tid 3270] [client 35.209.189.164:50240] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 16:00:29.862519 2026] [:error] [pid 27332:tid 27335] [client 20.87.239.85:7177] [client 20.87.239.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.87.239.85, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agQvnY6Y5F_V9bmyC4bKpQAAAUE"]
[Wed May 13 16:00:30.434950 2026] [proxy_fcgi:error] [pid 27332:tid 27335] [client 20.87.239.85:7177] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 16:00:33.533850 2026] [:error] [pid 27332:tid 27345] [client 20.87.239.85:7177] [client 20.87.239.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.87.239.85, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agQvoY6Y5F_V9bmyC4bKqAAAAUs"], referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 16:00:33.846791 2026] [proxy_fcgi:error] [pid 27332:tid 27345] [client 20.87.239.85:7177] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 16:09:59.914504 2026] [:error] [pid 23787:tid 23859] [client 74.235.96.117:34780] [client 74.235.96.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.235.96.117, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agQx1x1cs5wE7VT6wioR7AAAAIs"]
[Wed May 13 16:10:00.264807 2026] [proxy_fcgi:error] [pid 23787:tid 23859] [client 74.235.96.117:34780] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 16:10:05.700670 2026] [:error] [pid 23787:tid 23854] [client 74.235.96.117:34780] [client 74.235.96.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.235.96.117, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agQx3R1cs5wE7VT6wioR7gAAAIY"], referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 16:10:06.006314 2026] [proxy_fcgi:error] [pid 23787:tid 23854] [client 74.235.96.117:34780] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 16:49:43.087360 2026] [proxy_fcgi:error] [pid 27332:tid 27350] [client 34.1.16.254:41936] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 16:49:52.787275 2026] [proxy_fcgi:error] [pid 45289:tid 45312] [client 34.1.16.254:34278] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 17:05:37.177505 2026] [:error] [pid 23782:tid 23840] [client 121.200.216.56:53240] [client 121.200.216.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.200.216.56, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agQ-4SBrKFYHXUGnR-rj-AAAAFM"]
[Wed May 13 17:05:37.493529 2026] [proxy_fcgi:error] [pid 23782:tid 23840] [client 121.200.216.56:53240] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 17:05:38.047886 2026] [:error] [pid 23782:tid 23821] [client 121.200.216.56:53240] [client 121.200.216.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.200.216.56, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agQ-4iBrKFYHXUGnR-rj-QAAAEA"], referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 17:05:38.360297 2026] [proxy_fcgi:error] [pid 23782:tid 23821] [client 121.200.216.56:53240] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 17:10:43.727411 2026] [:error] [pid 55744:tid 55749] [client 104.243.35.34:58702] [client 104.243.35.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.243.35.34, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agRAEwwbbCCudzl3BmmapwAAAoE"]
[Wed May 13 17:10:44.080298 2026] [proxy_fcgi:error] [pid 55744:tid 55749] [client 104.243.35.34:58702] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 17:10:44.383766 2026] [:error] [pid 55744:tid 55769] [client 104.243.35.34:58702] [client 104.243.35.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.243.35.34, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agRAFAwbbCCudzl3BmmaqAAAApU"], referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 17:10:44.702895 2026] [proxy_fcgi:error] [pid 55744:tid 55769] [client 104.243.35.34:58702] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 18:05:38.457399 2026] [:error] [pid 45289:tid 45316] [client 152.228.218.52:47212] [client 152.228.218.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.228.218.52, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agRM8oOEpVhwFIe0Nzga1AAAAZc"]
[Wed May 13 18:05:40.383658 2026] [proxy_fcgi:error] [pid 45289:tid 45316] [client 152.228.218.52:47212] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 18:05:40.661011 2026] [:error] [pid 45289:tid 45313] [client 152.228.218.52:47212] [client 152.228.218.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.228.218.52, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agRM9IOEpVhwFIe0Nzga1gAAAZQ"], referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 18:05:40.951914 2026] [proxy_fcgi:error] [pid 45289:tid 45313] [client 152.228.218.52:47212] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 18:13:09.427787 2026] [:error] [pid 55745:tid 55777] [client 85.131.197.78:37462] [client 85.131.197.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.131.197.78, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agROtQzqD9WDZdTELeIPHgAAAsI"]
[Wed May 13 18:13:09.782430 2026] [proxy_fcgi:error] [pid 55745:tid 55777] [client 85.131.197.78:37462] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 18:13:10.266820 2026] [:error] [pid 55745:tid 55778] [client 85.131.197.78:37462] [client 85.131.197.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.131.197.78, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agROtgzqD9WDZdTELeIPHwAAAsM"], referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 18:13:10.576479 2026] [proxy_fcgi:error] [pid 55745:tid 55778] [client 85.131.197.78:37462] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 18:51:55.770859 2026] [proxy_fcgi:error] [pid 55745:tid 55779] [client 139.59.93.237:45226] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 19:05:19.254027 2026] [:error] [pid 55715:tid 55731] [client 65.21.235.107:55564] [client 65.21.235.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.21.235.107, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agRa73rHYVtSiFfOVKgTUwAAAk4"]
[Wed May 13 19:05:19.805248 2026] [proxy_fcgi:error] [pid 55715:tid 55731] [client 65.21.235.107:55564] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 19:05:21.397292 2026] [:error] [pid 55715:tid 55717] [client 65.21.235.107:55564] [client 65.21.235.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.21.235.107, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agRa8XrHYVtSiFfOVKgTVQAAAkA"], referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 19:05:21.730329 2026] [proxy_fcgi:error] [pid 55715:tid 55717] [client 65.21.235.107:55564] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 20:13:53.072186 2026] [proxy_fcgi:error] [pid 45289:tid 45315] [client 104.168.98.195:55742] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 20:13:57.059309 2026] [proxy_fcgi:error] [pid 55744:tid 55751] [client 104.168.98.195:54496] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 20:18:42.580539 2026] [:error] [pid 3259:tid 3270] [client 77.73.233.48:34950] [client 77.73.233.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.73.233.48, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agRsIuWJB4YwcPVLeAoyzgAAAQk"]
[Wed May 13 20:18:42.938967 2026] [proxy_fcgi:error] [pid 3259:tid 3270] [client 77.73.233.48:34950] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 20:18:43.329251 2026] [:error] [pid 3259:tid 3284] [client 77.73.233.48:34950] [client 77.73.233.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.73.233.48, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agRsI-WJB4YwcPVLeAoy0AAAARc"], referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 20:18:44.020181 2026] [proxy_fcgi:error] [pid 3259:tid 3284] [client 77.73.233.48:34950] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 20:43:57.268312 2026] [proxy_fcgi:error] [pid 23782:tid 23841] [client 74.7.243.242:41852] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 21:35:23.424943 2026] [:error] [pid 12426:tid 12436] [client 104.168.92.217:59588] [client 104.168.92.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.168.92.217, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agR-G7Pw24RslX3LIcYmQAAAAMg"]
[Wed May 13 21:35:25.100403 2026] [proxy_fcgi:error] [pid 12426:tid 12436] [client 104.168.92.217:59588] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 21:35:29.613276 2026] [:error] [pid 12426:tid 12428] [client 104.168.92.217:59588] [client 104.168.92.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.168.92.217, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agR-IbPw24RslX3LIcYmRgAAAMA"], referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 21:35:29.922771 2026] [proxy_fcgi:error] [pid 12426:tid 12428] [client 104.168.92.217:59588] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 21:59:09.841131 2026] [:error] [pid 12337:tid 12365] [client 198.46.83.219:37868] [client 198.46.83.219] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agSDrQ9W0E4_X4qzYUFlZAAAABc"]
[Wed May 13 22:28:14.979599 2026] [proxy_fcgi:error] [pid 12426:tid 12441] [client 66.249.79.8:39323] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 22:42:07.253869 2026] [:error] [pid 12337:tid 12347] [client 34.124.193.25:39268] [client 34.124.193.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.124.193.25, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agSNvw9W0E4_X4qzYUFsUwAAAAU"]
[Wed May 13 22:42:07.608789 2026] [proxy_fcgi:error] [pid 12337:tid 12347] [client 34.124.193.25:39268] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 22:42:07.887498 2026] [:error] [pid 12337:tid 12354] [client 34.124.193.25:39268] [client 34.124.193.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.124.193.25, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agSNvw9W0E4_X4qzYUFsVAAAAAw"], referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 22:42:08.185249 2026] [proxy_fcgi:error] [pid 12337:tid 12354] [client 34.124.193.25:39268] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Wed May 13 23:40:16.232270 2026] [proxy_fcgi:error] [pid 12340:tid 12409] [client 35.223.33.2:56237] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 13 23:40:19.787946 2026] [proxy_fcgi:error] [pid 12340:tid 12413] [client 34.121.86.121:49973] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 00:05:00.726407 2026] [:error] [pid 12338:tid 12386] [client 165.22.116.110:60928] [client 165.22.116.110] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agShLMUJ87l42ffPr4wg5wAAAFE"]
[Thu May 14 00:34:52.103788 2026] [proxy_fcgi:error] [pid 12426:tid 12449] [client 35.223.33.2:60707] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 00:36:46.572792 2026] [proxy_fcgi:error] [pid 12426:tid 12435] [client 32.184.10.184:46812] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 00:36:47.048410 2026] [proxy_fcgi:error] [pid 12426:tid 12436] [client 32.184.10.184:46812] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 01:08:38.900797 2026] [:error] [pid 12426:tid 12429] [client 173.212.252.15:40574] [client 173.212.252.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.212.252.15, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agSwFrPw24RslX3LIcZhlQAAAME"]
[Thu May 14 01:08:39.228953 2026] [proxy_fcgi:error] [pid 12426:tid 12429] [client 173.212.252.15:40574] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 01:08:39.564724 2026] [:error] [pid 12426:tid 12449] [client 173.212.252.15:40574] [client 173.212.252.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.212.252.15, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agSwF7Pw24RslX3LIcZhlwAAANU"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 01:08:39.856586 2026] [proxy_fcgi:error] [pid 12426:tid 12449] [client 173.212.252.15:40574] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 01:27:12.987396 2026] [:error] [pid 12340:tid 12397] [client 103.78.97.230:8732] [client 103.78.97.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.78.97.230, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agS0cMrxSPfvmN7BQjKx4QAAAIE"]
[Thu May 14 01:27:13.346490 2026] [proxy_fcgi:error] [pid 12340:tid 12397] [client 103.78.97.230:8732] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 01:27:13.648444 2026] [:error] [pid 12340:tid 12400] [client 103.78.97.230:8732] [client 103.78.97.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.78.97.230, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agS0ccrxSPfvmN7BQjKx5AAAAIQ"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 01:27:13.944712 2026] [proxy_fcgi:error] [pid 12340:tid 12400] [client 103.78.97.230:8732] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 01:45:59.274265 2026] [:error] [pid 12340:tid 12406] [client 157.15.40.76:51390] [client 157.15.40.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/txets.php"] [unique_id "agS418rxSPfvmN7BQjK3BQAAAIo"]
[Thu May 14 01:46:03.556030 2026] [:error] [pid 12340:tid 12404] [client 157.15.40.76:51541] [client 157.15.40.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/txets.php"] [unique_id "agS428rxSPfvmN7BQjK3DAAAAIg"]
[Thu May 14 01:46:06.822770 2026] [:error] [pid 12426:tid 12430] [client 157.15.40.76:51604] [client 157.15.40.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/txets.php"] [unique_id "agS43rPw24RslX3LIcZohwAAAMI"]
[Thu May 14 01:46:07.473143 2026] [:error] [pid 12337:tid 12354] [client 157.15.40.76:51840] [client 157.15.40.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/txets.php"] [unique_id "agS43w9W0E4_X4qzYUGCvwAAAAw"]
[Thu May 14 01:46:08.174396 2026] [:error] [pid 12426:tid 12441] [client 157.15.40.76:51896] [client 157.15.40.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/schallfuns.php"] [unique_id "agS44LPw24RslX3LIcZojQAAAM0"]
[Thu May 14 01:46:08.442464 2026] [:error] [pid 17873:tid 17890] [client 157.15.40.76:51910] [client 157.15.40.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/postnews.php"] [unique_id "agS44PEqBQQrkyEyu_ouUgAAAQ8"]
[Thu May 14 01:46:09.226618 2026] [:error] [pid 17873:tid 17896] [client 157.15.40.76:51998] [client 157.15.40.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/postnews.php"] [unique_id "agS44fEqBQQrkyEyu_ouXAAAARQ"]
[Thu May 14 01:46:11.353407 2026] [:error] [pid 12426:tid 12432] [client 157.15.40.76:52118] [client 157.15.40.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/postnews.php"] [unique_id "agS447Pw24RslX3LIcZokgAAAMQ"]
[Thu May 14 01:46:11.624735 2026] [:error] [pid 17873:tid 17896] [client 157.15.40.76:52257] [client 157.15.40.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/postnews.php"] [unique_id "agS44_EqBQQrkyEyu_ouZQAAARQ"]
[Thu May 14 02:04:55.735490 2026] [:error] [pid 12338:tid 12372] [client 75.119.132.40:56404] [client 75.119.132.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 75.119.132.40, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agS9R8UJ87l42ffPr4wySQAAAEM"]
[Thu May 14 02:04:56.033336 2026] [proxy_fcgi:error] [pid 12338:tid 12372] [client 75.119.132.40:56404] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 02:04:56.362807 2026] [:error] [pid 12338:tid 12370] [client 75.119.132.40:56404] [client 75.119.132.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 75.119.132.40, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agS9SMUJ87l42ffPr4wySgAAAEE"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 02:04:56.680580 2026] [proxy_fcgi:error] [pid 12338:tid 12370] [client 75.119.132.40:56404] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 05:18:49.656017 2026] [:error] [pid 63033:tid 63043] [client 14.225.211.78:48854] [client 14.225.211.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.225.211.78, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agTquVMY49UWn5BpqVY-wgAAAQg"]
[Thu May 14 05:18:49.995364 2026] [proxy_fcgi:error] [pid 63033:tid 63043] [client 14.225.211.78:48854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 05:18:50.393625 2026] [:error] [pid 63033:tid 63049] [client 14.225.211.78:48854] [client 14.225.211.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.225.211.78, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agTqulMY49UWn5BpqVY-xAAAAQ4"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 05:18:50.716241 2026] [proxy_fcgi:error] [pid 63033:tid 63049] [client 14.225.211.78:48854] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 05:24:25.114592 2026] [:error] [pid 63033:tid 63045] [client 171.111.192.222:34632] [client 171.111.192.222] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agTsCVMY49UWn5BpqVZBvgAAAQo"]
[Thu May 14 05:46:40.139535 2026] [:error] [pid 63033:tid 63053] [client 173.254.31.151:46098] [client 173.254.31.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.254.31.151, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agTxQFMY49UWn5BpqVZMigAAARI"]
[Thu May 14 05:46:40.463912 2026] [proxy_fcgi:error] [pid 63033:tid 63053] [client 173.254.31.151:46098] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 05:46:40.894434 2026] [:error] [pid 63033:tid 63038] [client 173.254.31.151:46098] [client 173.254.31.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.254.31.151, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agTxQFMY49UWn5BpqVZMjwAAAQM"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 05:46:41.195988 2026] [proxy_fcgi:error] [pid 63033:tid 63038] [client 173.254.31.151:46098] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 05:56:16.107541 2026] [proxy_fcgi:error] [pid 11582:tid 11628] [client 23.80.158.240:40467] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 06:03:57.734384 2026] [:error] [pid 11588:tid 11655] [client 103.27.63.13:64932] [client 103.27.63.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.27.63.13, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agT1TdUr21rOixkeGKYKXAAAAIM"]
[Thu May 14 06:03:58.079141 2026] [proxy_fcgi:error] [pid 11588:tid 11655] [client 103.27.63.13:64932] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 06:03:59.560771 2026] [:error] [pid 11588:tid 11669] [client 103.27.63.13:64932] [client 103.27.63.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.27.63.13, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agT1T9Ur21rOixkeGKYKYAAAAJE"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 06:03:59.864949 2026] [proxy_fcgi:error] [pid 11588:tid 11669] [client 103.27.63.13:64932] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 06:19:36.017736 2026] [:error] [pid 11582:tid 11636] [client 13.202.66.187:57608] [client 13.202.66.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.66.187, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agT4-Puw2cmFDpGcKhDaSAAAAEs"]
[Thu May 14 06:19:36.613525 2026] [proxy_fcgi:error] [pid 11582:tid 11636] [client 13.202.66.187:57608] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 06:19:36.993048 2026] [:error] [pid 11582:tid 11647] [client 13.202.66.187:57608] [client 13.202.66.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.66.187, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agT4-Puw2cmFDpGcKhDaSwAAAFY"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 06:19:37.335416 2026] [proxy_fcgi:error] [pid 11582:tid 11647] [client 13.202.66.187:57608] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 07:01:12.471949 2026] [:error] [pid 63033:tid 63056] [client 112.213.89.76:54830] [client 112.213.89.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 112.213.89.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agUCuFMY49UWn5BpqVZxsAAAARU"]
[Thu May 14 07:01:12.814011 2026] [proxy_fcgi:error] [pid 63033:tid 63056] [client 112.213.89.76:54830] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 07:01:13.168101 2026] [:error] [pid 63033:tid 63039] [client 112.213.89.76:54830] [client 112.213.89.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 112.213.89.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agUCuVMY49UWn5BpqVZxsQAAAQQ"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 07:01:13.500773 2026] [proxy_fcgi:error] [pid 63033:tid 63039] [client 112.213.89.76:54830] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 07:04:32.047093 2026] [:error] [pid 47721:tid 47745] [client 204.137.214.23:36106] [client 204.137.214.23] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agUDgHEmh7_G0hfOa6smZQAAAZY"]
[Thu May 14 07:10:08.040865 2026] [:error] [pid 11588:tid 11665] [client 51.161.119.222:56466] [client 51.161.119.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.161.119.222, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agUE0NUr21rOixkeGKYYGAAAAI0"]
[Thu May 14 07:10:08.640984 2026] [proxy_fcgi:error] [pid 11588:tid 11665] [client 51.161.119.222:56466] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 07:10:11.447989 2026] [:error] [pid 11588:tid 11673] [client 51.161.119.222:56466] [client 51.161.119.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.161.119.222, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agUE09Ur21rOixkeGKYYIAAAAJU"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 07:10:11.754342 2026] [proxy_fcgi:error] [pid 11588:tid 11673] [client 51.161.119.222:56466] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 07:33:57.864107 2026] [:error] [pid 11690:tid 11701] [client 14.225.206.111:41264] [client 14.225.206.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.225.206.111, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agUKZSnxWuLN8Hptw8mMKAAAAMI"]
[Thu May 14 07:33:58.244871 2026] [proxy_fcgi:error] [pid 11690:tid 11701] [client 14.225.206.111:41264] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 07:34:00.434539 2026] [:error] [pid 11690:tid 11717] [client 14.225.206.111:41264] [client 14.225.206.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.225.206.111, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agUKaCnxWuLN8Hptw8mMLgAAANI"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 07:34:00.783670 2026] [proxy_fcgi:error] [pid 11690:tid 11717] [client 14.225.206.111:41264] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 08:00:46.314328 2026] [:error] [pid 11588:tid 11660] [client 85.214.94.237:42658] [client 85.214.94.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.94.237, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agUQrtUr21rOixkeGKYfrwAAAIg"]
[Thu May 14 08:00:46.703754 2026] [proxy_fcgi:error] [pid 11588:tid 11660] [client 85.214.94.237:42658] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 08:00:47.057627 2026] [:error] [pid 11588:tid 11669] [client 85.214.94.237:42658] [client 85.214.94.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.94.237, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agUQr9Ur21rOixkeGKYfsAAAAJE"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 08:00:47.440587 2026] [proxy_fcgi:error] [pid 11588:tid 11669] [client 85.214.94.237:42658] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 08:18:33.579303 2026] [:error] [pid 11588:tid 11654] [client 3.144.14.123:57430] [client 3.144.14.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.144.14.123, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agUU2dUr21rOixkeGKYh3AAAAII"]
[Thu May 14 08:18:33.916375 2026] [proxy_fcgi:error] [pid 11588:tid 11654] [client 3.144.14.123:57430] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 08:18:34.272386 2026] [:error] [pid 11588:tid 11658] [client 3.144.14.123:57430] [client 3.144.14.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.144.14.123, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agUU2tUr21rOixkeGKYh3QAAAIY"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 08:18:34.599067 2026] [proxy_fcgi:error] [pid 11588:tid 11658] [client 3.144.14.123:57430] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 08:30:58.251371 2026] [proxy_fcgi:error] [pid 11690:tid 11708] [client 192.175.111.254:65102] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 08:33:38.800968 2026] [:error] [pid 47673:tid 47693] [client 141.164.45.157:51064] [client 141.164.45.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.164.45.157, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agUYYvCGe4cIn3sh5k3N6wAAAVI"]
[Thu May 14 08:33:39.168885 2026] [proxy_fcgi:error] [pid 47673:tid 47693] [client 141.164.45.157:51064] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 08:33:39.716738 2026] [:error] [pid 47673:tid 47688] [client 141.164.45.157:51064] [client 141.164.45.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.164.45.157, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agUYY_CGe4cIn3sh5k3N7AAAAU0"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 08:33:40.062640 2026] [proxy_fcgi:error] [pid 47673:tid 47688] [client 141.164.45.157:51064] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 08:53:19.533156 2026] [proxy_fcgi:error] [pid 47721:tid 47745] [client 138.246.253.24:55798] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 09:04:04.471900 2026] [proxy_fcgi:error] [pid 11588:tid 11660] [client 192.36.109.94:39561] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 12:30:19.000477 2026] [:error] [pid 47721:tid 47741] [client 192.96.159.129:65072] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "agVP2nEmh7_G0hfOa6uBuwAAAZI"]
[Thu May 14 12:30:20.319615 2026] [proxy_fcgi:error] [pid 47721:tid 47723] [client 192.96.159.129:65075] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 13:24:08.596016 2026] [:error] [pid 11690:tid 11706] [client 171.111.192.222:55020] [client 171.111.192.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 171.111.192.222, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agVceCnxWuLN8Hptw8npCgAAAMc"]
[Thu May 14 13:24:08.965962 2026] [proxy_fcgi:error] [pid 11690:tid 11706] [client 171.111.192.222:55020] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 13:24:10.637056 2026] [:error] [pid 11690:tid 11721] [client 171.111.192.222:55020] [client 171.111.192.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 171.111.192.222, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agVceinxWuLN8Hptw8npCwAAANY"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 13:24:10.942811 2026] [proxy_fcgi:error] [pid 11690:tid 11721] [client 171.111.192.222:55020] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 13:58:29.766977 2026] [:error] [pid 11588:tid 11661] [client 154.53.59.78:50072] [client 154.53.59.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.53.59.78, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agVkhdUr21rOixkeGKZWfQAAAIk"]
[Thu May 14 13:58:30.103747 2026] [proxy_fcgi:error] [pid 11588:tid 11661] [client 154.53.59.78:50072] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 13:58:30.753862 2026] [:error] [pid 11588:tid 11659] [client 154.53.59.78:50072] [client 154.53.59.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.53.59.78, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agVkhtUr21rOixkeGKZWgQAAAIc"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 13:58:31.063442 2026] [proxy_fcgi:error] [pid 11588:tid 11659] [client 154.53.59.78:50072] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 17:00:10.411883 2026] [:error] [pid 11581:tid 11614] [client 111.109.37.114:56352] [client 111.109.37.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 111.109.37.114, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agWPGv0vF48FbzpvQMXZoAAAABE"]
[Thu May 14 17:00:10.796840 2026] [proxy_fcgi:error] [pid 11581:tid 11614] [client 111.109.37.114:56352] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 17:00:11.559394 2026] [:error] [pid 11581:tid 11606] [client 111.109.37.114:56352] [client 111.109.37.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 111.109.37.114, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agWPG_0vF48FbzpvQMXZowAAAAk"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 17:00:11.867083 2026] [proxy_fcgi:error] [pid 11581:tid 11606] [client 111.109.37.114:56352] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 17:14:23.180385 2026] [:error] [pid 11588:tid 11661] [client 159.89.87.76:59102] [client 159.89.87.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.87.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agWSb9Ur21rOixkeGKaNOAAAAIk"]
[Thu May 14 17:14:23.540036 2026] [proxy_fcgi:error] [pid 11588:tid 11661] [client 159.89.87.76:59102] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 17:14:25.757859 2026] [:error] [pid 11588:tid 11674] [client 159.89.87.76:59102] [client 159.89.87.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.87.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agWScdUr21rOixkeGKaNOQAAAJY"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 17:14:26.056582 2026] [proxy_fcgi:error] [pid 11588:tid 11674] [client 159.89.87.76:59102] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 17:15:22.892726 2026] [proxy_fcgi:error] [pid 47721:tid 47731] [client 18.212.240.182:48834] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 17:15:23.286929 2026] [proxy_fcgi:error] [pid 47721:tid 47743] [client 18.212.240.182:55402] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 17:35:10.587563 2026] [proxy_fcgi:error] [pid 47721:tid 47729] [client 192.36.109.123:53757] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 18:52:40.395556 2026] [:error] [pid 11581:tid 11598] [client 200.128.9.8:35122] [client 200.128.9.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 200.128.9.8, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agWpeP0vF48FbzpvQMUAiAAAAAE"]
[Thu May 14 18:52:41.058883 2026] [proxy_fcgi:error] [pid 11581:tid 11598] [client 200.128.9.8:35122] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 18:52:42.224999 2026] [:error] [pid 11581:tid 11604] [client 200.128.9.8:35122] [client 200.128.9.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 200.128.9.8, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agWpev0vF48FbzpvQMUAiwAAAAc"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 18:52:42.515297 2026] [proxy_fcgi:error] [pid 11581:tid 11604] [client 200.128.9.8:35122] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 14 19:13:18.413456 2026] [proxy_fcgi:error] [pid 11690:tid 11713] [client 34.90.66.217:40960] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 20:39:21.265133 2026] [proxy_fcgi:error] [pid 47721:tid 47747] [client 208.84.100.220:30330] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 20:39:22.248548 2026] [proxy_fcgi:error] [pid 11581:tid 11619] [client 208.84.100.220:20082] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 20:39:24.555363 2026] [proxy_fcgi:error] [pid 11581:tid 11606] [client 208.84.100.220:20082] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 20:39:24.984922 2026] [:error] [pid 11588:tid 11658] [client 208.84.100.220:20090] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "agXCfNUr21rOixkeGKaxMAAAAIY"]
[Thu May 14 20:39:25.083853 2026] [:error] [pid 11581:tid 11612] [client 208.84.100.220:20092] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.local"] [unique_id "agXCff0vF48FbzpvQMUj2AAAAA8"]
[Thu May 14 20:39:25.332720 2026] [:error] [pid 11588:tid 11663] [client 208.84.100.220:20134] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/backend/.env"] [unique_id "agXCfdUr21rOixkeGKaxMgAAAIs"]
[Thu May 14 20:39:25.546554 2026] [:error] [pid 47673:tid 47689] [client 208.84.100.220:20118] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/api/.env"] [unique_id "agXCffCGe4cIn3sh5k0rpQAAAU4"]
[Thu May 14 20:39:25.564281 2026] [proxy_fcgi:error] [pid 47721:tid 47723] [client 208.84.100.220:20182] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 20:39:25.583266 2026] [proxy_fcgi:error] [pid 11581:tid 11617] [client 208.84.100.220:20188] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 20:39:25.654538 2026] [proxy_fcgi:error] [pid 11588:tid 11671] [client 208.84.100.220:20200] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 20:39:25.672946 2026] [proxy_fcgi:error] [pid 47721:tid 47734] [client 208.84.100.220:20160] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 20:39:25.731940 2026] [:error] [pid 11690:tid 11710] [client 208.84.100.220:20114] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/app/.env"] [unique_id "agXCfSnxWuLN8Hptw8k2gwAAAMs"]
[Thu May 14 20:39:25.740818 2026] [:error] [pid 47673:tid 47697] [client 208.84.100.220:20108] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.production"] [unique_id "agXCffCGe4cIn3sh5k0rpgAAAVY"]
[Thu May 14 20:39:25.842638 2026] [proxy_fcgi:error] [pid 11581:tid 11597] [client 208.84.100.220:20166] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 20:39:25.935927 2026] [proxy_fcgi:error] [pid 11581:tid 11618] [client 208.84.100.220:20144] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 14 20:39:27.595649 2026] [proxy_fcgi:error] [pid 47673:tid 47682] [client 208.84.100.220:20214] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 00:34:59.375803 2026] [:error] [pid 47721:tid 47746] [client 34.186.147.181:46336] [client 34.186.147.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "agX5s3Emh7_G0hfOa6tEhQAAAZc"]
[Fri May 15 01:26:09.516729 2026] [proxy_fcgi:error] [pid 11582:tid 11628] [client 34.18.171.16:59080] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 01:26:09.542719 2026] [proxy_fcgi:error] [pid 11588:tid 11659] [client 34.18.171.16:59102] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 01:26:09.557980 2026] [proxy_fcgi:error] [pid 47673:tid 47692] [client 34.18.171.16:59086] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 01:26:09.921205 2026] [proxy_fcgi:error] [pid 11690:tid 11707] [client 34.18.171.16:59108] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 01:26:09.930853 2026] [proxy_fcgi:error] [pid 11690:tid 11715] [client 34.18.171.16:59110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 01:26:10.089599 2026] [proxy_fcgi:error] [pid 47673:tid 47698] [client 34.18.171.16:59124] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 01:26:10.126924 2026] [proxy_fcgi:error] [pid 47673:tid 47680] [client 34.18.171.16:59136] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 01:26:10.232102 2026] [proxy_fcgi:error] [pid 11582:tid 11629] [client 34.18.171.16:59152] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 01:26:10.329911 2026] [proxy_fcgi:error] [pid 11582:tid 11636] [client 34.18.171.16:59156] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 01:26:10.525799 2026] [proxy_fcgi:error] [pid 11690:tid 11723] [client 34.18.171.16:59168] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 01:33:56.162948 2026] [:error] [pid 47721:tid 47732] [client 103.28.36.198:34742] [client 103.28.36.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.198, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agYHhHEmh7_G0hfOa6tNbQAAAYk"]
[Fri May 15 01:33:57.823182 2026] [proxy_fcgi:error] [pid 47721:tid 47732] [client 103.28.36.198:34742] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 01:33:59.100387 2026] [:error] [pid 47721:tid 47737] [client 103.28.36.198:34742] [client 103.28.36.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.198, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agYHh3Emh7_G0hfOa6tNbgAAAY4"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 01:33:59.413175 2026] [proxy_fcgi:error] [pid 47721:tid 47737] [client 103.28.36.198:34742] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 02:14:22.103167 2026] [proxy_fcgi:error] [pid 11581:tid 11612] [client 66.249.79.8:63468] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 08:43:30.543917 2026] [:error] [pid 1188:tid 1197] [client 85.203.21.105:40451] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "agZsMtY68iW8yuNkNzPpXAAAAAA"]
[Fri May 15 08:43:35.754481 2026] [:error] [pid 1295:tid 1310] [client 85.203.21.73:48559] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "agZsN9mMhqLvs0GYixkN3AAAAMw"]
[Fri May 15 08:43:36.294785 2026] [:error] [pid 51234:tid 51242] [client 85.203.21.123:50831] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "agZsON72N9CbeiqcqgO9aQAAAUY"]
[Fri May 15 08:43:36.548867 2026] [:error] [pid 51234:tid 51244] [client 85.203.21.115:46951] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/users.php"] [unique_id "agZsON72N9CbeiqcqgO9agAAAUg"]
[Fri May 15 08:43:41.763701 2026] [:error] [pid 51234:tid 51247] [client 85.203.21.139:44481] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403.php"] [unique_id "agZsPd72N9CbeiqcqgO9dgAAAUs"]
[Fri May 15 08:43:41.962549 2026] [:error] [pid 1190:tid 1255] [client 85.203.21.112:61435] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/"] [unique_id "agZsPdqiXrD7hne4gFbAnAAAAIM"]
[Fri May 15 08:43:42.173721 2026] [:error] [pid 1190:tid 1253] [client 85.203.21.101:27517] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/filemanager.php"] [unique_id "agZsPtqiXrD7hne4gFbAnQAAAIE"]
[Fri May 15 08:43:47.377495 2026] [:error] [pid 51234:tid 51250] [client 85.203.21.123:21411] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/goods.php"] [unique_id "agZsQ972N9CbeiqcqgO9fwAAAU4"]
[Fri May 15 08:43:52.602345 2026] [:error] [pid 50531:tid 50540] [client 85.203.21.150:21387] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/"] [unique_id "agZsSB3WbFwE6voqGzrZjAAAAQc"]
[Fri May 15 08:43:52.862155 2026] [:error] [pid 1189:tid 1234] [client 85.203.21.88:26587] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/posts"] [unique_id "agZsSAe36qIGegR4kclv7wAAAEk"]
[Fri May 15 08:43:53.081854 2026] [:error] [pid 1188:tid 1212] [client 85.203.21.123:41527] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/"] [unique_id "agZsSdY68iW8yuNkNzPpYgAAAA8"]
[Fri May 15 08:43:53.280328 2026] [:error] [pid 1295:tid 1319] [client 85.203.21.97:64801] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "agZsSdmMhqLvs0GYixkN5wAAANU"]
[Fri May 15 08:44:08.491937 2026] [:error] [pid 1190:tid 1269] [client 85.203.21.107:20627] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "agZsWNqiXrD7hne4gFbAqgAAAJE"]
[Fri May 15 08:44:08.694397 2026] [:error] [pid 1189:tid 1241] [client 85.203.21.79:42231] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/admin.php"] [unique_id "agZsWAe36qIGegR4kclv9wAAAFA"]
[Fri May 15 08:44:08.896162 2026] [:error] [pid 50531:tid 50541] [client 85.203.21.87:44893] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-config-sample.php"] [unique_id "agZsWB3WbFwE6voqGzrZoAAAAQg"]
[Fri May 15 08:44:09.094771 2026] [:error] [pid 50531:tid 50538] [client 85.203.21.87:58199] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/admin/"] [unique_id "agZsWR3WbFwE6voqGzrZoQAAAQU"]
[Fri May 15 08:44:09.302168 2026] [:error] [pid 50531:tid 50557] [client 85.203.21.119:48387] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/404.php"] [unique_id "agZsWR3WbFwE6voqGzrZogAAARg"]
[Fri May 15 08:44:09.600837 2026] [:error] [pid 50531:tid 50549] [client 85.203.21.101:40359] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/edit-tags.php"] [unique_id "agZsWR3WbFwE6voqGzrZpQAAARA"]
[Fri May 15 08:44:14.845776 2026] [:error] [pid 51234:tid 51241] [client 85.203.21.115:31063] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/"] [unique_id "agZsXt72N9CbeiqcqgO9mQAAAUU"]
[Fri May 15 08:44:15.061338 2026] [:error] [pid 51234:tid 51248] [client 85.203.21.85:56439] [client 85.203.21.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/.well-known/core.php"] [unique_id "agZsX972N9CbeiqcqgO9mgAAAUw"]
[Fri May 15 08:44:30.294009 2026] [:error] [pid 1189:tid 1244] [client 85.203.21.74:42979] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/classwithtostring.php"] [unique_id "agZsbge36qIGegR4kclwDgAAAFM"]
[Fri May 15 08:44:30.590504 2026] [:error] [pid 1189:tid 1238] [client 85.203.21.101:50671] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/PHPMailer/s"] [unique_id "agZsbge36qIGegR4kclwDwAAAE0"]
[Fri May 15 08:44:35.792257 2026] [:error] [pid 1189:tid 1234] [client 85.203.21.75:39213] [client 85.203.21.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/"] [unique_id "agZscwe36qIGegR4kclwGwAAAEk"]
[Fri May 15 08:44:35.999760 2026] [:error] [pid 1189:tid 1244] [client 85.203.21.107:21589] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/shell/"] [unique_id "agZscwe36qIGegR4kclwHAAAAFM"]
[Fri May 15 08:44:36.274771 2026] [:error] [pid 1189:tid 1238] [client 85.203.21.120:30295] [client 85.203.21.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/about.php"] [unique_id "agZsdAe36qIGegR4kclwHQAAAE0"]
[Fri May 15 08:44:36.483296 2026] [:error] [pid 51234:tid 51236] [client 85.203.21.87:45491] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/mah.php"] [unique_id "agZsdN72N9CbeiqcqgO9rQAAAUA"]
[Fri May 15 08:44:46.752093 2026] [:error] [pid 1189:tid 1231] [client 85.203.21.107:35195] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp.php"] [unique_id "agZsfge36qIGegR4kclwMAAAAEY"]
[Fri May 15 08:44:46.968983 2026] [:error] [pid 1295:tid 1313] [client 85.203.21.138:26157] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/"] [unique_id "agZsftmMhqLvs0GYixkOFAAAAM8"]
[Fri May 15 08:44:47.164735 2026] [:error] [pid 1295:tid 1308] [client 85.203.21.88:44959] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/x.php"] [unique_id "agZsf9mMhqLvs0GYixkOFQAAAMo"]
[Fri May 15 08:44:47.364865 2026] [:error] [pid 1295:tid 1310] [client 85.203.21.74:53557] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agZsf9mMhqLvs0GYixkOFgAAAMw"]
[Fri May 15 08:44:47.566310 2026] [:error] [pid 1188:tid 1208] [client 85.203.21.133:45545] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/plugins/"] [unique_id "agZsf9Y68iW8yuNkNzPpeAAAAAs"]
[Fri May 15 08:44:57.772175 2026] [:error] [pid 1189:tid 1247] [client 85.203.21.101:61979] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/admin.php"] [unique_id "agZsiQe36qIGegR4kclwQgAAAFY"]
[Fri May 15 08:45:02.980026 2026] [:error] [pid 50531:tid 50544] [client 85.203.21.150:34095] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/222.php"] [unique_id "agZsjh3WbFwE6voqGzrZuQAAAQs"]
[Fri May 15 08:45:03.361545 2026] [:error] [pid 51234:tid 51255] [client 85.203.21.74:48269] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/"] [unique_id "agZsj972N9CbeiqcqgO9vwAAAVM"]
[Fri May 15 08:45:03.562963 2026] [:error] [pid 1189:tid 1243] [client 85.203.21.73:30115] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/"] [unique_id "agZsjwe36qIGegR4kclwTwAAAFI"]
[Fri May 15 08:45:03.762219 2026] [:error] [pid 1189:tid 1229] [client 85.203.21.139:48237] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/edit.php"] [unique_id "agZsjwe36qIGegR4kclwUgAAAEQ"]
[Fri May 15 08:45:08.962281 2026] [:error] [pid 1189:tid 1234] [client 85.203.21.150:56761] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/"] [unique_id "agZslAe36qIGegR4kclwWQAAAEk"]
[Fri May 15 08:45:09.177006 2026] [:error] [pid 1295:tid 1314] [client 85.203.21.150:56585] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "agZsldmMhqLvs0GYixkONwAAANA"]
[Fri May 15 08:45:09.379345 2026] [:error] [pid 1189:tid 1246] [client 85.203.21.73:47791] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/images/"] [unique_id "agZslQe36qIGegR4kclwWwAAAFU"]
[Fri May 15 08:45:09.580036 2026] [:error] [pid 1190:tid 1264] [client 85.203.21.143:46843] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/radio.php"] [unique_id "agZsldqiXrD7hne4gFbAwAAAAIw"]
[Fri May 15 08:45:09.779834 2026] [:error] [pid 1189:tid 1243] [client 85.203.21.115:46995] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "agZslQe36qIGegR4kclwXAAAAFI"]
[Fri May 15 08:45:10.068477 2026] [:error] [pid 1190:tid 1259] [client 85.203.21.120:62829] [client 85.203.21.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/admin.php"] [unique_id "agZsltqiXrD7hne4gFbAwQAAAIc"]
[Fri May 15 08:45:10.271065 2026] [:error] [pid 1188:tid 1201] [client 85.203.21.105:26111] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/php-compat/"] [unique_id "agZsltY68iW8yuNkNzPphQAAAAQ"]
[Fri May 15 08:45:15.487653 2026] [:error] [pid 50531:tid 50540] [client 85.203.21.139:39837] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agZsmx3WbFwE6voqGzrZvQAAAQc"]
[Fri May 15 08:45:30.690176 2026] [:error] [pid 51234:tid 51252] [client 85.203.21.131:51777] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/info.php"] [unique_id "agZsqt72N9CbeiqcqgO98AAAAVA"]
[Fri May 15 08:45:30.897927 2026] [:error] [pid 51234:tid 51245] [client 85.203.21.133:22993] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-file.php"] [unique_id "agZsqt72N9CbeiqcqgO98gAAAUk"]
[Fri May 15 08:45:36.145068 2026] [:error] [pid 1189:tid 1239] [client 85.203.21.96:41209] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/index/function.php"] [unique_id "agZssAe36qIGegR4kclwigAAAE4"]
[Fri May 15 08:45:37.958360 2026] [:error] [pid 1190:tid 1260] [client 85.203.21.72:28025] [client 85.203.21.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/light/"] [unique_id "agZssdqiXrD7hne4gFbAxwAAAIg"]
[Fri May 15 08:45:43.200556 2026] [:error] [pid 1295:tid 1312] [client 85.203.21.123:48303] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/plugin/"] [unique_id "agZst9mMhqLvs0GYixkOWwAAAM4"]
[Fri May 15 08:45:43.444572 2026] [:error] [pid 1295:tid 1302] [client 85.203.21.114:31451] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "agZst9mMhqLvs0GYixkOXQAAAMQ"]
[Fri May 15 08:45:43.663974 2026] [:error] [pid 1190:tid 1264] [client 85.203.21.138:32807] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-bindings/"] [unique_id "agZst9qiXrD7hne4gFbAzAAAAIw"]
[Fri May 15 08:45:48.871980 2026] [:error] [pid 50531:tid 50548] [client 85.203.21.133:56139] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ioxi-o.php"] [unique_id "agZsvB3WbFwE6voqGzrZ9wAAAQ8"]
[Fri May 15 08:45:49.080106 2026] [:error] [pid 50531:tid 50546] [client 85.203.21.143:31737] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php"] [unique_id "agZsvR3WbFwE6voqGzrZ-AAAAQ0"]
[Fri May 15 08:45:49.368000 2026] [:error] [pid 51234:tid 51239] [client 85.203.21.139:63453] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/bolt.php"] [unique_id "agZsvd72N9CbeiqcqgO-AAAAAUM"]
[Fri May 15 08:45:49.570578 2026] [:error] [pid 51234:tid 51243] [client 85.203.21.98:27193] [client 85.203.21.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/"] [unique_id "agZsvd72N9CbeiqcqgO-AQAAAUc"]
[Fri May 15 08:45:49.785616 2026] [:error] [pid 1295:tid 1317] [client 85.203.21.97:62063] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/"] [unique_id "agZsvdmMhqLvs0GYixkOZAAAANM"]
[Fri May 15 08:45:49.982280 2026] [:error] [pid 1295:tid 1300] [client 85.203.21.150:55091] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/config.php"] [unique_id "agZsvdmMhqLvs0GYixkOZQAAAMI"]
[Fri May 15 08:46:10.253955 2026] [:error] [pid 1189:tid 1230] [client 85.203.21.70:20865] [client 85.203.21.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/src/Core/"] [unique_id "agZs0ge36qIGegR4kclwqAAAAEU"]
[Fri May 15 08:46:10.864590 2026] [:error] [pid 51234:tid 51239] [client 85.203.21.107:45839] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/widgets/"] [unique_id "agZs0t72N9CbeiqcqgO-LAAAAUM"]
[Fri May 15 08:46:16.681371 2026] [:error] [pid 50531:tid 50541] [client 85.203.21.77:44047] [client 85.203.21.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "agZs2B3WbFwE6voqGzraBwAAAQg"]
[Fri May 15 08:46:21.886270 2026] [:error] [pid 1190:tid 1262] [client 85.203.21.72:36491] [client 85.203.21.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/simple.php"] [unique_id "agZs3dqiXrD7hne4gFbA8AAAAIo"]
[Fri May 15 08:46:27.091039 2026] [:error] [pid 1189:tid 1248] [client 85.203.21.97:26817] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "agZs4we36qIGegR4kclw0AAAAFc"]
[Fri May 15 08:46:32.348052 2026] [:error] [pid 1189:tid 1243] [client 85.203.21.96:60523] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/"] [unique_id "agZs6Ae36qIGegR4kclw3AAAAFI"]
[Fri May 15 08:46:33.452552 2026] [:error] [pid 1190:tid 1268] [client 85.203.21.73:40467] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agZs6dqiXrD7hne4gFbA-AAAAJA"]
[Fri May 15 08:46:33.659705 2026] [:error] [pid 51234:tid 51259] [client 85.203.21.153:62367] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/themes.php"] [unique_id "agZs6d72N9CbeiqcqgO-bAAAAVc"]
[Fri May 15 08:46:33.885205 2026] [:error] [pid 51234:tid 51256] [client 85.203.21.115:50225] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/as.php"] [unique_id "agZs6d72N9CbeiqcqgO-bQAAAVQ"]
[Fri May 15 08:46:34.094810 2026] [:error] [pid 1295:tid 1317] [client 85.203.21.143:33257] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/buy.php"] [unique_id "agZs6tmMhqLvs0GYixkOugAAANM"]
[Fri May 15 08:46:49.371949 2026] [:error] [pid 1189:tid 1234] [client 85.203.21.137:28217] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/404.php"] [unique_id "agZs-Qe36qIGegR4kclw9gAAAEk"]
[Fri May 15 08:46:49.894119 2026] [:error] [pid 1189:tid 1238] [client 85.203.21.96:25435] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ahax.php"] [unique_id "agZs-Qe36qIGegR4kclw-wAAAE0"]
[Fri May 15 08:46:50.194089 2026] [:error] [pid 1295:tid 1319] [client 85.203.21.75:56447] [client 85.203.21.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/buy.php"] [unique_id "agZs-tmMhqLvs0GYixkO6wAAANU"]
[Fri May 15 08:46:50.573745 2026] [:error] [pid 51234:tid 51258] [client 85.203.21.133:36399] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comment-date/"] [unique_id "agZs-t72N9CbeiqcqgO-lwAAAVY"]
[Fri May 15 08:46:50.771376 2026] [:error] [pid 51234:tid 51250] [client 85.203.21.70:60687] [client 85.203.21.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "agZs-t72N9CbeiqcqgO-mQAAAU4"]
[Fri May 15 08:46:50.970299 2026] [:error] [pid 1189:tid 1237] [client 85.203.21.105:22897] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/admin.php"] [unique_id "agZs-ge36qIGegR4kclxAQAAAEw"]
[Fri May 15 08:47:01.353935 2026] [:error] [pid 1189:tid 1249] [client 85.203.21.119:24791] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "agZtBQe36qIGegR4kclxKAAAAFg"]
[Fri May 15 08:47:01.593666 2026] [:error] [pid 50531:tid 50535] [client 85.203.21.87:34539] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "agZtBR3WbFwE6voqGzraRQAAAQI"]
[Fri May 15 08:47:01.867677 2026] [:error] [pid 1295:tid 1321] [client 85.203.21.112:44803] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/"] [unique_id "agZtBdmMhqLvs0GYixkPBgAAANc"]
[Fri May 15 08:47:02.096469 2026] [:error] [pid 1295:tid 1302] [client 85.203.21.87:31623] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/about.php"] [unique_id "agZtBtmMhqLvs0GYixkPCQAAAMQ"]
[Fri May 15 08:47:02.299911 2026] [:error] [pid 1189:tid 1243] [client 85.203.21.139:41483] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/mini.php"] [unique_id "agZtBge36qIGegR4kclxKwAAAFI"]
[Fri May 15 08:47:07.549086 2026] [:error] [pid 1295:tid 1305] [client 85.203.21.71:52451] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "agZtC9mMhqLvs0GYixkPEAAAAMc"]
[Fri May 15 08:47:07.859870 2026] [:error] [pid 1295:tid 1315] [client 85.203.21.70:41129] [client 85.203.21.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/root.php"] [unique_id "agZtC9mMhqLvs0GYixkPEQAAANE"]
[Fri May 15 08:47:08.600154 2026] [:error] [pid 1295:tid 1318] [client 85.203.21.85:23157] [client 85.203.21.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "agZtDNmMhqLvs0GYixkPEgAAANQ"]
[Fri May 15 08:47:09.487963 2026] [:error] [pid 1295:tid 1322] [client 85.203.21.147:51581] [client 85.203.21.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/network/"] [unique_id "agZtDdmMhqLvs0GYixkPEwAAANg"]
[Fri May 15 08:47:15.987870 2026] [:error] [pid 1190:tid 1257] [client 85.203.21.147:58763] [client 85.203.21.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/admin/function.php"] [unique_id "agZtE9qiXrD7hne4gFbBGwAAAIU"]
[Fri May 15 08:47:16.189944 2026] [:error] [pid 1190:tid 1254] [client 85.203.21.133:30965] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/code/"] [unique_id "agZtFNqiXrD7hne4gFbBHAAAAII"]
[Fri May 15 08:47:16.394165 2026] [:error] [pid 1295:tid 1304] [client 85.203.21.112:41487] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "agZtFNmMhqLvs0GYixkPGwAAAMY"]
[Fri May 15 08:47:21.645821 2026] [:error] [pid 1189:tid 1245] [client 85.203.21.119:63095] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/a.php"] [unique_id "agZtGQe36qIGegR4kclxXwAAAFQ"]
[Fri May 15 08:47:26.897641 2026] [:error] [pid 1188:tid 1197] [client 85.203.21.114:63783] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/themes/"] [unique_id "agZtHtY68iW8yuNkNzPpugAAAAA"]
[Fri May 15 08:47:32.600279 2026] [:error] [pid 1190:tid 1263] [client 85.203.21.71:29501] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "agZtJNqiXrD7hne4gFbBJQAAAIs"]
[Fri May 15 08:47:32.839393 2026] [:error] [pid 1189:tid 1228] [client 85.203.21.137:58973] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "agZtJAe36qIGegR4kclxjwAAAEM"]
[Fri May 15 08:47:33.055411 2026] [:error] [pid 1190:tid 1258] [client 85.203.21.147:32789] [client 85.203.21.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "agZtJdqiXrD7hne4gFbBJgAAAIY"]
[Fri May 15 08:47:33.269818 2026] [:error] [pid 1189:tid 1226] [client 85.203.21.96:38541] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/upload.php"] [unique_id "agZtJQe36qIGegR4kclxkQAAAEE"]
[Fri May 15 08:47:33.469131 2026] [:error] [pid 1295:tid 1310] [client 85.203.21.143:64555] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-domain.php"] [unique_id "agZtJdmMhqLvs0GYixkPIgAAAMw"]
[Fri May 15 08:47:33.862128 2026] [:error] [pid 1188:tid 1202] [client 85.203.21.75:64787] [client 85.203.21.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/radio.php"] [unique_id "agZtJdY68iW8yuNkNzPpwwAAAAU"]
[Fri May 15 08:47:34.069160 2026] [:error] [pid 1295:tid 1302] [client 85.203.21.85:32827] [client 85.203.21.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/rip.php"] [unique_id "agZtJtmMhqLvs0GYixkPIwAAAMQ"]
[Fri May 15 08:47:34.301584 2026] [:error] [pid 1295:tid 1317] [client 85.203.21.143:38087] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/fukasawa/inc/classes/403x.php"] [unique_id "agZtJtmMhqLvs0GYixkPJAAAANM"]
[Fri May 15 08:47:34.499345 2026] [:error] [pid 1189:tid 1245] [client 85.203.21.97:20823] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/options.php"] [unique_id "agZtJge36qIGegR4kclxlQAAAFQ"]
[Fri May 15 08:47:34.697696 2026] [:error] [pid 50531:tid 50533] [client 85.203.21.119:62189] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/config.php"] [unique_id "agZtJh3WbFwE6voqGzraawAAAQA"]
[Fri May 15 08:47:34.898850 2026] [:error] [pid 1295:tid 1319] [client 85.203.21.107:30287] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/src/Content/Type/"] [unique_id "agZtJtmMhqLvs0GYixkPJQAAANU"]
[Fri May 15 08:47:40.148720 2026] [:error] [pid 50531:tid 50546] [client 85.203.21.112:43145] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/freeform/"] [unique_id "agZtLB3WbFwE6voqGzradQAAAQ0"]
[Fri May 15 08:47:45.358150 2026] [:error] [pid 51234:tid 51242] [client 85.203.21.103:48961] [client 85.203.21.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/system_log.php"] [unique_id "agZtMd72N9CbeiqcqgO_DQAAAUY"]
[Fri May 15 08:47:45.580562 2026] [:error] [pid 1189:tid 1249] [client 85.203.21.87:47323] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/neve/assets/apps/dashboard/build/"] [unique_id "agZtMQe36qIGegR4kclxrAAAAFg"]
[Fri May 15 08:47:45.784703 2026] [:error] [pid 1190:tid 1272] [client 85.203.21.153:65163] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/"] [unique_id "agZtMdqiXrD7hne4gFbBKwAAAJQ"]
[Fri May 15 08:47:45.997804 2026] [:error] [pid 51234:tid 51247] [client 85.203.21.119:51051] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "agZtMd72N9CbeiqcqgO_EAAAAUs"]
[Fri May 15 08:47:46.480585 2026] [:error] [pid 1189:tid 1233] [client 85.203.21.73:24941] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "agZtMge36qIGegR4kclxrgAAAEg"]
[Fri May 15 08:47:52.151837 2026] [:error] [pid 1295:tid 1303] [client 85.203.21.97:38005] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "agZtONmMhqLvs0GYixkPMwAAAMU"]
[Fri May 15 08:47:52.378036 2026] [:error] [pid 51234:tid 51236] [client 85.203.21.137:30423] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/"] [unique_id "agZtON72N9CbeiqcqgO_HQAAAUA"]
[Fri May 15 08:47:52.582971 2026] [:error] [pid 1295:tid 1307] [client 85.203.21.114:46573] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/worksec.php"] [unique_id "agZtONmMhqLvs0GYixkPNQAAAMk"]
[Fri May 15 08:47:52.788034 2026] [:error] [pid 51234:tid 51238] [client 85.203.21.131:29779] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/packed.php"] [unique_id "agZtON72N9CbeiqcqgO_HwAAAUI"]
[Fri May 15 08:47:57.990466 2026] [:error] [pid 51234:tid 51250] [client 85.203.21.81:64181] [client 85.203.21.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/file.php"] [unique_id "agZtPd72N9CbeiqcqgO_MQAAAU4"]
[Fri May 15 08:47:58.256095 2026] [:error] [pid 1295:tid 1318] [client 85.203.21.87:41159] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/admin-header.php"] [unique_id "agZtPtmMhqLvs0GYixkPOQAAANQ"]
[Fri May 15 08:48:08.466436 2026] [:error] [pid 1295:tid 1299] [client 85.203.21.88:33461] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/"] [unique_id "agZtSNmMhqLvs0GYixkPRAAAAME"]
[Fri May 15 08:48:08.667403 2026] [:error] [pid 1295:tid 1309] [client 85.203.21.137:53073] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/mah/function.php"] [unique_id "agZtSNmMhqLvs0GYixkPRwAAAMs"]
[Fri May 15 08:48:13.877099 2026] [:error] [pid 1189:tid 1235] [client 85.203.21.79:29565] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/config.php"] [unique_id "agZtTQe36qIGegR4kclx6QAAAEo"]
[Fri May 15 08:48:14.098513 2026] [:error] [pid 51234:tid 51239] [client 85.203.21.98:40807] [client 85.203.21.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/chosen.php"] [unique_id "agZtTt72N9CbeiqcqgO_NgAAAUM"]
[Fri May 15 08:48:19.297914 2026] [:error] [pid 51234:tid 51253] [client 85.203.21.96:38195] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/images/"] [unique_id "agZtU972N9CbeiqcqgO_OwAAAVE"]
[Fri May 15 08:48:19.595067 2026] [:error] [pid 51234:tid 51243] [client 85.203.21.153:47357] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "agZtU972N9CbeiqcqgO_PAAAAUc"]
[Fri May 15 08:48:19.795051 2026] [:error] [pid 51234:tid 51251] [client 85.203.21.87:36799] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "agZtU972N9CbeiqcqgO_PQAAAU8"]
[Fri May 15 08:48:25.080917 2026] [:error] [pid 51234:tid 51247] [client 85.203.21.131:30889] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/media/"] [unique_id "agZtWd72N9CbeiqcqgO_RQAAAUs"]
[Fri May 15 08:48:25.278608 2026] [:error] [pid 51234:tid 51241] [client 85.203.21.153:58237] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/dist/customize-widgets/"] [unique_id "agZtWd72N9CbeiqcqgO_RgAAAUU"]
[Fri May 15 08:48:25.483780 2026] [:error] [pid 50531:tid 50544] [client 85.203.21.99:45165] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/separator/"] [unique_id "agZtWR3WbFwE6voqGzraoAAAAQs"]
[Fri May 15 08:48:30.750396 2026] [:error] [pid 1188:tid 1212] [client 85.203.21.88:56185] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "agZtXtY68iW8yuNkNzPp2wAAAA8"]
[Fri May 15 08:48:31.143135 2026] [:error] [pid 1190:tid 1264] [client 85.203.21.107:63985] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content.php"] [unique_id "agZtX9qiXrD7hne4gFbBQQAAAIw"]
[Fri May 15 08:48:31.352764 2026] [:error] [pid 1188:tid 1202] [client 85.203.21.137:60285] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "agZtX9Y68iW8yuNkNzPp3AAAAAU"]
[Fri May 15 08:48:31.585415 2026] [:error] [pid 1188:tid 1204] [client 85.203.21.75:47487] [client 85.203.21.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/.well-known/acme-challenge/"] [unique_id "agZtX9Y68iW8yuNkNzPp3gAAAAc"]
[Fri May 15 08:48:31.786523 2026] [:error] [pid 1188:tid 1197] [client 85.203.21.112:38329] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/shell.php"] [unique_id "agZtX9Y68iW8yuNkNzPp3wAAAAA"]
[Fri May 15 08:48:31.989928 2026] [:error] [pid 1190:tid 1259] [client 85.203.21.112:31765] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/image/"] [unique_id "agZtX9qiXrD7hne4gFbBQwAAAIc"]
[Fri May 15 08:48:32.189422 2026] [:error] [pid 1188:tid 1219] [client 85.203.21.111:50713] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/files.php"] [unique_id "agZtYNY68iW8yuNkNzPp4wAAABY"]
[Fri May 15 08:48:32.402132 2026] [:error] [pid 1189:tid 1232] [client 85.203.21.143:46159] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/video/"] [unique_id "agZtYAe36qIGegR4kclx_gAAAEc"]
[Fri May 15 08:48:32.663039 2026] [:error] [pid 50531:tid 50539] [client 85.203.21.131:60231] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyfive/"] [unique_id "agZtYB3WbFwE6voqGzrapwAAAQY"]
[Fri May 15 08:48:32.885642 2026] [:error] [pid 50531:tid 50555] [client 85.203.21.81:51331] [client 85.203.21.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "agZtYB3WbFwE6voqGzraqAAAARY"]
[Fri May 15 08:48:43.095264 2026] [:error] [pid 1189:tid 1242] [client 85.203.21.99:51165] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/backup.php"] [unique_id "agZtawe36qIGegR4kclyCAAAAFE"]
[Fri May 15 08:48:43.293499 2026] [:error] [pid 1189:tid 1234] [client 85.203.21.114:28571] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/"] [unique_id "agZtawe36qIGegR4kclyCgAAAEk"]
[Fri May 15 08:48:43.490966 2026] [:error] [pid 1189:tid 1241] [client 85.203.21.137:45073] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/login.php"] [unique_id "agZtawe36qIGegR4kclyCwAAAFA"]
[Fri May 15 08:48:53.696023 2026] [:error] [pid 1189:tid 1242] [client 85.203.21.71:23097] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/login.php"] [unique_id "agZtdQe36qIGegR4kclyHQAAAFE"]
[Fri May 15 08:48:54.169439 2026] [:error] [pid 50531:tid 50538] [client 85.203.21.97:54323] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "agZtdh3WbFwE6voqGzravQAAAQU"]
[Fri May 15 08:48:54.370169 2026] [:error] [pid 1189:tid 1241] [client 85.203.21.143:45967] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/"] [unique_id "agZtdge36qIGegR4kclyIQAAAFA"]
[Fri May 15 08:49:04.581031 2026] [:error] [pid 50531:tid 50546] [client 85.203.21.73:50889] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/vx.php"] [unique_id "agZtgB3WbFwE6voqGzrawgAAAQ0"]
[Fri May 15 08:49:19.791860 2026] [:error] [pid 1295:tid 1312] [client 85.203.21.120:25433] [client 85.203.21.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/library/"] [unique_id "agZtj9mMhqLvs0GYixkPiQAAAM4"]
[Fri May 15 08:49:20.066039 2026] [:error] [pid 1190:tid 1275] [client 85.203.21.119:63941] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentytwo/assets/fonts/"] [unique_id "agZtkNqiXrD7hne4gFbBWQAAAJc"]
[Fri May 15 08:49:20.273949 2026] [:error] [pid 1188:tid 1215] [client 85.203.21.74:55631] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "agZtkNY68iW8yuNkNzPp9QAAABI"]
[Fri May 15 08:49:20.500334 2026] [:error] [pid 1188:tid 1204] [client 85.203.21.81:65171] [client 85.203.21.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-signin.php"] [unique_id "agZtkNY68iW8yuNkNzPp9gAAAAc"]
[Fri May 15 08:49:20.772137 2026] [:error] [pid 1190:tid 1273] [client 85.203.21.119:34363] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentynineteen/sass/site/"] [unique_id "agZtkNqiXrD7hne4gFbBWwAAAJU"]
[Fri May 15 08:49:21.343543 2026] [:error] [pid 1190:tid 1258] [client 85.203.21.153:61891] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-config-backup.php"] [unique_id "agZtkdqiXrD7hne4gFbBXAAAAIY"]
[Fri May 15 08:49:22.348182 2026] [:error] [pid 1190:tid 1253] [client 85.203.21.139:22489] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "agZtktqiXrD7hne4gFbBXQAAAIE"]
[Fri May 15 08:49:23.484394 2026] [:error] [pid 51234:tid 51250] [client 85.203.21.112:30521] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/about.php"] [unique_id "agZtk972N9CbeiqcqgO_jwAAAU4"]
[Fri May 15 08:49:24.153321 2026] [:error] [pid 50531:tid 50545] [client 85.203.21.133:53659] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/html-api/widgets/"] [unique_id "agZtlB3WbFwE6voqGzrazwAAAQw"]
[Fri May 15 08:49:34.373773 2026] [:error] [pid 1189:tid 1246] [client 85.203.21.114:63425] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "agZtnge36qIGegR4kclyPgAAAFU"]
[Fri May 15 08:49:34.578177 2026] [:error] [pid 1295:tid 1303] [client 85.203.21.153:32173] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/system.php"] [unique_id "agZtntmMhqLvs0GYixkPmwAAAMU"]
[Fri May 15 08:49:34.841476 2026] [:error] [pid 1295:tid 1299] [client 85.203.21.85:33181] [client 85.203.21.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "agZtntmMhqLvs0GYixkPnAAAAME"]
[Fri May 15 08:49:35.060706 2026] [:error] [pid 1189:tid 1227] [client 85.203.21.87:20245] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "agZtnwe36qIGegR4kclyPwAAAEI"]
[Fri May 15 08:49:35.276984 2026] [:error] [pid 1188:tid 1217] [client 85.203.21.101:62105] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/adminfuns.php"] [unique_id "agZtn9Y68iW8yuNkNzPqBAAAABQ"]
[Fri May 15 08:49:35.506148 2026] [:error] [pid 50531:tid 50536] [client 85.203.21.112:58075] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/app.php"] [unique_id "agZtnx3WbFwE6voqGzra3wAAAQM"]
[Fri May 15 08:49:40.710956 2026] [:error] [pid 1188:tid 1219] [client 85.203.21.107:59699] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/beteng83/ws78.php"] [unique_id "agZtpNY68iW8yuNkNzPqCAAAABY"]
[Fri May 15 08:49:40.951987 2026] [:error] [pid 1188:tid 1211] [client 85.203.21.123:21859] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "agZtpNY68iW8yuNkNzPqCQAAAA4"]
[Fri May 15 08:49:41.166317 2026] [:error] [pid 1188:tid 1220] [client 85.203.21.147:44129] [client 85.203.21.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/chosen.php"] [unique_id "agZtpdY68iW8yuNkNzPqCgAAABc"]
[Fri May 15 08:49:46.363799 2026] [:error] [pid 1295:tid 1307] [client 85.203.21.115:23091] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comments-pagination-next/"] [unique_id "agZtqtmMhqLvs0GYixkPpAAAAMk"]
[Fri May 15 08:49:51.649041 2026] [:error] [pid 1295:tid 1303] [client 85.203.21.74:44127] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/class.php"] [unique_id "agZtr9mMhqLvs0GYixkPpwAAAMU"]
[Fri May 15 08:49:51.875631 2026] [:error] [pid 1295:tid 1311] [client 85.203.21.107:36397] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/network/colors/"] [unique_id "agZtr9mMhqLvs0GYixkPqQAAAM0"]
[Fri May 15 08:49:52.179520 2026] [:error] [pid 51234:tid 51240] [client 85.203.21.137:30029] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/group/"] [unique_id "agZtsN72N9CbeiqcqgO_sAAAAUQ"]
[Fri May 15 08:49:52.422841 2026] [:error] [pid 1295:tid 1317] [client 85.203.21.97:48955] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "agZtsNmMhqLvs0GYixkPqgAAANM"]
[Fri May 15 08:49:52.667407 2026] [:error] [pid 1295:tid 1310] [client 85.203.21.79:40779] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/module.php"] [unique_id "agZtsNmMhqLvs0GYixkPqwAAAMw"]
[Fri May 15 08:49:52.872542 2026] [:error] [pid 1295:tid 1320] [client 85.203.21.97:50235] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/user.php"] [unique_id "agZtsNmMhqLvs0GYixkPrAAAANY"]
[Fri May 15 08:49:53.094943 2026] [:error] [pid 1189:tid 1240] [client 85.203.21.74:61471] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/about.php"] [unique_id "agZtsQe36qIGegR4kclyTwAAAE8"]
[Fri May 15 08:49:53.290692 2026] [:error] [pid 1190:tid 1269] [client 85.203.21.75:52817] [client 85.203.21.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/widget-group/"] [unique_id "agZtsdqiXrD7hne4gFbBbwAAAJE"]
[Fri May 15 08:49:53.549487 2026] [:error] [pid 1295:tid 1308] [client 85.203.21.99:21449] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/config.php"] [unique_id "agZtsdmMhqLvs0GYixkPrQAAAMo"]
[Fri May 15 08:49:53.751194 2026] [:error] [pid 1189:tid 1238] [client 85.203.21.120:62157] [client 85.203.21.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/2025/"] [unique_id "agZtsQe36qIGegR4kclyUQAAAE0"]
[Fri May 15 08:49:53.970175 2026] [:error] [pid 1189:tid 1228] [client 85.203.21.87:41613] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/install.php"] [unique_id "agZtsQe36qIGegR4kclyUgAAAEM"]
[Fri May 15 08:49:54.171468 2026] [:error] [pid 50531:tid 50551] [client 85.203.21.133:41667] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-content/"] [unique_id "agZtsh3WbFwE6voqGzra6gAAARI"]
[Fri May 15 08:49:54.376896 2026] [:error] [pid 50531:tid 50542] [client 85.203.21.77:65441] [client 85.203.21.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "agZtsh3WbFwE6voqGzra6wAAAQk"]
[Fri May 15 08:49:54.639678 2026] [:error] [pid 1189:tid 1242] [client 85.203.21.119:43871] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "agZtsge36qIGegR4kclyUwAAAFE"]
[Fri May 15 08:49:54.857308 2026] [:error] [pid 51234:tid 51237] [client 85.203.21.138:39387] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "agZtst72N9CbeiqcqgO_swAAAUE"]
[Fri May 15 08:50:00.076132 2026] [:error] [pid 1190:tid 1256] [client 85.203.21.97:23395] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/lock360.php"] [unique_id "agZtuNqiXrD7hne4gFbBcAAAAIQ"]
[Fri May 15 08:50:05.344042 2026] [:error] [pid 1188:tid 1217] [client 85.203.21.153:46713] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/we.php"] [unique_id "agZtvdY68iW8yuNkNzPqEQAAABQ"]
[Fri May 15 08:50:05.666104 2026] [:error] [pid 50531:tid 50549] [client 85.203.21.115:20535] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/legacy-widget/"] [unique_id "agZtvR3WbFwE6voqGzra_AAAARA"]
[Fri May 15 08:50:05.864148 2026] [:error] [pid 50531:tid 50547] [client 85.203.21.85:28821] [client 85.203.21.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/lock360.php"] [unique_id "agZtvR3WbFwE6voqGzra_QAAAQ4"]
[Fri May 15 08:50:06.062824 2026] [:error] [pid 1188:tid 1221] [client 85.203.21.112:63521] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/"] [unique_id "agZtvtY68iW8yuNkNzPqEwAAABg"]
[Fri May 15 08:50:06.265808 2026] [:error] [pid 51234:tid 51240] [client 85.203.21.138:49223] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/navigation-submenu/"] [unique_id "agZtvt72N9CbeiqcqgO_vAAAAUQ"]
[Fri May 15 08:50:11.499818 2026] [:error] [pid 1295:tid 1315] [client 85.203.21.72:42711] [client 85.203.21.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/users.php"] [unique_id "agZtw9mMhqLvs0GYixkPugAAANE"]
[Fri May 15 08:50:12.850562 2026] [:error] [pid 1189:tid 1236] [client 85.203.21.115:45271] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "agZtxAe36qIGegR4kclyXAAAAEs"]
[Fri May 15 08:50:13.090141 2026] [:error] [pid 1295:tid 1307] [client 85.203.21.71:21221] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/library/222.php"] [unique_id "agZtxdmMhqLvs0GYixkPuwAAAMk"]
[Fri May 15 08:50:13.382125 2026] [:error] [pid 1189:tid 1248] [client 85.203.21.71:48879] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-update.php"] [unique_id "agZtxQe36qIGegR4kclyXwAAAFc"]
[Fri May 15 08:50:18.756491 2026] [:error] [pid 1188:tid 1209] [client 85.203.21.74:26425] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/pomo/"] [unique_id "agZtytY68iW8yuNkNzPqFwAAAAw"]
[Fri May 15 08:50:24.240962 2026] [:error] [pid 50531:tid 50546] [client 85.203.21.139:65065] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/maint/network/"] [unique_id "agZt0B3WbFwE6voqGzrbEQAAAQ0"]
[Fri May 15 08:50:24.876641 2026] [:error] [pid 51234:tid 51246] [client 85.203.21.71:55779] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/PHPMailer/widgets/"] [unique_id "agZt0N72N9CbeiqcqgO_zwAAAUo"]
[Fri May 15 08:50:25.197933 2026] [:error] [pid 51234:tid 51257] [client 85.203.21.150:55723] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/"] [unique_id "agZt0d72N9CbeiqcqgO_0QAAAVU"]
[Fri May 15 08:50:25.396568 2026] [:error] [pid 51234:tid 51243] [client 85.203.21.131:26735] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/css/colors/"] [unique_id "agZt0d72N9CbeiqcqgO_0gAAAUc"]
[Fri May 15 08:50:25.641172 2026] [:error] [pid 51234:tid 51252] [client 85.203.21.101:27275] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/woocommerce/includes/import/about.php"] [unique_id "agZt0d72N9CbeiqcqgO_0wAAAVA"]
[Fri May 15 08:50:30.873195 2026] [:error] [pid 50531:tid 50551] [client 85.203.21.73:30459] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/query-pagination/"] [unique_id "agZt1h3WbFwE6voqGzrbFgAAARI"]
[Fri May 15 08:50:41.085387 2026] [:error] [pid 1190:tid 1264] [client 85.203.21.111:35935] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentythree/"] [unique_id "agZt4dqiXrD7hne4gFbBegAAAIw"]
[Fri May 15 08:50:41.282445 2026] [:error] [pid 1190:tid 1269] [client 85.203.21.103:35071] [client 85.203.21.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/astra/assets/css/"] [unique_id "agZt4dqiXrD7hne4gFbBewAAAJE"]
[Fri May 15 08:50:41.482834 2026] [:error] [pid 51234:tid 51260] [client 85.203.21.111:20037] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/customize/222.php"] [unique_id "agZt4d72N9CbeiqcqgO_4QAAAVg"]
[Fri May 15 08:50:41.683930 2026] [:error] [pid 51234:tid 51259] [client 85.203.21.87:22739] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/"] [unique_id "agZt4d72N9CbeiqcqgO_4wAAAVc"]
[Fri May 15 08:50:41.891061 2026] [:error] [pid 1188:tid 1205] [client 85.203.21.143:50841] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "agZt4dY68iW8yuNkNzPqJQAAAAg"]
[Fri May 15 08:50:42.354981 2026] [:error] [pid 1189:tid 1228] [client 85.203.21.87:30901] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "agZt4ge36qIGegR4kclyawAAAEM"]
[Fri May 15 08:50:52.691024 2026] [:error] [pid 1189:tid 1246] [client 85.203.21.111:51079] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/pattern/"] [unique_id "agZt7Ae36qIGegR4kclydgAAAFU"]
[Fri May 15 08:50:53.074890 2026] [:error] [pid 1189:tid 1239] [client 85.203.21.77:33833] [client 85.203.21.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-load.php"] [unique_id "agZt7Qe36qIGegR4kclydwAAAE4"]
[Fri May 15 08:50:58.363766 2026] [:error] [pid 51234:tid 51239] [client 85.203.21.85:49441] [client 85.203.21.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/table/"] [unique_id "agZt8t72N9CbeiqcqgO_5gAAAUM"]
[Fri May 15 08:50:59.160318 2026] [:error] [pid 51234:tid 51247] [client 85.203.21.107:22483] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/block-bindings/"] [unique_id "agZt8972N9CbeiqcqgO_6gAAAUs"]
[Fri May 15 08:50:59.573426 2026] [:error] [pid 1190:tid 1253] [client 85.203.21.96:28371] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-cache-sys/"] [unique_id "agZt89qiXrD7hne4gFbBiwAAAIE"]
[Fri May 15 08:51:04.771528 2026] [:error] [pid 1188:tid 1205] [client 85.203.21.75:44169] [client 85.203.21.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comments-less.php"] [unique_id "agZt-NY68iW8yuNkNzPqMAAAAAg"]
[Fri May 15 08:51:04.967513 2026] [:error] [pid 1188:tid 1216] [client 85.203.21.112:41087] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/script-loader-react-refresh.php"] [unique_id "agZt-NY68iW8yuNkNzPqMgAAABM"]
[Fri May 15 08:51:05.179639 2026] [:error] [pid 1188:tid 1217] [client 85.203.21.71:42643] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/accordion/"] [unique_id "agZt-dY68iW8yuNkNzPqNAAAABQ"]
[Fri May 15 08:51:05.470188 2026] [:error] [pid 51234:tid 51250] [client 85.203.21.138:61633] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/Nxploited/class-payment.php"] [unique_id "agZt-d72N9CbeiqcqgO_6wAAAU4"]
[Fri May 15 08:51:05.681220 2026] [:error] [pid 51234:tid 51245] [client 85.203.21.103:27835] [client 85.203.21.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/home.php"] [unique_id "agZt-d72N9CbeiqcqgO_7AAAAUk"]
[Fri May 15 08:51:10.897709 2026] [:error] [pid 1190:tid 1256] [client 85.203.21.97:28435] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "agZt_tqiXrD7hne4gFbBkQAAAIQ"]
[Fri May 15 08:51:11.157891 2026] [:error] [pid 1190:tid 1275] [client 85.203.21.72:23737] [client 85.203.21.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/dist/script-modules/block-library/file/"] [unique_id "agZt_9qiXrD7hne4gFbBkgAAAJc"]
[Fri May 15 08:51:21.380100 2026] [:error] [pid 51234:tid 51238] [client 85.203.21.143:40089] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/certificates/widgets/"] [unique_id "agZuCd72N9CbeiqcqgO_9QAAAUI"]
[Fri May 15 08:51:21.585940 2026] [:error] [pid 51234:tid 51241] [client 85.203.21.152:64445] [client 85.203.21.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/interactivity-api/"] [unique_id "agZuCd72N9CbeiqcqgO_9gAAAUU"]
[Fri May 15 08:51:21.783862 2026] [:error] [pid 51234:tid 51250] [client 85.203.21.153:28989] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/taxonomy-compiler.php"] [unique_id "agZuCd72N9CbeiqcqgO_-AAAAU4"]
[Fri May 15 08:51:21.981617 2026] [:error] [pid 51234:tid 51260] [client 85.203.21.70:20543] [client 85.203.21.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/smilies/"] [unique_id "agZuCd72N9CbeiqcqgO_-gAAAVg"]
[Fri May 15 08:51:22.175879 2026] [:error] [pid 51234:tid 51259] [client 85.203.21.70:57705] [client 85.203.21.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyone/assets/"] [unique_id "agZuCt72N9CbeiqcqgO__AAAAVc"]
[Fri May 15 08:51:22.376609 2026] [:error] [pid 1188:tid 1211] [client 85.203.21.114:44737] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/aboutc.php"] [unique_id "agZuCtY68iW8yuNkNzPqOQAAAA4"]
[Fri May 15 08:51:22.662939 2026] [:error] [pid 1190:tid 1258] [client 85.203.21.87:39739] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "agZuCtqiXrD7hne4gFbBlgAAAIY"]
[Fri May 15 08:51:22.892131 2026] [:error] [pid 51234:tid 51258] [client 85.203.21.72:28265] [client 85.203.21.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/Content/Type/Sniffer.plugin.php"] [unique_id "agZuCt72N9CbeiqcqgO__wAAAVY"]
[Fri May 15 08:51:38.191116 2026] [:error] [pid 1295:tid 1316] [client 85.203.21.87:23801] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/system.php"] [unique_id "agZuGtmMhqLvs0GYixkP0QAAANI"]
[Fri May 15 08:51:38.570584 2026] [:error] [pid 1190:tid 1271] [client 85.203.21.143:35213] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/login.php"] [unique_id "agZuGtqiXrD7hne4gFbBnQAAAJM"]
[Fri May 15 08:51:38.867930 2026] [:error] [pid 1190:tid 1265] [client 85.203.21.72:24459] [client 85.203.21.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sc_1.php"] [unique_id "agZuGtqiXrD7hne4gFbBngAAAI0"]
[Fri May 15 08:51:39.072144 2026] [:error] [pid 1190:tid 1274] [client 85.203.21.153:53177] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/gk.php"] [unique_id "agZuG9qiXrD7hne4gFbBnwAAAJY"]
[Fri May 15 08:51:39.270872 2026] [:error] [pid 1295:tid 1300] [client 85.203.21.96:52741] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/about/system_core.php"] [unique_id "agZuG9mMhqLvs0GYixkP1QAAAMI"]
[Fri May 15 08:51:39.575406 2026] [:error] [pid 1190:tid 1273] [client 85.203.21.120:46599] [client 85.203.21.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ALFA_DATA/system_core.php"] [unique_id "agZuG9qiXrD7hne4gFbBoAAAAJU"]
[Fri May 15 08:51:39.799620 2026] [:error] [pid 50531:tid 50553] [client 85.203.21.105:20503] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ALFA_DATA/alfacgiapi/system_core.php"] [unique_id "agZuGx3WbFwE6voqGzrbSQAAARQ"]
[Fri May 15 08:51:39.997127 2026] [:error] [pid 50531:tid 50543] [client 85.203.21.137:22175] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/contact/system_core.php"] [unique_id "agZuGx3WbFwE6voqGzrbSgAAAQo"]
[Fri May 15 08:51:45.296170 2026] [:error] [pid 1190:tid 1273] [client 85.203.21.70:30079] [client 85.203.21.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/ast-block-templates-json/system_core.php"] [unique_id "agZuIdqiXrD7hne4gFbBrAAAAJU"]
[Fri May 15 08:51:45.499294 2026] [:error] [pid 1190:tid 1262] [client 85.203.21.73:31275] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/astra-sites/json/system_core.php"] [unique_id "agZuIdqiXrD7hne4gFbBrQAAAIo"]
[Fri May 15 08:51:45.697276 2026] [:error] [pid 1295:tid 1314] [client 85.203.21.123:41581] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/cartflows-logs/system_core.php"] [unique_id "agZuIdmMhqLvs0GYixkP2gAAANA"]
[Fri May 15 08:51:46.083613 2026] [:error] [pid 50531:tid 50534] [client 85.203.21.143:28077] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/edd/system_core.php"] [unique_id "agZuIh3WbFwE6voqGzrbTgAAAQE"]
[Fri May 15 08:51:46.291507 2026] [:error] [pid 50531:tid 50555] [client 85.203.21.96:58223] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/elementor/system_core.php"] [unique_id "agZuIh3WbFwE6voqGzrbTwAAARY"]
[Fri May 15 08:51:51.500624 2026] [:error] [pid 1188:tid 1215] [client 85.203.21.111:43675] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/st-importer/system_core.php"] [unique_id "agZuJ9Y68iW8yuNkNzPqPQAAABI"]
[Fri May 15 08:51:51.698285 2026] [:error] [pid 1188:tid 1201] [client 85.203.21.120:25859] [client 85.203.21.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/system_core.php"] [unique_id "agZuJ9Y68iW8yuNkNzPqPgAAAAQ"]
[Fri May 15 08:51:51.978504 2026] [:error] [pid 1295:tid 1306] [client 85.203.21.85:58771] [client 85.203.21.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wc-logs/system_core.php"] [unique_id "agZuJ9mMhqLvs0GYixkP3wAAAMg"]
[Fri May 15 08:51:52.259459 2026] [:error] [pid 1295:tid 1309] [client 85.203.21.114:63375] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/woocommerce_uploads/system_core.php"] [unique_id "agZuKNmMhqLvs0GYixkP4AAAAMs"]
[Fri May 15 08:51:57.470183 2026] [:error] [pid 51234:tid 51245] [client 85.203.21.153:38747] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wp-file-manager-pro/"] [unique_id "agZuLd72N9CbeiqcqgPAGAAAAUk"]
[Fri May 15 08:51:57.678647 2026] [:error] [pid 51234:tid 51243] [client 85.203.21.153:22507] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/db-status.php"] [unique_id "agZuLd72N9CbeiqcqgPAGQAAAUc"]
[Fri May 15 08:52:02.890759 2026] [:error] [pid 51234:tid 51251] [client 85.203.21.138:64519] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/elementor/css/"] [unique_id "agZuMt72N9CbeiqcqgPAHwAAAU8"]
[Fri May 15 08:52:08.176699 2026] [:error] [pid 1188:tid 1210] [client 85.203.21.139:30525] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/well-known/"] [unique_id "agZuONY68iW8yuNkNzPqRwAAAA0"]
[Fri May 15 08:52:08.391096 2026] [:error] [pid 1295:tid 1302] [client 85.203.21.114:51051] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/well-known/pki-validation/"] [unique_id "agZuONmMhqLvs0GYixkP6QAAAMQ"]
[Fri May 15 08:52:08.592193 2026] [:error] [pid 1295:tid 1298] [client 85.203.21.75:42643] [client 85.203.21.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/system.php"] [unique_id "agZuONmMhqLvs0GYixkP6gAAAMA"]
[Fri May 15 08:52:13.793073 2026] [:error] [pid 1190:tid 1274] [client 85.203.21.73:25935] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/home.php"] [unique_id "agZuPdqiXrD7hne4gFbBtgAAAJY"]
[Fri May 15 08:52:14.063318 2026] [:error] [pid 1188:tid 1205] [client 85.203.21.97:22825] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "agZuPtY68iW8yuNkNzPqSQAAAAg"]
[Fri May 15 08:52:14.349373 2026] [:error] [pid 1188:tid 1216] [client 85.203.21.97:36889] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/uploads/login.php"] [unique_id "agZuPtY68iW8yuNkNzPqSgAAABM"]
[Fri May 15 08:52:14.597788 2026] [:error] [pid 50531:tid 50547] [client 85.203.21.71:26185] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/media/system_core.php"] [unique_id "agZuPh3WbFwE6voqGzrbXwAAAQ4"]
[Fri May 15 08:52:14.796431 2026] [:error] [pid 1295:tid 1309] [client 85.203.21.96:40843] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/system_core.php"] [unique_id "agZuPtmMhqLvs0GYixkP7QAAAMs"]
[Fri May 15 08:52:15.051013 2026] [:error] [pid 50531:tid 50535] [client 85.203.21.105:45881] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/system_core.php"] [unique_id "agZuPx3WbFwE6voqGzrbYAAAAQI"]
[Fri May 15 08:52:25.259151 2026] [:error] [pid 1295:tid 1301] [client 85.203.21.114:39819] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-json/system_core.php"] [unique_id "agZuSdmMhqLvs0GYixkP-gAAAMM"]
[Fri May 15 08:52:25.469504 2026] [:error] [pid 1295:tid 1305] [client 85.203.21.71:47177] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/system_core.php"] [unique_id "agZuSdmMhqLvs0GYixkP-wAAAMc"]
[Fri May 15 08:52:25.669834 2026] [:error] [pid 1295:tid 1309] [client 85.203.21.150:52755] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/system_core.php"] [unique_id "agZuSdmMhqLvs0GYixkP_QAAAMs"]
[Fri May 15 08:52:30.872064 2026] [:error] [pid 1190:tid 1269] [client 85.203.21.101:36229] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-config.php"] [unique_id "agZuTtqiXrD7hne4gFbBwQAAAJE"]
[Fri May 15 08:52:36.163579 2026] [:error] [pid 50531:tid 50547] [client 85.203.21.153:32507] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/elementor/assets/css/conditionals/system_core.php"] [unique_id "agZuVB3WbFwE6voqGzrbhAAAAQ4"]
[Fri May 15 08:52:36.669582 2026] [:error] [pid 1188:tid 1214] [client 85.203.21.131:28035] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/system_core.php"] [unique_id "agZuVNY68iW8yuNkNzPqVgAAABE"]
[Fri May 15 08:52:41.896251 2026] [:error] [pid 1295:tid 1302] [client 85.203.21.119:26593] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-content/plugins/wp-config-backup.php"] [unique_id "agZuWdmMhqLvs0GYixkQLQAAAMQ"]
[Fri May 15 08:52:47.264790 2026] [:error] [pid 1295:tid 1312] [client 85.203.21.119:53215] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/cielhpn/"] [unique_id "agZuX9mMhqLvs0GYixkQMgAAAM4"]
[Fri May 15 08:52:47.666305 2026] [:error] [pid 1189:tid 1232] [client 85.203.21.123:27753] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/elementor-pro/modules/loop-filter/data/endpoints/about.php"] [unique_id "agZuXwe36qIGegR4kcly9QAAAEc"]
[Fri May 15 08:52:47.997152 2026] [:error] [pid 1189:tid 1231] [client 85.203.21.99:56963] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/forminator/library/field-autofill-providers/contracts/wp-login.php"] [unique_id "agZuXwe36qIGegR4kcly9wAAAEY"]
[Fri May 15 08:52:48.195846 2026] [:error] [pid 1295:tid 1304] [client 85.203.21.119:60857] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/advanced-custom-fields-pro/includes/Updater/about.php"] [unique_id "agZuYNmMhqLvs0GYixkQNQAAAMY"]
[Fri May 15 08:52:48.408771 2026] [:error] [pid 51234:tid 51240] [client 85.203.21.133:59155] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/class-wp-logo.php"] [unique_id "agZuYN72N9CbeiqcqgPAVQAAAUQ"]
[Fri May 15 08:52:48.744392 2026] [:error] [pid 1189:tid 1233] [client 85.203.21.105:27199] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/js_composer/include/classes/vendors/plugins/test.php"] [unique_id "agZuYAe36qIGegR4kcly-AAAAEg"]
[Fri May 15 08:52:49.090042 2026] [:error] [pid 51234:tid 51246] [client 85.203.21.105:30023] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/revslider/admin/assets/js/plugins/maintenance.php"] [unique_id "agZuYd72N9CbeiqcqgPAVwAAAUo"]
[Fri May 15 08:52:49.293767 2026] [:error] [pid 51234:tid 51253] [client 85.203.21.74:46155] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/wp-mail.php"] [unique_id "agZuYd72N9CbeiqcqgPAWAAAAVE"]
[Fri May 15 08:52:49.650800 2026] [:error] [pid 1190:tid 1263] [client 85.203.21.111:61527] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/sitepress-multilingual-cms/classes/plugins/wp-blog-header.php"] [unique_id "agZuYdqiXrD7hne4gFbB6QAAAIs"]
[Fri May 15 08:52:54.962627 2026] [:error] [pid 51234:tid 51246] [client 85.203.21.98:25687] [client 85.203.21.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/wp-file-manager/lib/themes/options.php"] [unique_id "agZuZt72N9CbeiqcqgPAYwAAAUo"]
[Fri May 15 08:53:00.764554 2026] [:error] [pid 51234:tid 51237] [client 85.203.21.147:61331] [client 85.203.21.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/elementor/assets/lib/pickr/themes/wp-blog-header.php"] [unique_id "agZubN72N9CbeiqcqgPAiAAAAUE"]
[Fri May 15 08:53:01.289503 2026] [:error] [pid 50531:tid 50557] [client 85.203.21.150:39993] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/contact-form-7/uoyaugar.php"] [unique_id "agZubR3WbFwE6voqGzrbmQAAARg"]
[Fri May 15 08:53:01.566511 2026] [:error] [pid 51234:tid 51247] [client 85.203.21.147:31333] [client 85.203.21.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/check-email/config.php"] [unique_id "agZubd72N9CbeiqcqgPAjwAAAUs"]
[Fri May 15 08:53:06.768595 2026] [:error] [pid 1295:tid 1320] [client 85.203.21.101:20081] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "agZuctmMhqLvs0GYixkQTgAAANY"]
[Fri May 15 08:53:06.973297 2026] [:error] [pid 50531:tid 50542] [client 85.203.21.152:61095] [client 85.203.21.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/elementor/lndex.php"] [unique_id "agZuch3WbFwE6voqGzrbngAAAQk"]
[Fri May 15 08:53:32.204043 2026] [:error] [pid 50531:tid 50536] [client 85.203.21.153:49151] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/the-events-calendar/build/css/integrations/plugins/options.php"] [unique_id "agZujB3WbFwE6voqGzrbqwAAAQM"]
[Fri May 15 08:53:32.478899 2026] [:error] [pid 1295:tid 1313] [client 85.203.21.71:57685] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/updraftplus/includes/jstree/themes/config.php"] [unique_id "agZujNmMhqLvs0GYixkQawAAAM8"]
[Fri May 15 08:53:32.877780 2026] [:error] [pid 1295:tid 1317] [client 85.203.21.75:23769] [client 85.203.21.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/ssss/src.php"] [unique_id "agZujNmMhqLvs0GYixkQbAAAANM"]
[Fri May 15 08:53:33.092447 2026] [:error] [pid 1189:tid 1238] [client 85.203.21.103:48371] [client 85.203.21.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/maintenance.php"] [unique_id "agZujQe36qIGegR4kclzKAAAAE0"]
[Fri May 15 08:53:43.395865 2026] [:error] [pid 1295:tid 1305] [client 85.203.21.98:31513] [client 85.203.21.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-bes.php"] [unique_id "agZul9mMhqLvs0GYixkQcQAAAMc"]
[Fri May 15 08:53:48.598461 2026] [:error] [pid 1189:tid 1240] [client 85.203.21.96:63317] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-load.php"] [unique_id "agZunAe36qIGegR4kclzOQAAAE8"]
[Fri May 15 08:53:48.843837 2026] [:error] [pid 51234:tid 51258] [client 85.203.21.119:58325] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/site-logo/about.php"] [unique_id "agZunN72N9CbeiqcqgPA4AAAAVY"]
[Fri May 15 08:53:49.093343 2026] [:error] [pid 50531:tid 50534] [client 85.203.21.139:21115] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/newfold-page-cachesocial/about.php"] [unique_id "agZunR3WbFwE6voqGzrbsQAAAQE"]
[Fri May 15 08:53:54.374201 2026] [:error] [pid 1189:tid 1234] [client 85.203.21.111:40531] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/comment-author-name/editers.php"] [unique_id "agZuoge36qIGegR4kclzRAAAAEk"]
[Fri May 15 08:53:54.583641 2026] [:error] [pid 1295:tid 1307] [client 85.203.21.137:42323] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/plugin-editor-trigger.php"] [unique_id "agZuotmMhqLvs0GYixkQdAAAAMk"]
[Fri May 15 08:53:54.794683 2026] [:error] [pid 51234:tid 51250] [client 85.203.21.105:23313] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/query-pagination-numbers/wp-cron.php"] [unique_id "agZuot72N9CbeiqcqgPA8wAAAU4"]
[Fri May 15 08:53:55.193003 2026] [:error] [pid 51234:tid 51248] [client 85.203.21.143:24993] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "agZuo972N9CbeiqcqgPA9gAAAUw"]
[Fri May 15 08:53:55.494858 2026] [:error] [pid 1188:tid 1203] [client 85.203.21.150:47793] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/upgrade-temp-backup/media/files/files/cache/ulnc/wbdo/"] [unique_id "agZuo9Y68iW8yuNkNzPqdwAAAAY"]
[Fri May 15 08:53:55.766569 2026] [:error] [pid 1189:tid 1230] [client 85.203.21.150:23167] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-bindings/backup/js/build/kys/admin.php"] [unique_id "agZuowe36qIGegR4kclzSAAAAEU"]
[Fri May 15 08:53:55.995900 2026] [:error] [pid 1190:tid 1274] [client 85.203.21.87:33887] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/src/v1/dist/build/uols/"] [unique_id "agZuo9qiXrD7hne4gFbCAAAAAJY"]
[Fri May 15 08:53:56.201055 2026] [:error] [pid 51234:tid 51246] [client 85.203.21.138:50841] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/user/css/cache/piwk/admin.php"] [unique_id "agZupN72N9CbeiqcqgPA_gAAAUo"]
[Fri May 15 08:54:06.473805 2026] [:error] [pid 1190:tid 1268] [client 85.203.21.105:42147] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins_new/sitepress-multilingual-cms/classes/plugins/about.php"] [unique_id "agZurtqiXrD7hne4gFbCDQAAAJA"]
[Fri May 15 08:54:07.078637 2026] [:error] [pid 1295:tid 1314] [client 85.203.21.105:46319] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins_new/wordpress-seo/admin/import/plugins/wp-blog-header.php"] [unique_id "agZur9mMhqLvs0GYixkQiQAAANA"]
[Fri May 15 08:54:12.299011 2026] [:error] [pid 1188:tid 1218] [client 85.203.21.131:60047] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/IXR/met/uploads/"] [unique_id "agZutNY68iW8yuNkNzPqfAAAABU"]
[Fri May 15 08:54:12.584714 2026] [:error] [pid 1190:tid 1252] [client 85.203.21.79:30061] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/wdf.php"] [unique_id "agZutNqiXrD7hne4gFbCDwAAAIA"]
[Fri May 15 08:54:17.852415 2026] [:error] [pid 1189:tid 1233] [client 85.203.21.79:22101] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/query/"] [unique_id "agZuuQe36qIGegR4kclzVgAAAEg"]
[Fri May 15 08:54:18.185185 2026] [:error] [pid 1295:tid 1320] [client 85.203.21.137:41523] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/spacer/"] [unique_id "agZuutmMhqLvs0GYixkQlQAAANY"]
[Fri May 15 08:54:18.384477 2026] [:error] [pid 1295:tid 1319] [client 85.203.21.97:32377] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/l10n/"] [unique_id "agZuutmMhqLvs0GYixkQlgAAANU"]
[Fri May 15 08:54:28.588994 2026] [:error] [pid 1295:tid 1320] [client 85.203.21.105:35717] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/upgrade/build/css/cache/img/src/backup/utt/admin.php"] [unique_id "agZuxNmMhqLvs0GYixkQoQAAANY"]
[Fri May 15 08:54:28.797002 2026] [:error] [pid 51234:tid 51245] [client 85.203.21.120:34663] [client 85.203.21.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/social-links/admin.php"] [unique_id "agZuxN72N9CbeiqcqgPBJAAAAUk"]
[Fri May 15 08:54:34.278859 2026] [:error] [pid 1189:tid 1232] [client 85.203.21.81:54053] [client 85.203.21.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "agZuyge36qIGegR4kclzXQAAAEc"]
[Fri May 15 08:54:34.577763 2026] [:error] [pid 50531:tid 50555] [client 85.203.21.139:25047] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/astra/assets/css/minified/system_core.php"] [unique_id "agZuyh3WbFwE6voqGzrb2AAAARY"]
[Fri May 15 08:54:34.884634 2026] [:error] [pid 1189:tid 1236] [client 85.203.21.138:22549] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/system_core.php"] [unique_id "agZuyge36qIGegR4kclzYgAAAEs"]
[Fri May 15 08:54:35.083195 2026] [:error] [pid 51234:tid 51254] [client 85.203.21.139:58343] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-content/themes/wp-config-backup.php"] [unique_id "agZuy972N9CbeiqcqgPBPAAAAVI"]
[Fri May 15 08:54:35.367753 2026] [:error] [pid 51234:tid 51245] [client 85.203.21.119:59207] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/theme/about.php"] [unique_id "agZuy972N9CbeiqcqgPBPgAAAUk"]
[Fri May 15 08:54:35.757423 2026] [:error] [pid 51234:tid 51257] [client 85.203.21.71:57737] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/sinatra/inc/customizer/controls/color/about.php"] [unique_id "agZuy972N9CbeiqcqgPBQQAAAVU"]
[Fri May 15 08:54:36.060492 2026] [:error] [pid 1188:tid 1200] [client 85.203.21.74:27151] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/blocksy/inc/panel-builder/footer/widget-area-3/"] [unique_id "agZuzNY68iW8yuNkNzPqgQAAAAM"]
[Fri May 15 08:54:41.860525 2026] [:error] [pid 51234:tid 51254] [client 85.203.21.74:64527] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/hestia/inc/views/blog/"] [unique_id "agZu0d72N9CbeiqcqgPBSgAAAVI"]
[Fri May 15 08:54:42.171913 2026] [:error] [pid 51234:tid 51245] [client 85.203.21.87:57083] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/fortified-child/docs/js/omelv/"] [unique_id "agZu0t72N9CbeiqcqgPBSwAAAUk"]
[Fri May 15 08:54:42.382412 2026] [:error] [pid 50531:tid 50552] [client 85.203.21.133:24599] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/maintenance.php"] [unique_id "agZu0h3WbFwE6voqGzrb4gAAARM"]
[Fri May 15 08:54:42.580188 2026] [:error] [pid 1295:tid 1300] [client 85.203.21.74:55569] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentyone/content-index.php"] [unique_id "agZu0tmMhqLvs0GYixkQsQAAAMI"]
[Fri May 15 08:54:42.810974 2026] [:error] [pid 1295:tid 1302] [client 85.203.21.79:46099] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/proton/content-index.php"] [unique_id "agZu0tmMhqLvs0GYixkQsgAAAMQ"]
[Fri May 15 08:54:43.147809 2026] [:error] [pid 1188:tid 1214] [client 85.203.21.97:55973] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentythree/patterns/"] [unique_id "agZu09Y68iW8yuNkNzPqhgAAABE"]
[Fri May 15 08:54:43.595535 2026] [:error] [pid 1295:tid 1301] [client 85.203.21.147:39309] [client 85.203.21.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentytwentytwo/assets/fonts/inter/"] [unique_id "agZu09mMhqLvs0GYixkQswAAAMM"]
[Fri May 15 08:54:48.982739 2026] [:error] [pid 50531:tid 50538] [client 85.203.21.96:58079] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/security.php"] [unique_id "agZu2B3WbFwE6voqGzrb4wAAAQU"]
[Fri May 15 08:54:49.192535 2026] [:error] [pid 50531:tid 50542] [client 85.203.21.131:42101] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/promobox/"] [unique_id "agZu2R3WbFwE6voqGzrb5AAAAQk"]
[Fri May 15 08:54:49.483506 2026] [:error] [pid 1295:tid 1298] [client 85.203.21.152:29515] [client 85.203.21.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/wp-signup.php"] [unique_id "agZu2dmMhqLvs0GYixkQuwAAAMA"]
[Fri May 15 08:54:54.694288 2026] [:error] [pid 50531:tid 50541] [client 85.203.21.73:40823] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/master-blog/content-none-new-compiler.php"] [unique_id "agZu3h3WbFwE6voqGzrb6QAAAQg"]
[Fri May 15 08:54:55.076840 2026] [:error] [pid 50531:tid 50536] [client 85.203.21.137:26443] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/villagio-child/admin.php"] [unique_id "agZu3x3WbFwE6voqGzrb6gAAAQM"]
[Fri May 15 08:54:55.872224 2026] [:error] [pid 1190:tid 1265] [client 85.203.21.114:37585] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/twentynineteen/sass/site/primary/"] [unique_id "agZu39qiXrD7hne4gFbCIwAAAI0"]
[Fri May 15 08:54:56.292092 2026] [:error] [pid 1295:tid 1302] [client 85.203.21.81:64401] [client 85.203.21.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-content/themes/admin.php"] [unique_id "agZu4NmMhqLvs0GYixkQwgAAAMQ"]
[Fri May 15 08:54:56.495892 2026] [:error] [pid 50531:tid 50540] [client 85.203.21.120:28793] [client 85.203.21.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/consultstreet/config.php"] [unique_id "agZu4B3WbFwE6voqGzrb7AAAAQc"]
[Fri May 15 08:54:56.698282 2026] [:error] [pid 1190:tid 1268] [client 85.203.21.99:36751] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/blogger-buzz/welcome/js/"] [unique_id "agZu4NqiXrD7hne4gFbCJAAAAJA"]
[Fri May 15 08:55:01.899371 2026] [:error] [pid 1189:tid 1228] [client 85.203.21.98:65027] [client 85.203.21.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "agZu5Qe36qIGegR4kclziwAAAEM"]
[Fri May 15 08:55:02.104365 2026] [:error] [pid 51234:tid 51241] [client 85.203.21.79:23223] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/hello-elementor/template-parts/"] [unique_id "agZu5t72N9CbeiqcqgPBaAAAAUU"]
[Fri May 15 08:55:02.303169 2026] [:error] [pid 50531:tid 50551] [client 85.203.21.139:24335] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/Divi/includes/builder/post/taxonomy/"] [unique_id "agZu5h3WbFwE6voqGzrb7QAAARI"]
[Fri May 15 08:55:02.566351 2026] [:error] [pid 1190:tid 1259] [client 85.203.21.71:25841] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/system.php"] [unique_id "agZu5tqiXrD7hne4gFbCKAAAAIc"]
[Fri May 15 08:55:07.800614 2026] [:error] [pid 50531:tid 50542] [client 85.203.21.114:35099] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/test.php"] [unique_id "agZu6x3WbFwE6voqGzrb8QAAAQk"]
[Fri May 15 08:55:07.998014 2026] [:error] [pid 50531:tid 50547] [client 85.203.21.143:32525] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/blog-kit/inc/demo/demo-content/"] [unique_id "agZu6x3WbFwE6voqGzrb8wAAAQ4"]
[Fri May 15 08:55:08.194162 2026] [:error] [pid 51234:tid 51236] [client 85.203.21.85:26343] [client 85.203.21.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/themes/flatsome/inc/"] [unique_id "agZu7N72N9CbeiqcqgPBbwAAAUA"]
[Fri May 15 08:55:08.400892 2026] [:error] [pid 1295:tid 1313] [client 85.203.21.112:33567] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/rest-api/config.php"] [unique_id "agZu7NmMhqLvs0GYixkQyQAAAM8"]
[Fri May 15 08:55:13.699623 2026] [:error] [pid 1190:tid 1273] [client 85.203.21.71:63143] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/providers/config.php"] [unique_id "agZu8dqiXrD7hne4gFbCKgAAAJU"]
[Fri May 15 08:55:14.358467 2026] [:error] [pid 50531:tid 50540] [client 85.203.21.123:62817] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/config.php"] [unique_id "agZu8h3WbFwE6voqGzrb-AAAAQc"]
[Fri May 15 08:55:14.853477 2026] [:error] [pid 50531:tid 50534] [client 85.203.21.105:32885] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/bootstrap.php"] [unique_id "agZu8h3WbFwE6voqGzrb-gAAAQE"]
[Fri May 15 08:55:20.079476 2026] [:error] [pid 1189:tid 1247] [client 85.203.21.73:44595] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/"] [unique_id "agZu-Ae36qIGegR4kclzlgAAAFY"]
[Fri May 15 08:55:20.393678 2026] [:error] [pid 1189:tid 1230] [client 85.203.21.133:32307] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/class-wp-image.php"] [unique_id "agZu-Ae36qIGegR4kclzlwAAAEU"]
[Fri May 15 08:55:20.597641 2026] [:error] [pid 1295:tid 1314] [client 85.203.21.101:49163] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "agZu-NmMhqLvs0GYixkQ1wAAANA"]
[Fri May 15 08:55:25.984003 2026] [:error] [pid 1189:tid 1233] [client 85.203.21.105:22947] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/cgi-bin/config.php"] [unique_id "agZu_Qe36qIGegR4kclznQAAAEg"]
[Fri May 15 08:55:26.198398 2026] [:error] [pid 51234:tid 51242] [client 85.203.21.71:23933] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/config.php"] [unique_id "agZu_t72N9CbeiqcqgPBjQAAAUY"]
[Fri May 15 08:55:26.448779 2026] [:error] [pid 1190:tid 1255] [client 85.203.21.137:57341] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/src/config.php"] [unique_id "agZu_tqiXrD7hne4gFbCLgAAAIM"]
[Fri May 15 08:55:26.655816 2026] [:error] [pid 1189:tid 1237] [client 85.203.21.139:45593] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/config.php"] [unique_id "agZu_ge36qIGegR4kclzngAAAEw"]
[Fri May 15 08:55:31.866781 2026] [:error] [pid 50531:tid 50540] [client 85.203.21.119:39351] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/assets/config.php"] [unique_id "agZvAx3WbFwE6voqGzrcAQAAAQc"]
[Fri May 15 08:55:37.076193 2026] [:error] [pid 50531:tid 50556] [client 85.203.21.133:21361] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/widgets/config.php"] [unique_id "agZvCR3WbFwE6voqGzrcAwAAARc"]
[Fri May 15 08:55:37.277342 2026] [:error] [pid 50531:tid 50552] [client 85.203.21.71:40265] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/config.php"] [unique_id "agZvCR3WbFwE6voqGzrcBAAAARM"]
[Fri May 15 08:55:37.486882 2026] [:error] [pid 50531:tid 50555] [client 85.203.21.97:55483] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/plugins/config.php"] [unique_id "agZvCR3WbFwE6voqGzrcBQAAARY"]
[Fri May 15 08:55:42.683340 2026] [:error] [pid 1189:tid 1245] [client 85.203.21.101:54349] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/cache/config.php"] [unique_id "agZvDge36qIGegR4kclzpQAAAFQ"]
[Fri May 15 08:55:47.883117 2026] [:error] [pid 1295:tid 1315] [client 85.203.21.101:42209] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/SimplePie/library/"] [unique_id "agZvE9mMhqLvs0GYixkQ3wAAANE"]
[Fri May 15 08:55:48.256739 2026] [:error] [pid 1189:tid 1234] [client 85.203.21.101:54601] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/abilities-api/"] [unique_id "agZvFAe36qIGegR4kclzsgAAAEk"]
[Fri May 15 08:55:53.779290 2026] [:error] [pid 1189:tid 1248] [client 85.203.21.98:37893] [client 85.203.21.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/upgrade-temp-backup/"] [unique_id "agZvGQe36qIGegR4kclzuQAAAFc"]
[Fri May 15 08:55:54.011908 2026] [:error] [pid 1295:tid 1306] [client 85.203.21.107:49981] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/includes/class-theme-installer-skin-client.php"] [unique_id "agZvGtmMhqLvs0GYixkQ6AAAAMg"]
[Fri May 15 08:55:54.212829 2026] [:error] [pid 1188:tid 1212] [client 85.203.21.79:21971] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-recovery-mode-link-service-edit.php"] [unique_id "agZvGtY68iW8yuNkNzPqnwAAAA8"]
[Fri May 15 08:56:04.462304 2026] [:error] [pid 1190:tid 1271] [client 85.203.21.120:41793] [client 85.203.21.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/vendor/stripe/stripe-php/lib/Service/FinancialConnections/"] [unique_id "agZvJNqiXrD7hne4gFbCNwAAAJM"]
[Fri May 15 08:56:04.717266 2026] [:error] [pid 50531:tid 50535] [client 85.203.21.143:26435] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/post-excerpt-meta.php"] [unique_id "agZvJB3WbFwE6voqGzrcDQAAAQI"]
[Fri May 15 08:56:09.958039 2026] [:error] [pid 51234:tid 51251] [client 85.203.21.85:55747] [client 85.203.21.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/admin.php"] [unique_id "agZvKd72N9CbeiqcqgPBvQAAAU8"]
[Fri May 15 08:56:10.363726 2026] [:error] [pid 1189:tid 1237] [client 85.203.21.75:39355] [client 85.203.21.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/admin.php"] [unique_id "agZvKge36qIGegR4kclzxwAAAEw"]
[Fri May 15 08:56:10.566137 2026] [:error] [pid 1189:tid 1246] [client 85.203.21.152:53963] [client 85.203.21.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "agZvKge36qIGegR4kclzyQAAAFU"]
[Fri May 15 08:56:10.963088 2026] [:error] [pid 50531:tid 50536] [client 85.203.21.99:47879] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/thickbox/logs1.php"] [unique_id "agZvKh3WbFwE6voqGzrcEQAAAQM"]
[Fri May 15 08:56:11.186274 2026] [:error] [pid 50531:tid 50538] [client 85.203.21.111:30483] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/admin.php"] [unique_id "agZvKx3WbFwE6voqGzrcEgAAAQU"]
[Fri May 15 08:56:11.383673 2026] [:error] [pid 1189:tid 1243] [client 85.203.21.152:35249] [client 85.203.21.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/xy.php"] [unique_id "agZvKwe36qIGegR4kclzywAAAFI"]
[Fri May 15 08:56:11.593985 2026] [:error] [pid 1189:tid 1230] [client 85.203.21.71:25095] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/xy.php"] [unique_id "agZvKwe36qIGegR4kclzzAAAAEU"]
[Fri May 15 08:56:21.859511 2026] [:error] [pid 51234:tid 51240] [client 85.203.21.143:27223] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/editor/"] [unique_id "agZvNd72N9CbeiqcqgPB0gAAAUQ"]
[Fri May 15 08:56:22.084438 2026] [:error] [pid 50531:tid 50542] [client 85.203.21.99:61543] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/profile/admin.php"] [unique_id "agZvNh3WbFwE6voqGzrcFQAAAQk"]
[Fri May 15 08:56:22.403155 2026] [:error] [pid 51234:tid 51237] [client 85.203.21.79:54721] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/summia/"] [unique_id "agZvNt72N9CbeiqcqgPB1gAAAUE"]
[Fri May 15 08:56:22.854295 2026] [:error] [pid 1188:tid 1203] [client 85.203.21.88:29083] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-content/languages/config.php"] [unique_id "agZvNtY68iW8yuNkNzPqowAAAAY"]
[Fri May 15 08:56:23.062305 2026] [:error] [pid 50531:tid 50554] [client 85.203.21.73:32139] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/wp-content/admin.php"] [unique_id "agZvNx3WbFwE6voqGzrcGAAAARU"]
[Fri May 15 08:56:28.275031 2026] [:error] [pid 50531:tid 50545] [client 85.203.21.77:61073] [client 85.203.21.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/h2.php"] [unique_id "agZvPB3WbFwE6voqGzrcJgAAAQw"]
[Fri May 15 08:56:28.481634 2026] [:error] [pid 50531:tid 50541] [client 85.203.21.81:24531] [client 85.203.21.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/mu-plugins/chosen.php"] [unique_id "agZvPB3WbFwE6voqGzrcJwAAAQg"]
[Fri May 15 08:56:28.776022 2026] [:error] [pid 1295:tid 1318] [client 85.203.21.72:60953] [client 85.203.21.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/upgrade-temp-backup/autoload_classmap.php"] [unique_id "agZvPNmMhqLvs0GYixkRBgAAANQ"]
[Fri May 15 08:56:29.069917 2026] [:error] [pid 1188:tid 1215] [client 85.203.21.103:63779] [client 85.203.21.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/images/Base.php"] [unique_id "agZvPdY68iW8yuNkNzPqqAAAABI"]
[Fri May 15 08:56:29.360037 2026] [:error] [pid 51234:tid 51246] [client 85.203.21.153:63509] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins.bk/contact-form-7/includes/js/jquery-ui/themes/admin.php"] [unique_id "agZvPd72N9CbeiqcqgPB2QAAAUo"]
[Fri May 15 08:56:29.695887 2026] [:error] [pid 51234:tid 51236] [client 85.203.21.79:25247] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins.bk/js_composer/include/classes/vendors/plugins/system.php"] [unique_id "agZvPd72N9CbeiqcqgPB2wAAAUA"]
[Fri May 15 08:56:35.093213 2026] [:error] [pid 1189:tid 1238] [client 85.203.21.147:44777] [client 85.203.21.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/plugins/wp-mail.php"] [unique_id "agZvQwe36qIGegR4kclz8QAAAE0"]
[Fri May 15 08:56:40.344538 2026] [:error] [pid 1295:tid 1312] [client 85.203.21.153:32257] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/wp-config.php"] [unique_id "agZvSNmMhqLvs0GYixkREwAAAM4"]
[Fri May 15 08:56:45.648649 2026] [:error] [pid 1295:tid 1317] [client 85.203.21.153:36515] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/com.php"] [unique_id "agZvTdmMhqLvs0GYixkRHQAAANM"]
[Fri May 15 08:56:46.372059 2026] [:error] [pid 51234:tid 51237] [client 85.203.21.111:47483] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/xxx.php"] [unique_id "agZvTt72N9CbeiqcqgPB6gAAAUE"]
[Fri May 15 08:56:46.781530 2026] [:error] [pid 51234:tid 51242] [client 85.203.21.115:53193] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/network/uploads/system.php"] [unique_id "agZvTt72N9CbeiqcqgPB7AAAAUY"]
[Fri May 15 08:56:46.988273 2026] [:error] [pid 50531:tid 50549] [client 85.203.21.119:32991] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/plugins/colors/"] [unique_id "agZvTh3WbFwE6voqGzrcNAAAARA"]
[Fri May 15 08:56:47.194596 2026] [:error] [pid 1188:tid 1201] [client 85.203.21.143:53511] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/backups-dup-pro/imports/network/"] [unique_id "agZvT9Y68iW8yuNkNzPqrQAAAAQ"]
[Fri May 15 08:56:47.393005 2026] [:error] [pid 1295:tid 1321] [client 85.203.21.138:62077] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/ai1wm-backups/includes/"] [unique_id "agZvT9mMhqLvs0GYixkRHwAAANc"]
[Fri May 15 08:56:47.696369 2026] [:error] [pid 50531:tid 50550] [client 85.203.21.131:53335] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/gettest.php"] [unique_id "agZvTx3WbFwE6voqGzrcNQAAARE"]
[Fri May 15 08:56:47.982507 2026] [:error] [pid 1295:tid 1300] [client 85.203.21.97:58483] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/dx.php"] [unique_id "agZvT9mMhqLvs0GYixkRIAAAAMI"]
[Fri May 15 08:56:53.297936 2026] [:error] [pid 1189:tid 1228] [client 85.203.21.139:25095] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/wp-themes.php"] [unique_id "agZvVQe36qIGegR4kcl0AQAAAEM"]
[Fri May 15 08:56:53.497471 2026] [:error] [pid 1189:tid 1243] [client 85.203.21.133:50305] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/js/widgets/maint/"] [unique_id "agZvVQe36qIGegR4kcl0AwAAAFI"]
[Fri May 15 08:56:53.767354 2026] [:error] [pid 1295:tid 1309] [client 85.203.21.133:39105] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Exception/Transport/"] [unique_id "agZvVdmMhqLvs0GYixkRKAAAAMs"]
[Fri May 15 08:56:53.987660 2026] [:error] [pid 1295:tid 1312] [client 85.203.21.133:45601] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Requests/src/Response/"] [unique_id "agZvVdmMhqLvs0GYixkRKQAAAM4"]
[Fri May 15 08:57:04.287824 2026] [:error] [pid 1189:tid 1241] [client 85.203.21.75:45397] [client 85.203.21.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/media-text/"] [unique_id "agZvYAe36qIGegR4kcl0CwAAAFA"]
[Fri May 15 08:57:04.488649 2026] [:error] [pid 1189:tid 1234] [client 85.203.21.150:30189] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/missing/"] [unique_id "agZvYAe36qIGegR4kcl0DAAAAEk"]
[Fri May 15 08:57:09.863706 2026] [:error] [pid 1189:tid 1226] [client 85.203.21.99:41111] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/img/content/media/lnl/"] [unique_id "agZvZQe36qIGegR4kcl0FAAAAEE"]
[Fri May 15 08:57:10.069363 2026] [:error] [pid 50531:tid 50538] [client 85.203.21.139:52029] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/gallery/"] [unique_id "agZvZh3WbFwE6voqGzrcQAAAAQU"]
[Fri May 15 08:57:20.294623 2026] [:error] [pid 1295:tid 1301] [client 85.203.21.99:56579] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/vx.php"] [unique_id "agZvcNmMhqLvs0GYixkRWQAAAMM"]
[Fri May 15 08:57:20.786145 2026] [:error] [pid 1188:tid 1205] [client 85.203.21.115:33005] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/database/"] [unique_id "agZvcNY68iW8yuNkNzPqsgAAAAg"]
[Fri May 15 08:57:26.171099 2026] [:error] [pid 50531:tid 50548] [client 85.203.21.123:28313] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/block/img/themes/"] [unique_id "agZvdh3WbFwE6voqGzrcUAAAAQ8"]
[Fri May 15 08:57:26.368918 2026] [:error] [pid 50531:tid 50546] [client 85.203.21.131:20865] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/blocks/preformatted/"] [unique_id "agZvdh3WbFwE6voqGzrcUQAAAQ0"]
[Fri May 15 08:57:26.613582 2026] [:error] [pid 1295:tid 1305] [client 85.203.21.133:56709] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/languages/themes/wp-load.php"] [unique_id "agZvdtmMhqLvs0GYixkRXwAAAMc"]
[Fri May 15 08:57:26.858130 2026] [:error] [pid 1190:tid 1253] [client 85.203.21.138:46267] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/plugins/home.php"] [unique_id "agZvdtqiXrD7hne4gFbCUgAAAIE"]
[Fri May 15 08:57:27.061278 2026] [:error] [pid 1295:tid 1315] [client 85.203.21.114:28257] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/themes/"] [unique_id "agZvd9mMhqLvs0GYixkRYAAAANE"]
[Fri May 15 08:57:27.360928 2026] [:error] [pid 1190:tid 1267] [client 85.203.21.143:62543] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/Text/system_core.php"] [unique_id "agZvd9qiXrD7hne4gFbCUwAAAI8"]
[Fri May 15 08:57:27.562016 2026] [:error] [pid 1295:tid 1309] [client 85.203.21.143:24357] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/maintenance.php"] [unique_id "agZvd9mMhqLvs0GYixkRYgAAAMs"]
[Fri May 15 08:57:27.765868 2026] [:error] [pid 50531:tid 50542] [client 85.203.21.81:46785] [client 85.203.21.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/edit-tags.php"] [unique_id "agZvdx3WbFwE6voqGzrcUgAAAQk"]
[Fri May 15 08:57:27.991929 2026] [:error] [pid 1295:tid 1311] [client 85.203.21.120:53215] [client 85.203.21.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/w.php"] [unique_id "agZvd9mMhqLvs0GYixkRZQAAAM0"]
[Fri May 15 08:57:28.476811 2026] [:error] [pid 50531:tid 50533] [client 85.203.21.87:56219] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/class-wp-http-client.php"] [unique_id "agZveB3WbFwE6voqGzrcUwAAAQA"]
[Fri May 15 08:57:28.869824 2026] [:error] [pid 1190:tid 1270] [client 85.203.21.133:28855] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/class-wp-http-client.php"] [unique_id "agZveNqiXrD7hne4gFbCVwAAAJI"]
[Fri May 15 08:57:34.094519 2026] [:error] [pid 1189:tid 1245] [client 85.203.21.147:45767] [client 85.203.21.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/nic.php"] [unique_id "agZvfge36qIGegR4kcl0OQAAAFQ"]
[Fri May 15 08:57:34.297908 2026] [:error] [pid 1295:tid 1315] [client 85.203.21.88:20805] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/fonts/wp-conflg.php"] [unique_id "agZvftmMhqLvs0GYixkRbAAAANE"]
[Fri May 15 08:57:34.499729 2026] [:error] [pid 50531:tid 50550] [client 85.203.21.137:38779] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "agZvfh3WbFwE6voqGzrcWgAAARE"]
[Fri May 15 08:57:34.697707 2026] [:error] [pid 51234:tid 51255] [client 85.203.21.137:27335] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "agZvft72N9CbeiqcqgPCFgAAAVM"]
[Fri May 15 08:57:34.903109 2026] [:error] [pid 51234:tid 51248] [client 85.203.21.150:27899] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/theme-compat/autoload_classmap.php"] [unique_id "agZvft72N9CbeiqcqgPCGAAAAUw"]
[Fri May 15 08:57:35.168844 2026] [:error] [pid 50531:tid 50543] [client 85.203.21.81:28039] [client 85.203.21.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "agZvfx3WbFwE6voqGzrcWwAAAQo"]
[Fri May 15 08:57:35.368336 2026] [:error] [pid 1295:tid 1309] [client 85.203.21.97:41953] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/themes/api.php"] [unique_id "agZvf9mMhqLvs0GYixkRbQAAAMs"]
[Fri May 15 08:57:35.564638 2026] [:error] [pid 1189:tid 1236] [client 85.203.21.107:38679] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/js/tinymce/plugins/core.php"] [unique_id "agZvfwe36qIGegR4kcl0QQAAAEs"]
[Fri May 15 08:57:55.775319 2026] [:error] [pid 1295:tid 1322] [client 85.203.21.123:56285] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/sitemaps/providers/html-api/"] [unique_id "agZvk9mMhqLvs0GYixkRhgAAANg"]
[Fri May 15 09:42:12.122503 2026] [proxy_fcgi:error] [pid 1295:tid 1302] [client 74.7.241.48:58302] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 09:42:13.277130 2026] [proxy_fcgi:error] [pid 51234:tid 51239] [client 74.7.244.46:35086] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 11:21:37.502848 2026] [:error] [pid 51234:tid 51250] [client 195.88.211.243:40420] [client 195.88.211.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.88.211.243, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agaRQd72N9CbeiqcqgPxjwAAAU4"]
[Fri May 15 11:21:39.221093 2026] [proxy_fcgi:error] [pid 51234:tid 51250] [client 195.88.211.243:40420] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 11:21:41.617848 2026] [:error] [pid 51234:tid 51243] [client 195.88.211.243:40420] [client 195.88.211.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.88.211.243, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agaRRd72N9CbeiqcqgPxkgAAAUc"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 11:21:41.934908 2026] [proxy_fcgi:error] [pid 51234:tid 51243] [client 195.88.211.243:40420] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 12:20:08.647490 2026] [:error] [pid 1189:tid 1242] [client 162.240.101.155:52828] [client 162.240.101.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.101.155, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agae-Ae36qIGegR4kcmfogAAAFE"]
[Fri May 15 12:20:09.006198 2026] [proxy_fcgi:error] [pid 1189:tid 1242] [client 162.240.101.155:52828] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 12:20:11.464717 2026] [:error] [pid 1189:tid 1232] [client 162.240.101.155:52828] [client 162.240.101.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.101.155, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agae-we36qIGegR4kcmfpQAAAEc"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 12:20:11.770956 2026] [proxy_fcgi:error] [pid 1189:tid 1232] [client 162.240.101.155:52828] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 14:26:37.098460 2026] [proxy_fcgi:error] [pid 9305:tid 9359] [client 23.106.24.169:13295] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 16:24:25.429548 2026] [proxy_fcgi:error] [pid 30272:tid 30284] [client 192.175.111.228:48746] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 16:24:26.984359 2026] [proxy_fcgi:error] [pid 30240:tid 30255] [client 192.175.111.254:9920] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 16:24:30.042264 2026] [proxy_fcgi:error] [pid 30272:tid 30298] [client 192.175.111.240:55619] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 16:24:31.113154 2026] [proxy_fcgi:error] [pid 30240:tid 30262] [client 192.175.111.241:59953] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 16:24:35.888047 2026] [proxy_fcgi:error] [pid 9392:tid 9399] [client 192.175.111.254:1462] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 16:24:37.466988 2026] [proxy_fcgi:error] [pid 9304:tid 9330] [client 192.175.111.252:34380] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 16:24:40.420634 2026] [proxy_fcgi:error] [pid 30272:tid 30295] [client 192.175.111.241:31146] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 16:24:42.505727 2026] [proxy_fcgi:error] [pid 30272:tid 30281] [client 192.175.111.233:10932] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 16:29:10.359167 2026] [:error] [pid 9392:tid 9417] [client 190.92.170.162:36618] [client 190.92.170.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.170.162, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agbZVtBWJIjH1U9zGfa1WgAAARc"]
[Fri May 15 16:29:12.060133 2026] [proxy_fcgi:error] [pid 9392:tid 9417] [client 190.92.170.162:36618] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 16:29:12.447429 2026] [:error] [pid 9392:tid 9412] [client 190.92.170.162:36618] [client 190.92.170.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.170.162, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agbZWNBWJIjH1U9zGfa1YwAAARI"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 16:29:12.753068 2026] [proxy_fcgi:error] [pid 9392:tid 9412] [client 190.92.170.162:36618] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 17:19:11.941824 2026] [proxy_fcgi:error] [pid 9305:tid 9353] [client 185.12.151.99:39575] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 18:20:41.110828 2026] [proxy_fcgi:error] [pid 30240:tid 30243] [client 23.105.147.208:4219] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 21:44:37.823315 2026] [:error] [pid 9392:tid 9417] [client 68.183.22.192:54086] [client 68.183.22.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.22.192, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agcjRdBWJIjH1U9zGfbfGwAAARc"]
[Fri May 15 21:44:39.506571 2026] [proxy_fcgi:error] [pid 9392:tid 9417] [client 68.183.22.192:54086] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 21:44:39.815281 2026] [:error] [pid 9392:tid 9412] [client 68.183.22.192:54086] [client 68.183.22.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.22.192, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agcjR9BWJIjH1U9zGfbfHQAAARI"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 21:44:40.122678 2026] [proxy_fcgi:error] [pid 9392:tid 9412] [client 68.183.22.192:54086] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 21:51:10.254404 2026] [proxy_fcgi:error] [pid 30272:tid 30287] [client 138.246.253.24:45494] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 22:02:18.341762 2026] [:error] [pid 9392:tid 9417] [client 57.151.137.33:10436] [client 57.151.137.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 57.151.137.33, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/wp/xmlrpc.php"] [unique_id "agcnatBWJIjH1U9zGfbhnwAAARc"]
[Fri May 15 22:02:18.705574 2026] [proxy_fcgi:error] [pid 9392:tid 9417] [client 57.151.137.33:10436] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 22:11:01.471705 2026] [:error] [pid 9392:tid 9409] [client 91.134.141.127:47636] [client 91.134.141.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.134.141.127, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agcpddBWJIjH1U9zGfbjNAAAAQ8"]
[Fri May 15 22:11:02.023170 2026] [proxy_fcgi:error] [pid 9392:tid 9409] [client 91.134.141.127:47636] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 22:11:03.537716 2026] [:error] [pid 9392:tid 9397] [client 91.134.141.127:47636] [client 91.134.141.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.134.141.127, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agcpd9BWJIjH1U9zGfbjNgAAAQM"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 22:11:03.849395 2026] [proxy_fcgi:error] [pid 9392:tid 9397] [client 91.134.141.127:47636] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 22:17:40.768505 2026] [:error] [pid 9392:tid 9414] [client 129.121.39.64:49374] [client 129.121.39.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.121.39.64, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agcrBNBWJIjH1U9zGfbkaQAAARQ"]
[Fri May 15 22:17:41.324648 2026] [proxy_fcgi:error] [pid 9392:tid 9414] [client 129.121.39.64:49374] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 22:17:42.047677 2026] [:error] [pid 9392:tid 9394] [client 129.121.39.64:49374] [client 129.121.39.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.121.39.64, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agcrBtBWJIjH1U9zGfbkbwAAAQA"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 22:17:42.352169 2026] [proxy_fcgi:error] [pid 9392:tid 9394] [client 129.121.39.64:49374] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 22:30:52.150920 2026] [:error] [pid 30272:tid 30298] [client 51.79.229.9:59708] [client 51.79.229.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.79.229.9, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agcuHHvc_jSFaQ_7_wcFIAAAAZg"]
[Fri May 15 22:30:52.440983 2026] [proxy_fcgi:error] [pid 30272:tid 30298] [client 51.79.229.9:59708] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 22:30:52.969738 2026] [:error] [pid 30272:tid 30295] [client 51.79.229.9:59708] [client 51.79.229.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.79.229.9, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agcuHHvc_jSFaQ_7_wcFIgAAAZU"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 22:30:53.270316 2026] [proxy_fcgi:error] [pid 30272:tid 30295] [client 51.79.229.9:59708] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 22:45:13.331341 2026] [:error] [pid 9305:tid 9347] [client 112.213.86.189:60924] [client 112.213.86.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 112.213.86.189, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agcxed5FZyBmdCM8GsGXEQAAAEk"]
[Fri May 15 22:45:13.825556 2026] [proxy_fcgi:error] [pid 9305:tid 9347] [client 112.213.86.189:60924] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 22:45:15.184111 2026] [:error] [pid 9305:tid 9338] [client 112.213.86.189:60924] [client 112.213.86.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 112.213.86.189, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agcxe95FZyBmdCM8GsGXEwAAAEA"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 22:45:15.491077 2026] [proxy_fcgi:error] [pid 9305:tid 9338] [client 112.213.86.189:60924] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 23:02:09.892262 2026] [proxy_fcgi:error] [pid 9305:tid 9339] [client 66.249.79.7:36564] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 23:02:10.352833 2026] [proxy_fcgi:error] [pid 9305:tid 9348] [client 66.249.79.7:36564] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 23:22:55.170854 2026] [:error] [pid 30208:tid 30221] [client 168.119.6.138:57466] [client 168.119.6.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.119.6.138, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agc6T5mLMCJujX-JTvhEfAAAAIs"]
[Fri May 15 23:22:55.516965 2026] [proxy_fcgi:error] [pid 30208:tid 30221] [client 168.119.6.138:57466] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 15 23:22:55.808385 2026] [:error] [pid 30208:tid 30227] [client 168.119.6.138:57466] [client 168.119.6.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.119.6.138, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agc6T5mLMCJujX-JTvhEfQAAAJE"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 15 23:22:56.094588 2026] [proxy_fcgi:error] [pid 30208:tid 30227] [client 168.119.6.138:57466] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 00:00:27.751726 2026] [:error] [pid 9392:tid 9403] [client 169.61.160.127:38786] [client 169.61.160.127] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agdDG9BWJIjH1U9zGfbzHwAAAQk"]
[Sat May 16 00:30:44.399714 2026] [:error] [pid 30272:tid 30286] [client 159.195.26.89:3174] [client 159.195.26.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.195.26.89, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agdKNHvc_jSFaQ_7_wcdbQAAAYw"]
[Sat May 16 00:30:44.765060 2026] [proxy_fcgi:error] [pid 30272:tid 30286] [client 159.195.26.89:3174] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 00:30:45.065487 2026] [:error] [pid 30272:tid 30276] [client 159.195.26.89:3174] [client 159.195.26.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.195.26.89, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agdKNXvc_jSFaQ_7_wcdbgAAAYI"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 00:30:45.405768 2026] [proxy_fcgi:error] [pid 30272:tid 30276] [client 159.195.26.89:3174] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 00:46:52.532764 2026] [:error] [pid 9307:tid 9378] [client 94.152.206.6:56238] [client 94.152.206.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.152.206.6, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agdN_CC43jY1IRzK5VZswwAAAM0"]
[Sat May 16 00:46:54.241394 2026] [proxy_fcgi:error] [pid 9307:tid 9378] [client 94.152.206.6:56238] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 00:46:54.606057 2026] [:error] [pid 9307:tid 9380] [client 94.152.206.6:56238] [client 94.152.206.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.152.206.6, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agdN_iC43jY1IRzK5VZszQAAAM8"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 00:46:54.902630 2026] [proxy_fcgi:error] [pid 9307:tid 9380] [client 94.152.206.6:56238] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 01:05:10.906856 2026] [proxy_fcgi:error] [pid 9307:tid 9371] [client 34.23.228.211:63317] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 01:38:35.063700 2026] [:error] [pid 9392:tid 9395] [client 146.19.213.81:32822] [client 146.19.213.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.19.213.81, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agdaG9BWJIjH1U9zGfYCtgAAAQE"]
[Sat May 16 01:38:35.437710 2026] [proxy_fcgi:error] [pid 9392:tid 9395] [client 146.19.213.81:32822] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 01:38:35.852059 2026] [:error] [pid 9392:tid 9402] [client 146.19.213.81:32822] [client 146.19.213.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.19.213.81, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agdaG9BWJIjH1U9zGfYCuAAAAQg"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 01:38:36.153609 2026] [proxy_fcgi:error] [pid 9392:tid 9402] [client 146.19.213.81:32822] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 01:59:22.780816 2026] [:error] [pid 30272:tid 30297] [client 158.173.67.16:53363] [client 158.173.67.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.16, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "agde-nvc_jSFaQ_7_wcvTwAAAZc"]
[Sat May 16 01:59:23.274616 2026] [proxy_fcgi:error] [pid 30272:tid 30297] [client 158.173.67.16:53363] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 01:59:27.420316 2026] [proxy_fcgi:error] [pid 30272:tid 30297] [client 158.173.67.16:53363] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 01:59:27.775303 2026] [proxy_fcgi:error] [pid 9304:tid 9314] [client 158.173.67.233:50091] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 01:59:29.460320 2026] [proxy_fcgi:error] [pid 30240:tid 30265] [client 158.173.67.185:23279] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 01:59:29.908367 2026] [proxy_fcgi:error] [pid 9305:tid 9342] [client 158.173.67.166:58557] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 01:59:30.005576 2026] [proxy_fcgi:error] [pid 30272:tid 30282] [client 158.173.67.226:42859] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 01:59:32.731350 2026] [proxy_fcgi:error] [pid 30272:tid 30284] [client 158.173.67.61:51481] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 01:59:34.265977 2026] [proxy_fcgi:error] [pid 30240:tid 30257] [client 158.173.67.61:43255] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 01:59:36.001570 2026] [proxy_fcgi:error] [pid 30240:tid 30261] [client 158.173.67.247:49335] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 01:59:36.589538 2026] [proxy_fcgi:error] [pid 30208:tid 30217] [client 158.173.67.48:56649] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 01:59:45.176637 2026] [proxy_fcgi:error] [pid 9305:tid 9352] [client 158.173.67.25:21667] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 01:59:55.644546 2026] [proxy_fcgi:error] [pid 59202:tid 59233] [client 158.173.67.9:60013] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 01:59:57.613577 2026] [proxy_fcgi:error] [pid 9392:tid 9417] [client 158.173.67.144:39725] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 01:59:58.879621 2026] [proxy_fcgi:error] [pid 59392:tid 59404] [client 158.173.67.6:37587] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 01:59:59.014423 2026] [proxy_fcgi:error] [pid 59453:tid 59464] [client 158.173.67.218:29535] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 01:59:59.894108 2026] [proxy_fcgi:error] [pid 59453:tid 59481] [client 158.173.67.185:45667] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:00:01.104709 2026] [proxy_fcgi:error] [pid 59311:tid 59322] [client 158.173.67.48:62141] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:00:02.180314 2026] [proxy_fcgi:error] [pid 30208:tid 30231] [client 158.173.67.247:27177] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:00:06.587206 2026] [proxy_fcgi:error] [pid 59202:tid 59208] [client 158.173.67.46:58541] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:00:07.130308 2026] [proxy_fcgi:error] [pid 59311:tid 59316] [client 158.173.67.30:59695] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:00:08.976536 2026] [proxy_fcgi:error] [pid 59202:tid 59221] [client 158.173.67.73:59787] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:00:09.375386 2026] [proxy_fcgi:error] [pid 9304:tid 9313] [client 158.173.67.144:23073] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:00:10.931539 2026] [proxy_fcgi:error] [pid 59311:tid 59328] [client 158.173.67.243:43471] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:00:11.252686 2026] [proxy_fcgi:error] [pid 59257:tid 59267] [client 158.173.67.73:36661] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:00:14.445840 2026] [:error] [pid 59257:tid 59274] [client 158.173.67.233:46219] [client 158.173.67.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.233, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "agdfLoNy1SVEpRrHx4R66QAAAk0"]
[Sat May 16 02:00:14.452668 2026] [:error] [pid 30208:tid 30211] [client 158.173.67.25:52231] [client 158.173.67.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.25, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "agdfLpmLMCJujX-JTvhTQgAAAIE"]
[Sat May 16 02:00:14.471189 2026] [:error] [pid 59392:tid 59414] [client 158.173.67.233:63639] [client 158.173.67.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.233, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "agdfLp3J5hQfH1d5JHoTKQAAAxM"]
[Sat May 16 02:00:14.477343 2026] [:error] [pid 59392:tid 59404] [client 158.173.67.30:20597] [client 158.173.67.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.30, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "agdfLp3J5hQfH1d5JHoTKgAAAwo"]
[Sat May 16 02:00:14.506104 2026] [:error] [pid 59349:tid 59374] [client 158.173.67.213:61025] [client 158.173.67.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.213, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "agdfLih0AYQwSTQz7DgOyQAAAtc"]
[Sat May 16 02:00:14.651256 2026] [:error] [pid 9305:tid 9354] [client 158.173.67.185:57393] [client 158.173.67.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.185, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "agdfLt5FZyBmdCM8GsGlAgAAAFA"]
[Sat May 16 02:00:14.651319 2026] [:error] [pid 9305:tid 9346] [client 158.173.67.200:57989] [client 158.173.67.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.200, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "agdfLt5FZyBmdCM8GsGlAwAAAEg"]
[Sat May 16 02:00:14.676729 2026] [:error] [pid 59453:tid 59482] [client 158.173.67.233:24747] [client 158.173.67.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.233, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "agdfLnnXIIDivY9RkF0pfAAAA1M"]
[Sat May 16 02:00:14.684127 2026] [:error] [pid 59257:tid 59278] [client 158.173.67.237:35329] [client 158.173.67.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.237, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "agdfLoNy1SVEpRrHx4R66wAAAlE"]
[Sat May 16 02:00:14.719959 2026] [:error] [pid 9307:tid 9384] [client 158.173.67.185:29507] [client 158.173.67.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.185, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "agdfLiC43jY1IRzK5VZzJAAAANM"]
[Sat May 16 02:00:16.097138 2026] [proxy_fcgi:error] [pid 59257:tid 59274] [client 158.173.67.233:46219] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:00:17.073127 2026] [proxy_fcgi:error] [pid 59392:tid 59414] [client 158.173.67.233:63639] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:00:17.459524 2026] [proxy_fcgi:error] [pid 30208:tid 30211] [client 158.173.67.25:52231] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:00:18.961544 2026] [proxy_fcgi:error] [pid 59392:tid 59404] [client 158.173.67.30:20597] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:00:19.084515 2026] [proxy_fcgi:error] [pid 9305:tid 9346] [client 158.173.67.200:57989] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:00:20.315588 2026] [proxy_fcgi:error] [pid 9305:tid 9354] [client 158.173.67.185:57393] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:00:20.641347 2026] [proxy_fcgi:error] [pid 59349:tid 59374] [client 158.173.67.213:61025] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:00:21.010486 2026] [proxy_fcgi:error] [pid 9307:tid 9384] [client 158.173.67.185:29507] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:00:21.460988 2026] [proxy_fcgi:error] [pid 59453:tid 59482] [client 158.173.67.233:24747] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:00:21.921413 2026] [proxy_fcgi:error] [pid 59257:tid 59278] [client 158.173.67.237:35329] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:44:39.711567 2026] [proxy_fcgi:error] [pid 30272:tid 30298] [client 74.7.243.242:55590] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:44:40.374576 2026] [proxy_fcgi:error] [pid 30208:tid 30232] [client 74.7.230.49:36204] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:46:15.628076 2026] [:error] [pid 9307:tid 9386] [client 5.161.190.70:56542] [client 5.161.190.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.190.70, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agdp9yC43jY1IRzK5VZ15gAAANU"]
[Sat May 16 02:46:16.146196 2026] [proxy_fcgi:error] [pid 9307:tid 9386] [client 5.161.190.70:56542] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 02:46:17.923516 2026] [:error] [pid 9307:tid 9374] [client 5.161.190.70:56542] [client 5.161.190.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.190.70, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agdp-SC43jY1IRzK5VZ15wAAAMk"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 02:46:18.215911 2026] [proxy_fcgi:error] [pid 9307:tid 9374] [client 5.161.190.70:56542] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 03:00:38.884382 2026] [:error] [pid 30208:tid 30217] [client 38.99.81.38:35152] [client 38.99.81.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.99.81.38, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agdtVpmLMCJujX-JTvhbaAAAAIc"]
[Sat May 16 03:00:39.246449 2026] [proxy_fcgi:error] [pid 30208:tid 30217] [client 38.99.81.38:35152] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:00:39.862167 2026] [:error] [pid 30208:tid 30221] [client 38.99.81.38:35152] [client 38.99.81.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.99.81.38, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agdtV5mLMCJujX-JTvhbaQAAAIs"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 03:00:40.189395 2026] [proxy_fcgi:error] [pid 30208:tid 30221] [client 38.99.81.38:35152] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 03:14:09.541879 2026] [:error] [pid 20457:tid 20461] [client 45.128.233.170:51576] [client 45.128.233.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.233.170, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agdwgZVnbuoThn4K9bSjFwAAAQI"]
[Sat May 16 03:14:09.904815 2026] [proxy_fcgi:error] [pid 20457:tid 20461] [client 45.128.233.170:51576] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:14:10.231917 2026] [:error] [pid 20457:tid 20463] [client 45.128.233.170:51576] [client 45.128.233.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.233.170, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agdwgpVnbuoThn4K9bSjGAAAAQQ"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 03:14:10.566292 2026] [proxy_fcgi:error] [pid 20457:tid 20463] [client 45.128.233.170:51576] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 03:42:46.169398 2026] [:error] [pid 24869:tid 24929] [client 152.53.131.206:60020] [client 152.53.131.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.53.131.206, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agd3Nuxo3FMprMltYl7rgwAAAFU"]
[Sat May 16 03:42:46.528864 2026] [proxy_fcgi:error] [pid 24869:tid 24929] [client 152.53.131.206:60020] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:42:50.972069 2026] [:error] [pid 24869:tid 24932] [client 152.53.131.206:60020] [client 152.53.131.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.53.131.206, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agd3Ouxo3FMprMltYl7rmwAAAFg"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 03:42:51.282813 2026] [proxy_fcgi:error] [pid 24869:tid 24932] [client 152.53.131.206:60020] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 03:43:43.119640 2026] [proxy_fcgi:error] [pid 24874:tid 24935] [client 64.226.65.160:55786] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:43:44.444305 2026] [proxy_fcgi:error] [pid 24869:tid 24919] [client 64.226.65.160:55792] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:43:45.476662 2026] [proxy_fcgi:error] [pid 24867:tid 24882] [client 64.226.65.160:55802] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:43:46.272528 2026] [authz_core:error] [pid 24869:tid 24917] [client 64.226.65.160:55806] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Sat May 16 03:43:48.492705 2026] [proxy_fcgi:error] [pid 24867:tid 24892] [client 64.226.65.160:55812] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:43:49.523095 2026] [proxy_fcgi:error] [pid 24867:tid 24883] [client 64.226.65.160:55824] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:43:50.631763 2026] [proxy_fcgi:error] [pid 24874:tid 24959] [client 64.226.65.160:55828] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:43:51.670221 2026] [proxy_fcgi:error] [pid 24979:tid 24984] [client 64.226.65.160:49340] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:43:52.723309 2026] [proxy_fcgi:error] [pid 24979:tid 24986] [client 64.226.65.160:49344] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:43:53.739889 2026] [proxy_fcgi:error] [pid 24979:tid 25003] [client 64.226.65.160:49356] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:43:54.869331 2026] [proxy_fcgi:error] [pid 24979:tid 25002] [client 64.226.65.160:49362] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:43:55.606862 2026] [:error] [pid 24867:tid 24899] [client 64.226.65.160:49366] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "agd3eyDgFLCgyKq-zmbazwAAABI"]
[Sat May 16 03:43:57.924604 2026] [proxy_fcgi:error] [pid 24867:tid 24898] [client 64.226.65.160:49372] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:43:59.681429 2026] [:error] [pid 24869:tid 24912] [client 64.226.65.160:49374] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "agd3f-xo3FMprMltYl7rsAAAAEQ"]
[Sat May 16 03:44:00.997835 2026] [proxy_fcgi:error] [pid 24874:tid 24953] [client 64.226.65.160:49386] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:02.164477 2026] [proxy_fcgi:error] [pid 24874:tid 24939] [client 64.226.65.160:53582] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:03.193841 2026] [proxy_fcgi:error] [pid 24874:tid 24950] [client 64.226.65.160:53596] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:04.254895 2026] [proxy_fcgi:error] [pid 24867:tid 24890] [client 64.226.65.160:53598] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:05.290554 2026] [proxy_fcgi:error] [pid 24979:tid 24981] [client 64.226.65.160:53608] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:06.471512 2026] [proxy_fcgi:error] [pid 24867:tid 24902] [client 64.226.65.160:53612] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:07.583150 2026] [proxy_fcgi:error] [pid 24979:tid 24994] [client 64.226.65.160:53624] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:09.753583 2026] [proxy_fcgi:error] [pid 24979:tid 24989] [client 64.226.65.160:53630] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:10.855486 2026] [:error] [pid 24979:tid 24981] [client 64.226.65.160:53632] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "agd3irvSFUQiwLaOL2oJJgAAAMA"]
[Sat May 16 03:44:12.062052 2026] [proxy_fcgi:error] [pid 24979:tid 24982] [client 64.226.65.160:57200] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:13.440961 2026] [proxy_fcgi:error] [pid 24979:tid 24988] [client 64.226.65.160:57204] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:14.898099 2026] [proxy_fcgi:error] [pid 24867:tid 24892] [client 64.226.65.160:57210] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:16.974731 2026] [proxy_fcgi:error] [pid 24979:tid 24985] [client 64.226.65.160:57222] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:18.116722 2026] [proxy_fcgi:error] [pid 24979:tid 24989] [client 64.226.65.160:57236] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:19.153078 2026] [proxy_fcgi:error] [pid 24979:tid 24986] [client 64.226.65.160:57252] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:20.234622 2026] [proxy_fcgi:error] [pid 24979:tid 24992] [client 64.226.65.160:57260] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:21.275685 2026] [proxy_fcgi:error] [pid 24867:tid 24900] [client 64.226.65.160:57264] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:22.341884 2026] [proxy_fcgi:error] [pid 24979:tid 24996] [client 64.226.65.160:58194] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:23.359441 2026] [proxy_fcgi:error] [pid 24874:tid 24956] [client 64.226.65.160:58200] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:24.576357 2026] [proxy_fcgi:error] [pid 24979:tid 24993] [client 64.226.65.160:58208] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:25.666395 2026] [proxy_fcgi:error] [pid 24979:tid 25003] [client 64.226.65.160:58224] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:26.730550 2026] [proxy_fcgi:error] [pid 24979:tid 24999] [client 64.226.65.160:58232] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:27.463046 2026] [:error] [pid 24979:tid 24995] [client 64.226.65.160:58236] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "agd3m7vSFUQiwLaOL2oJSwAAAM4"]
[Sat May 16 03:44:28.930978 2026] [proxy_fcgi:error] [pid 24867:tid 24903] [client 64.226.65.160:58244] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:29.956829 2026] [proxy_fcgi:error] [pid 24874:tid 24955] [client 64.226.65.160:58254] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:31.086898 2026] [proxy_fcgi:error] [pid 24874:tid 24941] [client 64.226.65.160:58264] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:32.181845 2026] [proxy_fcgi:error] [pid 24979:tid 24985] [client 64.226.65.160:44950] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 03:44:33.212391 2026] [proxy_fcgi:error] [pid 24869:tid 24928] [client 64.226.65.160:44956] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 05:30:24.778756 2026] [:error] [pid 24979:tid 25005] [client 34.126.102.102:51320] [client 34.126.102.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ageQcLvSFUQiwLaOL2oivAAAANg"]
[Sat May 16 07:24:39.170395 2026] [:error] [pid 5602:tid 5611] [client 144.16.144.93:63900] [client 144.16.144.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.16.144.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agerN9zTTsu77r3UIsnVngAAAQc"]
[Sat May 16 07:24:40.880534 2026] [proxy_fcgi:error] [pid 5602:tid 5611] [client 144.16.144.93:63900] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 07:24:41.299341 2026] [:error] [pid 5602:tid 5614] [client 144.16.144.93:63900] [client 144.16.144.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.16.144.93, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agerOdzTTsu77r3UIsnVpwAAAQo"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 07:24:41.600870 2026] [proxy_fcgi:error] [pid 5602:tid 5614] [client 144.16.144.93:63900] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 07:31:41.713324 2026] [:error] [pid 24867:tid 24881] [client 54.171.24.11:59974] [client 54.171.24.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.171.24.11, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ages3SDgFLCgyKq-zmb13gAAAAA"]
[Sat May 16 07:31:42.025540 2026] [proxy_fcgi:error] [pid 24867:tid 24881] [client 54.171.24.11:59974] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 07:31:42.394372 2026] [:error] [pid 24867:tid 24903] [client 54.171.24.11:59974] [client 54.171.24.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.171.24.11, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ages3iDgFLCgyKq-zmb13wAAABY"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 07:31:42.692844 2026] [proxy_fcgi:error] [pid 24867:tid 24903] [client 54.171.24.11:59974] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 08:51:08.166430 2026] [:error] [pid 5602:tid 5616] [client 168.187.5.230:34054] [client 168.187.5.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.187.5.230, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "age_fNzTTsu77r3UIsnwSgAAAQw"]
[Sat May 16 08:51:08.712123 2026] [proxy_fcgi:error] [pid 5602:tid 5616] [client 168.187.5.230:34054] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 08:51:09.190770 2026] [:error] [pid 5602:tid 5617] [client 168.187.5.230:34054] [client 168.187.5.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.187.5.230, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "age_fdzTTsu77r3UIsnwTAAAAQ0"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 08:51:09.501008 2026] [proxy_fcgi:error] [pid 5602:tid 5617] [client 168.187.5.230:34054] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 09:04:02.143198 2026] [:error] [pid 24979:tid 24999] [client 38.129.139.12:46326] [client 38.129.139.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.129.139.12, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agfCgrvSFUQiwLaOL2pPjgAAANI"]
[Sat May 16 09:04:02.792031 2026] [proxy_fcgi:error] [pid 24979:tid 24999] [client 38.129.139.12:46326] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 09:04:03.580972 2026] [:error] [pid 24979:tid 24990] [client 38.129.139.12:46326] [client 38.129.139.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.129.139.12, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agfCg7vSFUQiwLaOL2pPjwAAAMk"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 09:04:03.883610 2026] [proxy_fcgi:error] [pid 24979:tid 24990] [client 38.129.139.12:46326] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 09:36:52.805918 2026] [:error] [pid 24867:tid 24882] [client 168.187.5.230:39990] [client 168.187.5.230] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agfKNCDgFLCgyKq-zmYDhwAAAAE"]
[Sat May 16 09:50:37.469200 2026] [:error] [pid 24979:tid 24991] [client 62.171.128.69:55798] [client 62.171.128.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.171.128.69, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agfNbbvSFUQiwLaOL2paDgAAAMo"]
[Sat May 16 09:50:37.783856 2026] [proxy_fcgi:error] [pid 24979:tid 24991] [client 62.171.128.69:55798] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 09:50:38.254544 2026] [:error] [pid 24979:tid 25003] [client 62.171.128.69:55798] [client 62.171.128.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.171.128.69, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agfNbrvSFUQiwLaOL2paEAAAANY"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 09:50:38.549666 2026] [proxy_fcgi:error] [pid 24979:tid 25003] [client 62.171.128.69:55798] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 10:23:52.017560 2026] [proxy_fcgi:error] [pid 24867:tid 24888] [client 208.84.100.38:23664] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 10:23:56.329766 2026] [proxy_fcgi:error] [pid 24867:tid 24904] [client 208.84.100.38:22974] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 10:30:04.691796 2026] [:error] [pid 5602:tid 5624] [client 183.181.81.161:33096] [client 183.181.81.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 183.181.81.161, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agfWrNzTTsu77r3UIskNDwAAARQ"]
[Sat May 16 10:30:06.373572 2026] [proxy_fcgi:error] [pid 5602:tid 5624] [client 183.181.81.161:33096] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 10:30:07.825141 2026] [:error] [pid 5602:tid 5622] [client 183.181.81.161:33096] [client 183.181.81.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 183.181.81.161, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agfWr9zTTsu77r3UIskNEQAAARI"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 10:30:08.134485 2026] [proxy_fcgi:error] [pid 5602:tid 5622] [client 183.181.81.161:33096] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 10:35:25.477154 2026] [proxy_fcgi:error] [pid 61463:tid 61466] [client 54.209.14.62:34316] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 10:35:27.938582 2026] [proxy_fcgi:error] [pid 61411:tid 61415] [client 54.209.14.62:41326] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 10:35:30.286219 2026] [proxy_fcgi:error] [pid 61411:tid 61436] [client 54.209.14.62:34318] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 10:35:32.956012 2026] [proxy_fcgi:error] [pid 62341:tid 62355] [client 54.209.14.62:47034] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 11:17:29.472618 2026] [autoindex:error] [pid 24867:tid 24888] [client 194.163.172.80:60270] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat May 16 11:24:12.196890 2026] [:error] [pid 62210:tid 62225] [client 188.241.62.83:36510] [client 188.241.62.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.241.62.83, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agfjXMjHonCA4ORo40GzjAAAAk0"]
[Sat May 16 11:24:12.564311 2026] [proxy_fcgi:error] [pid 62210:tid 62225] [client 188.241.62.83:36510] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 11:24:13.360007 2026] [:error] [pid 62210:tid 62227] [client 188.241.62.83:36510] [client 188.241.62.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.241.62.83, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agfjXcjHonCA4ORo40GzkAAAAk8"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 11:24:13.668926 2026] [proxy_fcgi:error] [pid 62210:tid 62227] [client 188.241.62.83:36510] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 11:30:34.086957 2026] [proxy_fcgi:error] [pid 61411:tid 61431] [client 172.215.216.208:28614] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 11:50:37.716619 2026] [:error] [pid 24874:tid 24936] [client 54.91.158.35:50102] [client 54.91.158.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.91.158.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agfpjciii6x3XidYGHHKiAAAAIE"]
[Sat May 16 11:50:39.601039 2026] [proxy_fcgi:error] [pid 24874:tid 24936] [client 54.91.158.35:50102] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 11:50:40.917768 2026] [:error] [pid 24874:tid 24947] [client 54.91.158.35:50102] [client 54.91.158.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.91.158.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agfpkMiii6x3XidYGHHKjAAAAIw"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 11:50:41.231638 2026] [proxy_fcgi:error] [pid 24874:tid 24947] [client 54.91.158.35:50102] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 12:49:01.187499 2026] [:error] [pid 5602:tid 5607] [client 43.205.237.179:46504] [client 43.205.237.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.205.237.179, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agf3PdzTTsu77r3UIskYPwAAAQM"]
[Sat May 16 12:49:01.736786 2026] [proxy_fcgi:error] [pid 5602:tid 5607] [client 43.205.237.179:46504] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 12:49:02.064207 2026] [:error] [pid 5602:tid 5619] [client 43.205.237.179:46504] [client 43.205.237.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.205.237.179, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agf3PtzTTsu77r3UIskYQAAAAQ8"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 12:49:02.351328 2026] [proxy_fcgi:error] [pid 5602:tid 5619] [client 43.205.237.179:46504] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 13:49:31.205896 2026] [:error] [pid 61463:tid 61485] [client 84.247.20.74:37432] [client 84.247.20.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.20.74, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aggFazXdL1WU7nYXPmTmJwAAAdQ"]
[Sat May 16 13:49:34.403315 2026] [proxy_fcgi:error] [pid 61463:tid 61485] [client 84.247.20.74:37432] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 13:49:34.789053 2026] [:error] [pid 61463:tid 61488] [client 84.247.20.74:37432] [client 84.247.20.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.20.74, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "aggFbjXdL1WU7nYXPmTmKAAAAdc"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 13:49:35.093571 2026] [proxy_fcgi:error] [pid 61463:tid 61488] [client 84.247.20.74:37432] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 14:45:42.343359 2026] [proxy_fcgi:error] [pid 62210:tid 62232] [client 199.244.88.230:11250] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 19:50:15.130110 2026] [proxy_fcgi:error] [pid 61361:tid 61367] [client 139.59.59.161:33390] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 19:50:15.832580 2026] [proxy_fcgi:error] [pid 24979:tid 24992] [client 139.59.59.161:33406] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: http://www.southerncrosscentre.au/
[Sat May 16 19:50:16.846065 2026] [proxy_fcgi:error] [pid 24874:tid 24949] [client 139.59.59.161:51704] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 19:50:21.399083 2026] [proxy_fcgi:error] [pid 62341:tid 62364] [client 139.59.59.161:51788] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://www.southerncrosscentre.au/
[Sat May 16 22:06:37.992473 2026] [:error] [pid 24869:tid 24931] [client 34.50.167.147:34384] [client 34.50.167.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "agh57exo3FMprMltYl484gAAAFc"]
[Sat May 16 23:34:19.572700 2026] [:error] [pid 61361:tid 61386] [client 163.44.120.29:55950] [client 163.44.120.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.44.120.29, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agiOe5Zojzbt3jGziNmXdwAAAVc"]
[Sat May 16 23:34:19.925985 2026] [proxy_fcgi:error] [pid 61361:tid 61386] [client 163.44.120.29:55950] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 16 23:34:20.624847 2026] [:error] [pid 61361:tid 61376] [client 163.44.120.29:55950] [client 163.44.120.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.44.120.29, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agiOfJZojzbt3jGziNmXegAAAU0"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 16 23:34:20.925299 2026] [proxy_fcgi:error] [pid 61361:tid 61376] [client 163.44.120.29:55950] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 01:16:06.738965 2026] [:error] [pid 61463:tid 61485] [client 103.153.183.69:30790] [client 103.153.183.69] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||southerncrosscentre.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "agimVjXdL1WU7nYXPmQEQwAAAdQ"]
[Sun May 17 01:16:06.739056 2026] [:error] [pid 61463:tid 61485] [client 103.153.183.69:30790] [client 103.153.183.69] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "agimVjXdL1WU7nYXPmQEQwAAAdQ"]
[Sun May 17 02:04:59.287026 2026] [:error] [pid 24979:tid 24993] [client 57.129.140.39:45158] [client 57.129.140.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.129.140.39, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agixy7vSFUQiwLaOL2rGOwAAAMw"]
[Sun May 17 02:04:59.867786 2026] [proxy_fcgi:error] [pid 24979:tid 24993] [client 57.129.140.39:45158] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 02:05:00.165577 2026] [:error] [pid 24979:tid 25005] [client 57.129.140.39:45158] [client 57.129.140.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.129.140.39, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agixzLvSFUQiwLaOL2rGPQAAANg"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 02:05:00.498506 2026] [proxy_fcgi:error] [pid 24979:tid 25005] [client 57.129.140.39:45158] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 03:19:32.172102 2026] [:error] [pid 50971:tid 51087] [client 152.53.53.76:64302] [client 152.53.53.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.53.53.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agjDRPJpjbEVWnc966dxXAAAAEQ"]
[Sun May 17 03:19:32.529734 2026] [proxy_fcgi:error] [pid 50971:tid 51087] [client 152.53.53.76:64302] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 03:19:33.811563 2026] [:error] [pid 50971:tid 51088] [client 152.53.53.76:64302] [client 152.53.53.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.53.53.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agjDRfJpjbEVWnc966dxXQAAAEU"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 03:19:34.108099 2026] [proxy_fcgi:error] [pid 50971:tid 51088] [client 152.53.53.76:64302] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 04:03:58.586192 2026] [proxy_fcgi:error] [pid 59061:tid 59112] [client 176.65.139.237:43208] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 04:06:59.706608 2026] [:error] [pid 59061:tid 59119] [client 51.79.229.9:35822] [client 51.79.229.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.79.229.9, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agjOY4YS410zAmsYkoLpNwAAAFc"]
[Sun May 17 04:07:00.275138 2026] [proxy_fcgi:error] [pid 59061:tid 59119] [client 51.79.229.9:35822] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 04:07:00.563662 2026] [:error] [pid 59061:tid 59103] [client 51.79.229.9:35822] [client 51.79.229.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.79.229.9, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agjOZIYS410zAmsYkoLpOAAAAEc"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 04:07:00.877891 2026] [proxy_fcgi:error] [pid 59061:tid 59103] [client 51.79.229.9:35822] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 04:52:14.460150 2026] [proxy_fcgi:error] [pid 59062:tid 59133] [client 185.12.250.104:59461] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 05:26:18.461626 2026] [:error] [pid 36652:tid 36659] [client 157.15.40.86:52702] [client 157.15.40.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/txets.php"] [unique_id "agjg-jZrzQadnZADvj8EkAAAAQU"]
[Sun May 17 05:26:19.161104 2026] [:error] [pid 36652:tid 36656] [client 157.15.40.86:52873] [client 157.15.40.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/txets.php"] [unique_id "agjg-zZrzQadnZADvj8EnAAAAQI"]
[Sun May 17 05:26:19.435624 2026] [:error] [pid 36652:tid 36658] [client 157.15.40.86:52893] [client 157.15.40.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/txets.php"] [unique_id "agjg-zZrzQadnZADvj8EoAAAAQQ"]
[Sun May 17 05:26:19.708836 2026] [:error] [pid 59166:tid 59184] [client 157.15.40.86:52912] [client 157.15.40.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/txets.php"] [unique_id "agjg-0_puQ1I47_0Urin8gAAANA"]
[Sun May 17 05:26:33.064158 2026] [:error] [pid 59166:tid 59170] [client 157.15.40.86:52940] [client 157.15.40.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/schallfuns.php"] [unique_id "agjhCU_puQ1I47_0UrioHgAAAMI"]
[Sun May 17 05:26:34.670900 2026] [:error] [pid 59060:tid 59089] [client 157.15.40.86:54114] [client 157.15.40.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/postnews.php"] [unique_id "agjhCvvwvq3bndkPE4nBBwAAABQ"]
[Sun May 17 05:26:34.951658 2026] [:error] [pid 59062:tid 59138] [client 157.15.40.86:54207] [client 157.15.40.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-content/postnews.php"] [unique_id "agjhCj4V9GkVWmCFmGa0wAAAAI8"]
[Sun May 17 05:26:35.775168 2026] [:error] [pid 59166:tid 59185] [client 157.15.40.86:54273] [client 157.15.40.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/postnews.php"] [unique_id "agjhC0_puQ1I47_0UrioIwAAANE"]
[Sun May 17 05:26:41.676537 2026] [:error] [pid 59166:tid 59172] [client 157.15.40.86:54328] [client 157.15.40.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/postnews.php"] [unique_id "agjhEU_puQ1I47_0UrioLAAAAMQ"]
[Sun May 17 06:07:01.419515 2026] [proxy_fcgi:error] [pid 59061:tid 59098] [client 74.7.230.49:35086] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 07:49:47.335975 2026] [proxy_fcgi:error] [pid 59060:tid 59081] [client 208.122.218.181:49210] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 07:49:58.436449 2026] [proxy_fcgi:error] [pid 36652:tid 36666] [client 154.12.242.76:49138] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 07:50:00.067231 2026] [:error] [pid 59061:tid 59116] [client 154.12.242.76:49150] [client 154.12.242.76] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users"] [unique_id "agkCqIYS410zAmsYkoL9FAAAAFQ"]
[Sun May 17 07:50:09.071453 2026] [proxy_fcgi:error] [pid 59060:tid 59072] [client 52.60.135.78:38326] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 07:50:09.260598 2026] [proxy_fcgi:error] [pid 17234:tid 17250] [client 52.60.135.78:38318] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 09:04:46.316585 2026] [:error] [pid 17234:tid 17250] [client 54.202.223.165:48408] [client 54.202.223.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.202.223.165, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agkULtJ4QOrYRCeDR2gO8QAAAU4"]
[Sun May 17 09:04:46.850172 2026] [proxy_fcgi:error] [pid 17234:tid 17250] [client 54.202.223.165:48408] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 09:04:47.224620 2026] [:error] [pid 17234:tid 17236] [client 54.202.223.165:48408] [client 54.202.223.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.202.223.165, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agkUL9J4QOrYRCeDR2gO8gAAAUA"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 09:04:47.521948 2026] [proxy_fcgi:error] [pid 17234:tid 17236] [client 54.202.223.165:48408] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 10:21:44.917938 2026] [:error] [pid 59166:tid 59189] [client 92.118.39.29:55394] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "agkmOE_puQ1I47_0UrjI4AAAANU"]
[Sun May 17 11:05:01.048015 2026] [proxy_fcgi:error] [pid 59062:tid 59127] [client 20.67.99.94:60684] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 11:11:31.932384 2026] [:error] [pid 17234:tid 17251] [client 172.86.89.164:32918] [client 172.86.89.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.86.89.164, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agkx49J4QOrYRCeDR2gm8wAAAU8"]
[Sun May 17 11:11:32.319154 2026] [proxy_fcgi:error] [pid 17234:tid 17251] [client 172.86.89.164:32918] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 11:11:32.682823 2026] [:error] [pid 17234:tid 17258] [client 172.86.89.164:32918] [client 172.86.89.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.86.89.164, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agkx5NJ4QOrYRCeDR2gm9AAAAVY"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 11:11:32.997611 2026] [proxy_fcgi:error] [pid 17234:tid 17258] [client 172.86.89.164:32918] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 11:40:40.379972 2026] [proxy_fcgi:error] [pid 17234:tid 17253] [client 69.165.67.146:54209] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au
[Sun May 17 13:03:22.948869 2026] [:error] [pid 59060:tid 59073] [client 192.96.159.129:63633] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "aglMGvvwvq3bndkPE4nc8gAAAAQ"]
[Sun May 17 13:03:27.324580 2026] [proxy_fcgi:error] [pid 59166:tid 59189] [client 192.96.159.129:63635] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 13:09:32.233286 2026] [proxy_fcgi:error] [pid 59062:tid 59128] [client 192.71.126.53:42507] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 14:13:01.065535 2026] [proxy_fcgi:error] [pid 59061:tid 59098] [client 205.169.39.17:8077] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 18:16:52.635927 2026] [:error] [pid 10784:tid 10821] [client 163.223.13.7:46614] [client 163.223.13.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.223.13.7, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agmVlGBWRlKsFkSZGxBAggAAAZU"]
[Sun May 17 18:16:55.992906 2026] [proxy_fcgi:error] [pid 10784:tid 10821] [client 163.223.13.7:46614] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 18:16:57.455162 2026] [:error] [pid 10784:tid 10810] [client 163.223.13.7:46614] [client 163.223.13.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.223.13.7, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agmVmWBWRlKsFkSZGxBAhAAAAYs"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 18:17:00.774863 2026] [proxy_fcgi:error] [pid 10784:tid 10810] [client 163.223.13.7:46614] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 18:17:00.775386 2026] [proxy_fcgi:error] [pid 10784:tid 10810] [client 163.223.13.7:46614] AH01071: Got error '; PHP message: PHP Warning:  An unexpected error occurred. Something may be wrong with WordPress.org or this server&#8217;s configuration. If you continue to have problems, please try the <a href="https://wordpress.org/support/forums/">support forums</a>. (WordPress could not establish a secure connection to WordPress.org. Please contact your server administrator.) in /home/crosscen/public_html/wp-admin/includes/translation-install.php on line 62', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 19:34:40.270421 2026] [proxy_fcgi:error] [pid 59166:tid 59173] [client 35.243.87.249:47756] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 19:34:40.686420 2026] [proxy_fcgi:error] [pid 59166:tid 59170] [client 35.243.87.249:47756] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 19:34:41.491229 2026] [proxy_fcgi:error] [pid 59061:tid 59108] [client 35.243.87.249:47774] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 19:34:42.292603 2026] [proxy_fcgi:error] [pid 59062:tid 59146] [client 35.243.87.249:47798] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 19:34:42.791192 2026] [:error] [pid 10835:tid 10877] [client 35.243.87.249:47820] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.git/config"] [unique_id "agmn0kk8lW0-dtknLl8fDgAAAgQ"]
[Sun May 17 19:34:43.570689 2026] [proxy_fcgi:error] [pid 36652:tid 36676] [client 35.243.87.249:47830] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 19:34:44.063410 2026] [:error] [pid 59062:tid 59139] [client 35.243.87.249:47852] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env"] [unique_id "agmn1D4V9GkVWmCFmGYXtwAAAJA"]
[Sun May 17 19:34:44.556771 2026] [:error] [pid 11079:tid 11119] [client 35.243.87.249:47886] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.local"] [unique_id "agmn1GeR3-DrxhvUqxHsogAAAk8"]
[Sun May 17 19:34:45.044559 2026] [:error] [pid 10784:tid 10821] [client 35.243.87.249:47916] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.production"] [unique_id "agmn1WBWRlKsFkSZGxBFqAAAAZU"]
[Sun May 17 19:34:45.533614 2026] [:error] [pid 11079:tid 11121] [client 35.243.87.249:47926] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.staging"] [unique_id "agmn1WeR3-DrxhvUqxHspAAAAlE"]
[Sun May 17 19:34:46.026887 2026] [:error] [pid 11079:tid 11125] [client 35.243.87.249:47950] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.development"] [unique_id "agmn1meR3-DrxhvUqxHsrAAAAlU"]
[Sun May 17 19:34:46.538285 2026] [:error] [pid 59062:tid 59135] [client 35.243.87.249:47978] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.test"] [unique_id "agmn1j4V9GkVWmCFmGYXvQAAAIw"]
[Sun May 17 19:34:47.043862 2026] [:error] [pid 36652:tid 36661] [client 35.243.87.249:47846] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.remote"] [unique_id "agmn1zZrzQadnZADvj9X-QAAAQc"]
[Sun May 17 19:34:47.536054 2026] [:error] [pid 36652:tid 36672] [client 35.243.87.249:47876] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.bak"] [unique_id "agmn1zZrzQadnZADvj9X-wAAARI"]
[Sun May 17 19:34:48.024867 2026] [:error] [pid 10835:tid 10895] [client 35.243.87.249:47906] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.backup"] [unique_id "agmn2Ek8lW0-dtknLl8fJwAAAhY"]
[Sun May 17 19:34:48.523719 2026] [:error] [pid 36652:tid 36668] [client 35.243.87.249:47938] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.save"] [unique_id "agmn2DZrzQadnZADvj9X_QAAAQ4"]
[Sun May 17 19:34:49.011110 2026] [:error] [pid 36652:tid 36656] [client 35.243.87.249:47976] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.old"] [unique_id "agmn2TZrzQadnZADvj9YAQAAAQI"]
[Sun May 17 19:34:49.509892 2026] [:error] [pid 59061:tid 59107] [client 35.243.87.249:48012] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.sample"] [unique_id "agmn2YYS410zAmsYkoIpKwAAAEs"]
[Sun May 17 19:34:50.000945 2026] [:error] [pid 59061:tid 59119] [client 35.243.87.249:48038] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.example"] [unique_id "agmn2oYS410zAmsYkoIpLgAAAFc"]
[Sun May 17 19:34:50.504166 2026] [:error] [pid 59061:tid 59114] [client 35.243.87.249:48070] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.dev"] [unique_id "agmn2oYS410zAmsYkoIpMQAAAFI"]
[Sun May 17 19:34:50.993861 2026] [:error] [pid 17234:tid 17257] [client 35.243.87.249:48094] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.prod"] [unique_id "agmn2tJ4QOrYRCeDR2hZEQAAAVU"]
[Sun May 17 19:34:53.144347 2026] [:error] [pid 11079:tid 11127] [client 35.243.87.249:48204] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.ci"] [unique_id "agmn3WeR3-DrxhvUqxHsuwAAAlc"]
[Sun May 17 19:34:53.648581 2026] [:error] [pid 11079:tid 11101] [client 35.243.87.249:48224] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.docker"] [unique_id "agmn3WeR3-DrxhvUqxHswAAAAkE"]
[Sun May 17 19:34:54.155670 2026] [:error] [pid 59062:tid 59136] [client 35.243.87.249:48266] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.live"] [unique_id "agmn3j4V9GkVWmCFmGYXvwAAAI0"]
[Sun May 17 19:34:54.649491 2026] [:error] [pid 10834:tid 10863] [client 35.243.87.249:48282] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.preprod"] [unique_id "agmn3hISNQ_Nf83-VpqnZAAAAdE"]
[Sun May 17 19:34:55.154385 2026] [:error] [pid 11079:tid 11120] [client 35.243.87.249:48304] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.uat"] [unique_id "agmn32eR3-DrxhvUqxHsxgAAAlA"]
[Sun May 17 19:34:55.654475 2026] [:error] [pid 10835:tid 10888] [client 35.243.87.249:48332] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.dist"] [unique_id "agmn30k8lW0-dtknLl8fNAAAAg8"]
[Sun May 17 19:34:56.142794 2026] [:error] [pid 59062:tid 59131] [client 35.243.87.249:48356] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env.swp"] [unique_id "agmn4D4V9GkVWmCFmGYXwAAAAIg"]
[Sun May 17 19:34:56.639659 2026] [:error] [pid 10834:tid 10855] [client 35.243.87.249:48384] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/.env~"] [unique_id "agmn4BISNQ_Nf83-VpqnaAAAAck"]
[Sun May 17 19:34:57.140376 2026] [:error] [pid 10834:tid 10847] [client 35.243.87.249:35394] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/app/.env"] [unique_id "agmn4RISNQ_Nf83-VpqnagAAAcE"]
[Sun May 17 19:34:57.644914 2026] [:error] [pid 59061:tid 59110] [client 35.243.87.249:35420] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/apps/.env"] [unique_id "agmn4YYS410zAmsYkoIpOAAAAE4"]
[Sun May 17 19:34:58.133415 2026] [:error] [pid 11079:tid 11121] [client 35.243.87.249:35462] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/api/.env"] [unique_id "agmn4meR3-DrxhvUqxHsyQAAAlE"]
[Sun May 17 19:34:58.625682 2026] [:error] [pid 11079:tid 11101] [client 35.243.87.249:35492] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/web/.env"] [unique_id "agmn4meR3-DrxhvUqxHszAAAAkE"]
[Sun May 17 19:34:59.111719 2026] [:error] [pid 11079:tid 11113] [client 35.243.87.249:35516] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/site/.env"] [unique_id "agmn42eR3-DrxhvUqxHszwAAAkk"]
[Sun May 17 19:34:59.606474 2026] [:error] [pid 59061:tid 59096] [client 35.243.87.249:35540] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/public/.env"] [unique_id "agmn44YS410zAmsYkoIpOgAAAEA"]
[Sun May 17 19:35:00.088608 2026] [:error] [pid 10835:tid 10878] [client 35.243.87.249:35568] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/admin/.env"] [unique_id "agmn5Ek8lW0-dtknLl8fOAAAAgU"]
[Sun May 17 19:35:00.594171 2026] [:error] [pid 59166:tid 59183] [client 35.243.87.249:35592] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/backend/.env"] [unique_id "agmn5E_puQ1I47_0UrjtTgAAAM8"]
[Sun May 17 19:35:01.081521 2026] [:error] [pid 59060:tid 59073] [client 35.243.87.249:35618] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/server/.env"] [unique_id "agmn5fvwvq3bndkPE4nwcAAAAAQ"]
[Sun May 17 19:35:01.579097 2026] [:error] [pid 10834:tid 10851] [client 35.243.87.249:35638] [client 35.243.87.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncrosscentre.au"] [uri "/frontend/.env"] [unique_id "agmn5RISNQ_Nf83-VpqnbgAAAcU"]
[Sun May 17 20:02:11.347848 2026] [:error] [pid 11079:tid 11115] [client 103.124.95.115:33016] [client 103.124.95.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.124.95.115, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agmuQ2eR3-DrxhvUqxHw-wAAAks"]
[Sun May 17 20:02:14.880736 2026] [proxy_fcgi:error] [pid 11079:tid 11115] [client 103.124.95.115:33016] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 20:02:15.655406 2026] [:error] [pid 11079:tid 11108] [client 103.124.95.115:33016] [client 103.124.95.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.124.95.115, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agmuR2eR3-DrxhvUqxHw_QAAAkc"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 20:02:18.994889 2026] [proxy_fcgi:error] [pid 11079:tid 11108] [client 103.124.95.115:33016] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 20:02:18.995434 2026] [proxy_fcgi:error] [pid 11079:tid 11108] [client 103.124.95.115:33016] AH01071: Got error '; PHP message: PHP Warning:  An unexpected error occurred. Something may be wrong with WordPress.org or this server&#8217;s configuration. If you continue to have problems, please try the <a href="https://wordpress.org/support/forums/">support forums</a>. (WordPress could not establish a secure connection to WordPress.org. Please contact your server administrator.) in /home/crosscen/public_html/wp-admin/includes/translation-install.php on line 62', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 21:20:05.125774 2026] [proxy_fcgi:error] [pid 10784:tid 10825] [client 68.183.200.133:41758] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 22:06:27.607698 2026] [proxy_fcgi:error] [pid 11079:tid 11102] [client 34.78.120.11:62587] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 22:19:54.102339 2026] [:error] [pid 11079:tid 11124] [client 165.232.68.169:58830] [client 165.232.68.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.232.68.169, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agnOimeR3-DrxhvUqxEIbwAAAlQ"]
[Sun May 17 22:19:57.617261 2026] [proxy_fcgi:error] [pid 11079:tid 11124] [client 165.232.68.169:58830] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 22:19:58.097788 2026] [:error] [pid 11079:tid 11126] [client 165.232.68.169:58830] [client 165.232.68.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.232.68.169, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agnOjmeR3-DrxhvUqxEIdQAAAlY"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 22:19:58.413643 2026] [proxy_fcgi:error] [pid 11079:tid 11126] [client 165.232.68.169:58830] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 22:53:31.565939 2026] [:error] [pid 59061:tid 59107] [client 102.219.178.139:33996] [client 102.219.178.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.178.139, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agnWa4YS410zAmsYkoI1jAAAAEs"]
[Sun May 17 22:53:31.856917 2026] [proxy_fcgi:error] [pid 59061:tid 59107] [client 102.219.178.139:33996] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 17 22:53:32.802294 2026] [:error] [pid 59061:tid 59120] [client 102.219.178.139:33996] [client 102.219.178.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.178.139, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agnWbIYS410zAmsYkoI1jQAAAFg"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 17 22:53:33.086198 2026] [proxy_fcgi:error] [pid 59061:tid 59120] [client 102.219.178.139:33996] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 18 02:08:31.936758 2026] [proxy_fcgi:error] [pid 11079:tid 11104] [client 91.98.178.17:58008] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 02:08:40.599549 2026] [proxy_fcgi:error] [pid 59061:tid 59102] [client 162.55.103.91:59146] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 02:08:49.593725 2026] [proxy_fcgi:error] [pid 11079:tid 11116] [client 138.199.142.69:49220] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 02:08:55.497501 2026] [proxy_fcgi:error] [pid 59062:tid 59146] [client 91.98.176.87:39710] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 02:08:58.503951 2026] [proxy_fcgi:error] [pid 10834:tid 10851] [client 91.98.176.87:36472] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 02:09:03.658670 2026] [proxy_fcgi:error] [pid 11079:tid 11118] [client 166.0.45.65:38683] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 02:09:09.126223 2026] [proxy_fcgi:error] [pid 59060:tid 59077] [client 152.44.100.220:31375] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 02:51:40.259930 2026] [:error] [pid 59062:tid 59124] [client 180.93.137.9:52486] [client 180.93.137.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 180.93.137.9, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agoOPD4V9GkVWmCFmGZpeQAAAIE"]
[Mon May 18 02:51:40.582545 2026] [proxy_fcgi:error] [pid 59062:tid 59124] [client 180.93.137.9:52486] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 02:51:41.973331 2026] [:error] [pid 59062:tid 59137] [client 180.93.137.9:52486] [client 180.93.137.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 180.93.137.9, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agoOPT4V9GkVWmCFmGZpegAAAI4"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 18 02:51:42.309739 2026] [proxy_fcgi:error] [pid 59062:tid 59137] [client 180.93.137.9:52486] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 18 03:28:04.535772 2026] [:error] [pid 17013:tid 17047] [client 213.55.96.154:57182] [client 213.55.96.154] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agoWxJs2nvVZF-qJbw9dkAAAAEM"]
[Mon May 18 03:28:04.536081 2026] [:error] [pid 17013:tid 17047] [client 213.55.96.154:57182] [client 213.55.96.154] ModSecurity: Audit log: Failed to lock global mutex: Invalid argument [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agoWxJs2nvVZF-qJbw9dkAAAAEM"]
[Mon May 18 03:28:04.536213 2026] [:error] [pid 17013:tid 17047] [client 213.55.96.154:57182] [client 213.55.96.154] ModSecurity: Audit log: Failed to unlock global mutex: Invalid argument [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agoWxJs2nvVZF-qJbw9dkAAAAEM"]
[Mon May 18 08:13:25.178415 2026] [proxy_fcgi:error] [pid 20884:tid 20898] [client 35.235.71.243:52712] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 10:51:51.892536 2026] [proxy_fcgi:error] [pid 44087:tid 44089] [client 74.7.243.242:54248] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 10:51:51.935637 2026] [proxy_fcgi:error] [pid 44087:tid 44110] [client 74.7.230.49:49460] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 11:34:53.650089 2026] [proxy_fcgi:error] [pid 36579:tid 36599] [client 3.140.188.14:54318] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 11:34:55.571967 2026] [:error] [pid 36493:tid 36573] [client 3.140.188.14:60945] [client 3.140.188.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.140.188.14, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agqI3wynkzQB5nM668qTuQAAARg"]
[Mon May 18 11:34:55.887623 2026] [proxy_fcgi:error] [pid 36493:tid 36573] [client 3.140.188.14:60945] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 11:34:56.811986 2026] [proxy_fcgi:error] [pid 36579:tid 36583] [client 3.140.188.14:56868] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 11:46:04.661951 2026] [proxy_fcgi:error] [pid 36493:tid 36565] [client 74.7.241.48:46956] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 11:46:06.029494 2026] [proxy_fcgi:error] [pid 36491:tid 36509] [client 74.7.244.46:45536] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 11:50:02.007066 2026] [:error] [pid 36579:tid 36582] [client 194.62.107.77:25849] [client 194.62.107.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "agqMal-aoZxBfgL5vDw_0gAAAEA"]
[Mon May 18 12:54:23.617603 2026] [proxy_fcgi:error] [pid 36491:tid 36514] [client 5.133.192.87:46767] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 13:03:46.142289 2026] [proxy_fcgi:error] [pid 36579:tid 36590] [client 157.173.122.176:46140] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 15:03:46.969406 2026] [:error] [pid 36491:tid 36509] [client 209.74.88.30:41776] [client 209.74.88.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.74.88.30, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agq50k555B9CZb6D60mdsQAAAU4"]
[Mon May 18 15:03:47.595984 2026] [proxy_fcgi:error] [pid 36491:tid 36509] [client 209.74.88.30:41776] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 15:03:48.368283 2026] [:error] [pid 36491:tid 36500] [client 209.74.88.30:41776] [client 209.74.88.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.74.88.30, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agq51E555B9CZb6D60mdswAAAUU"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 18 15:03:48.678371 2026] [proxy_fcgi:error] [pid 36491:tid 36500] [client 209.74.88.30:41776] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 18 16:13:13.135731 2026] [:error] [pid 44046:tid 44056] [client 85.214.94.237:37640] [client 85.214.94.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.94.237, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agrKGYYF4k2jfXJBXk3sGAAAAYg"]
[Mon May 18 16:13:13.459389 2026] [proxy_fcgi:error] [pid 44046:tid 44056] [client 85.214.94.237:37640] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 16:13:13.768662 2026] [:error] [pid 44046:tid 44065] [client 85.214.94.237:37640] [client 85.214.94.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.94.237, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "agrKGYYF4k2jfXJBXk3sJgAAAZE"], referer: https://southerncrosscentre.au/wp-login.php
[Mon May 18 16:13:14.123191 2026] [proxy_fcgi:error] [pid 44046:tid 44065] [client 85.214.94.237:37640] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Mon May 18 17:04:57.898920 2026] [proxy_fcgi:error] [pid 36579:tid 36582] [client 65.87.7.65:9828] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 17:05:01.421885 2026] [proxy_fcgi:error] [pid 36579:tid 36600] [client 65.87.7.65:9828] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 17:17:59.499515 2026] [proxy_fcgi:error] [pid 36493:tid 36570] [client 18.205.115.99:42136] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 18 17:17:59.887273 2026] [proxy_fcgi:error] [pid 44010:tid 44036] [client 18.205.115.99:49940] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 04:02:48.864601 2026] [proxy_fcgi:error] [pid 7155:tid 7235] [client 35.235.71.243:34418] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 04:51:17.315914 2026] [:error] [pid 38697:tid 38731] [client 103.65.237.216:63329] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/sftp-config.json"] [unique_id "agt7xaXP9pP6Kgt-msSY6gAAABA"]
[Tue May 19 04:51:17.947949 2026] [proxy_fcgi:error] [pid 38814:tid 38825] [client 103.65.237.216:63350] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:56:02.560461 2026] [proxy_fcgi:error] [pid 46815:tid 46819] [client 207.231.111.49:34050] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:56:03.322576 2026] [proxy_fcgi:error] [pid 38705:tid 38769] [client 207.231.111.49:34064] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:38.699039 2026] [:error] [pid 46815:tid 46829] [client 202.155.8.152:53626] [client 202.155.8.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/burst-statistics/readme.txt"] [unique_id "agwKWiPnRhJOmA06LgpX-wAAAUw"]
[Tue May 19 14:59:41.965834 2026] [proxy_fcgi:error] [pid 46896:tid 46904] [client 4.204.239.169:28504] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:42.974710 2026] [proxy_fcgi:error] [pid 41573:tid 41590] [client 4.204.239.169:26706] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:43.806608 2026] [proxy_fcgi:error] [pid 38699:tid 38759] [client 4.204.239.169:34120] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:44.709328 2026] [proxy_fcgi:error] [pid 38697:tid 38715] [client 4.204.239.169:27388] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:45.810611 2026] [proxy_fcgi:error] [pid 38697:tid 38727] [client 4.204.239.169:7847] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:46.714119 2026] [proxy_fcgi:error] [pid 46815:tid 46818] [client 4.204.239.169:9924] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:47.652039 2026] [proxy_fcgi:error] [pid 46815:tid 46828] [client 4.204.239.169:43260] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:48.683727 2026] [proxy_fcgi:error] [pid 38697:tid 38728] [client 4.204.239.169:39023] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:48.909762 2026] [:error] [pid 46815:tid 46820] [client 202.155.8.152:55309] [client 202.155.8.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wordpress/wp-content/plugins/burst-statistics/readme.txt"] [unique_id "agwKZCPnRhJOmA06LgpYJAAAAUM"]
[Tue May 19 14:59:49.506629 2026] [proxy_fcgi:error] [pid 38705:tid 38776] [client 4.204.239.169:27349] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:50.373174 2026] [proxy_fcgi:error] [pid 46815:tid 46834] [client 4.204.239.169:24069] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:51.186273 2026] [proxy_fcgi:error] [pid 46896:tid 46922] [client 4.204.239.169:36447] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:52.385882 2026] [proxy_fcgi:error] [pid 46815:tid 46833] [client 4.204.239.169:9949] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:52.911576 2026] [proxy_fcgi:error] [pid 46815:tid 46839] [client 4.204.239.169:9949] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:53.888129 2026] [proxy_fcgi:error] [pid 38705:tid 38778] [client 4.204.239.169:44780] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:54.799169 2026] [proxy_fcgi:error] [pid 46815:tid 46828] [client 4.204.239.169:26741] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:55.780273 2026] [proxy_fcgi:error] [pid 38705:tid 38780] [client 4.204.239.169:46374] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:57.181324 2026] [proxy_fcgi:error] [pid 46896:tid 46920] [client 4.204.239.169:36472] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:58.231027 2026] [proxy_fcgi:error] [pid 46815:tid 46834] [client 4.204.239.169:39007] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 14:59:59.387826 2026] [proxy_fcgi:error] [pid 46815:tid 46837] [client 4.204.239.169:46344] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:00.354124 2026] [proxy_fcgi:error] [pid 29823:tid 29838] [client 4.204.239.169:24690] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:01.392625 2026] [proxy_fcgi:error] [pid 29823:tid 29840] [client 4.204.239.169:53503] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:02.329893 2026] [proxy_fcgi:error] [pid 46815:tid 46838] [client 4.204.239.169:36433] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:03.374234 2026] [proxy_fcgi:error] [pid 38705:tid 38778] [client 4.204.239.169:46341] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:04.363732 2026] [proxy_fcgi:error] [pid 46815:tid 46834] [client 4.204.239.169:9921] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:05.321917 2026] [proxy_fcgi:error] [pid 46815:tid 46830] [client 4.204.239.169:28492] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:06.136729 2026] [proxy_fcgi:error] [pid 46815:tid 46828] [client 4.204.239.169:20336] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:07.181043 2026] [proxy_fcgi:error] [pid 41573:tid 41591] [client 4.204.239.169:9923] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:08.154689 2026] [proxy_fcgi:error] [pid 38697:tid 38734] [client 4.204.239.169:49461] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:09.071444 2026] [proxy_fcgi:error] [pid 46815:tid 46825] [client 4.204.239.169:20314] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:10.172312 2026] [proxy_fcgi:error] [pid 46815:tid 46839] [client 4.204.239.169:9955] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:10.983634 2026] [proxy_fcgi:error] [pid 46896:tid 46909] [client 4.204.239.169:23483] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:11.723638 2026] [:error] [pid 38697:tid 38718] [client 202.155.8.152:57661] [client 202.155.8.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp/wp-content/plugins/burst-statistics/readme.txt"] [unique_id "agwKe6XP9pP6Kgt-msQgFgAAAAM"]
[Tue May 19 15:00:11.871700 2026] [proxy_fcgi:error] [pid 46815:tid 46822] [client 4.204.239.169:19121] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:12.729324 2026] [proxy_fcgi:error] [pid 46815:tid 46818] [client 4.204.239.169:23987] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:13.659663 2026] [proxy_fcgi:error] [pid 41573:tid 41581] [client 4.204.239.169:41189] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:14.525138 2026] [proxy_fcgi:error] [pid 41573:tid 41585] [client 4.204.239.169:24646] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:15.405708 2026] [proxy_fcgi:error] [pid 46896:tid 46908] [client 4.204.239.169:39969] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:16.581696 2026] [proxy_fcgi:error] [pid 46896:tid 46918] [client 4.204.239.169:42127] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:17.641213 2026] [proxy_fcgi:error] [pid 29823:tid 29839] [client 4.204.239.169:19112] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:18.594942 2026] [proxy_fcgi:error] [pid 29823:tid 29842] [client 4.204.239.169:23431] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:19.538451 2026] [proxy_fcgi:error] [pid 41573:tid 41577] [client 4.204.239.169:39978] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:20.621922 2026] [proxy_fcgi:error] [pid 38814:tid 38825] [client 4.204.239.169:10324] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:21.902668 2026] [proxy_fcgi:error] [pid 38705:tid 38788] [client 4.204.239.169:7950] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:23.243155 2026] [proxy_fcgi:error] [pid 38705:tid 38775] [client 4.204.239.169:37426] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:24.613886 2026] [proxy_fcgi:error] [pid 38705:tid 38791] [client 4.204.239.169:49433] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:25.890989 2026] [proxy_fcgi:error] [pid 46896:tid 46919] [client 4.204.239.169:9633] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:26.963201 2026] [proxy_fcgi:error] [pid 38814:tid 38823] [client 4.204.239.169:25012] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:27.897051 2026] [proxy_fcgi:error] [pid 38705:tid 38770] [client 4.204.239.169:23425] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:28.744267 2026] [proxy_fcgi:error] [pid 38697:tid 38723] [client 4.204.239.169:34784] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:29.665423 2026] [proxy_fcgi:error] [pid 38697:tid 38717] [client 4.204.239.169:41173] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:30.520496 2026] [proxy_fcgi:error] [pid 38697:tid 38721] [client 4.204.239.169:61510] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:31.339566 2026] [proxy_fcgi:error] [pid 38705:tid 38792] [client 4.204.239.169:38662] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:32.151768 2026] [proxy_fcgi:error] [pid 41573:tid 41591] [client 4.204.239.169:10345] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:33.145847 2026] [proxy_fcgi:error] [pid 38697:tid 38734] [client 4.204.239.169:24962] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:34.127447 2026] [proxy_fcgi:error] [pid 41573:tid 41598] [client 4.204.239.169:24990] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:35.090833 2026] [proxy_fcgi:error] [pid 38697:tid 38718] [client 4.204.239.169:41152] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:35.936498 2026] [proxy_fcgi:error] [pid 38697:tid 38717] [client 4.204.239.169:16685] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:36.804672 2026] [proxy_fcgi:error] [pid 41573:tid 41594] [client 4.204.239.169:36524] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:37.622459 2026] [proxy_fcgi:error] [pid 46815:tid 46820] [client 4.204.239.169:24802] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:38.460660 2026] [proxy_fcgi:error] [pid 38697:tid 38721] [client 4.204.239.169:61552] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:39.505786 2026] [proxy_fcgi:error] [pid 29823:tid 29851] [client 4.204.239.169:52248] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:40.341315 2026] [proxy_fcgi:error] [pid 46815:tid 46826] [client 4.204.239.169:35401] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:41.185522 2026] [proxy_fcgi:error] [pid 29823:tid 29855] [client 4.204.239.169:35408] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:42.295460 2026] [proxy_fcgi:error] [pid 38814:tid 38821] [client 4.204.239.169:28511] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:43.352255 2026] [proxy_fcgi:error] [pid 46815:tid 46818] [client 4.204.239.169:22126] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:44.485574 2026] [proxy_fcgi:error] [pid 46815:tid 46828] [client 4.204.239.169:34159] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:45.636759 2026] [proxy_fcgi:error] [pid 46896:tid 46915] [client 4.204.239.169:36510] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:46.581138 2026] [proxy_fcgi:error] [pid 38705:tid 38786] [client 4.204.239.169:34131] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:47.558423 2026] [proxy_fcgi:error] [pid 38699:tid 38744] [client 4.204.239.169:52251] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:48.786421 2026] [proxy_fcgi:error] [pid 46815:tid 46822] [client 4.204.239.169:9502] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:49.618125 2026] [proxy_fcgi:error] [pid 29823:tid 29856] [client 4.204.239.169:18806] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:50.455597 2026] [proxy_fcgi:error] [pid 46815:tid 46825] [client 4.204.239.169:35446] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:51.277148 2026] [proxy_fcgi:error] [pid 46815:tid 46841] [client 4.204.239.169:52243] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:52.338383 2026] [proxy_fcgi:error] [pid 46815:tid 46836] [client 4.204.239.169:39770] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:53.423480 2026] [proxy_fcgi:error] [pid 46815:tid 46822] [client 4.204.239.169:61566] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:54.445264 2026] [proxy_fcgi:error] [pid 46815:tid 46818] [client 4.204.239.169:39755] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:55.431549 2026] [proxy_fcgi:error] [pid 46896:tid 46898] [client 4.204.239.169:31166] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:56.436245 2026] [proxy_fcgi:error] [pid 29823:tid 29842] [client 4.204.239.169:37983] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:57.388226 2026] [proxy_fcgi:error] [pid 38705:tid 38792] [client 4.204.239.169:9528] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:58.507492 2026] [proxy_fcgi:error] [pid 41573:tid 41593] [client 4.204.239.169:47090] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:00:59.375461 2026] [proxy_fcgi:error] [pid 38814:tid 38827] [client 4.204.239.169:38007] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:00.359925 2026] [proxy_fcgi:error] [pid 38699:tid 38762] [client 4.204.239.169:30978] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:01.316484 2026] [proxy_fcgi:error] [pid 46896:tid 46917] [client 4.204.239.169:34413] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:02.132469 2026] [proxy_fcgi:error] [pid 38814:tid 38835] [client 4.204.239.169:38614] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:02.688073 2026] [proxy_fcgi:error] [pid 38814:tid 38839] [client 4.204.239.169:38614] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:03.535308 2026] [proxy_fcgi:error] [pid 46896:tid 46906] [client 4.204.239.169:32432] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:04.393696 2026] [proxy_fcgi:error] [pid 29823:tid 29862] [client 4.204.239.169:63723] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:05.440671 2026] [proxy_fcgi:error] [pid 41573:tid 41577] [client 4.204.239.169:63693] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:06.506651 2026] [proxy_fcgi:error] [pid 38705:tid 38774] [client 4.204.239.169:48180] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:07.722718 2026] [proxy_fcgi:error] [pid 29823:tid 29856] [client 4.204.239.169:33626] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:08.677118 2026] [proxy_fcgi:error] [pid 29823:tid 29861] [client 4.204.239.169:53511] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:09.623942 2026] [proxy_fcgi:error] [pid 41573:tid 41587] [client 4.204.239.169:63766] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:10.536655 2026] [proxy_fcgi:error] [pid 29823:tid 29858] [client 4.204.239.169:33657] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:11.498840 2026] [proxy_fcgi:error] [pid 46896:tid 46912] [client 4.204.239.169:20125] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:12.489500 2026] [proxy_fcgi:error] [pid 38699:tid 38766] [client 4.204.239.169:53517] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:13.390647 2026] [proxy_fcgi:error] [pid 38705:tid 38772] [client 4.204.239.169:24574] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:14.277806 2026] [proxy_fcgi:error] [pid 38814:tid 38837] [client 4.204.239.169:20136] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:15.144033 2026] [proxy_fcgi:error] [pid 38699:tid 38759] [client 4.204.239.169:53564] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:15.966628 2026] [proxy_fcgi:error] [pid 46815:tid 46834] [client 4.204.239.169:9453] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:16.892397 2026] [proxy_fcgi:error] [pid 38705:tid 38779] [client 4.204.239.169:38035] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:17.781402 2026] [proxy_fcgi:error] [pid 29823:tid 29836] [client 4.204.239.169:38043] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:18.625679 2026] [proxy_fcgi:error] [pid 46815:tid 46836] [client 4.204.239.169:33608] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:19.491481 2026] [proxy_fcgi:error] [pid 46815:tid 46827] [client 4.204.239.169:38066] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:20.412045 2026] [proxy_fcgi:error] [pid 38697:tid 38728] [client 4.204.239.169:20106] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:21.318103 2026] [proxy_fcgi:error] [pid 46815:tid 46823] [client 4.204.239.169:49305] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:22.133915 2026] [proxy_fcgi:error] [pid 38697:tid 38726] [client 4.204.239.169:24280] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:22.990149 2026] [proxy_fcgi:error] [pid 46896:tid 46922] [client 4.204.239.169:48153] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:23.963295 2026] [proxy_fcgi:error] [pid 38697:tid 38716] [client 4.204.239.169:24298] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:24.815622 2026] [proxy_fcgi:error] [pid 38814:tid 38820] [client 4.204.239.169:30957] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:25.675821 2026] [proxy_fcgi:error] [pid 38697:tid 38736] [client 4.204.239.169:32986] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:26.467842 2026] [proxy_fcgi:error] [pid 46815:tid 46830] [client 4.204.239.169:63807] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:27.325065 2026] [proxy_fcgi:error] [pid 38697:tid 38734] [client 4.204.239.169:24549] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:28.142446 2026] [proxy_fcgi:error] [pid 38697:tid 38737] [client 4.204.239.169:55584] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:29.114795 2026] [proxy_fcgi:error] [pid 38697:tid 38725] [client 4.204.239.169:9416] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:30.140359 2026] [proxy_fcgi:error] [pid 38814:tid 38826] [client 4.204.239.169:49316] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:31.078693 2026] [proxy_fcgi:error] [pid 29823:tid 29855] [client 4.204.239.169:32960] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:31.923977 2026] [proxy_fcgi:error] [pid 46815:tid 46836] [client 4.204.239.169:55560] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:32.872571 2026] [proxy_fcgi:error] [pid 46815:tid 46829] [client 4.204.239.169:9435] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:33.688808 2026] [proxy_fcgi:error] [pid 46815:tid 46832] [client 4.204.239.169:63746] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:34.552214 2026] [proxy_fcgi:error] [pid 46815:tid 46835] [client 4.204.239.169:38245] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:35.352431 2026] [proxy_fcgi:error] [pid 46815:tid 46841] [client 4.204.239.169:38252] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:36.151766 2026] [proxy_fcgi:error] [pid 38814:tid 38817] [client 4.204.239.169:55567] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:37.048829 2026] [proxy_fcgi:error] [pid 46815:tid 46829] [client 4.204.239.169:49281] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 15:01:37.846635 2026] [proxy_fcgi:error] [pid 29823:tid 29853] [client 4.204.239.169:9450] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 16:54:57.820983 2026] [proxy_fcgi:error] [pid 38814:tid 38830] [client 205.210.31.102:60430] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 17:34:01.345168 2026] [proxy_fcgi:error] [pid 38697:tid 38723] [client 74.7.230.49:48858] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 19:57:41.773668 2026] [proxy_fcgi:error] [pid 29823:tid 29841] [client 180.214.239.10:55264] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 20:05:18.358570 2026] [proxy_fcgi:error] [pid 55881:tid 55895] [client 74.7.244.46:43590] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 23:35:44.906435 2026] [proxy_fcgi:error] [pid 29823:tid 29857] [client 185.234.9.78:43882] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 19 23:35:52.644877 2026] [proxy_fcgi:error] [pid 46815:tid 46817] [client 185.234.9.78:37536] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 02:35:23.716458 2026] [proxy_fcgi:error] [pid 55881:tid 55886] [client 38.60.233.8:42202] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 02:35:25.433394 2026] [proxy_fcgi:error] [pid 55881:tid 55899] [client 38.60.233.8:42202] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 02:35:28.223009 2026] [proxy_fcgi:error] [pid 29622:tid 29640] [client 3.113.80.63:46470] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 02:36:00.811175 2026] [proxy_fcgi:error] [pid 38699:tid 38754] [client 165.22.248.46:32828] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 02:36:44.871009 2026] [:error] [pid 46815:tid 46833] [client 154.12.254.44:45462] [client 154.12.254.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.12.254.44, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "agytvCPnRhJOmA06LgqTRgAAAVA"]
[Wed May 20 02:36:45.236883 2026] [proxy_fcgi:error] [pid 46815:tid 46833] [client 154.12.254.44:45462] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 02:38:37.313384 2026] [proxy_fcgi:error] [pid 41573:tid 41589] [client 116.118.48.239:47852] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 02:38:50.451630 2026] [proxy_fcgi:error] [pid 38699:tid 38761] [client 167.86.98.130:46214] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 02:38:54.092149 2026] [proxy_fcgi:error] [pid 41573:tid 41597] [client 89.234.67.101:40786] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 02:41:42.052470 2026] [proxy_fcgi:error] [pid 38697:tid 38730] [client 18.61.192.253:54904] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 02:42:18.406689 2026] [proxy_fcgi:error] [pid 38814:tid 38818] [client 103.69.196.177:52840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 05:07:08.098070 2026] [proxy_fcgi:error] [pid 59349:tid 59373] [client 192.71.2.119:33343] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 08:18:48.629191 2026] [proxy_fcgi:error] [pid 44059:tid 44083] [client 192.175.111.249:17700] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 09:46:29.164894 2026] [proxy_fcgi:error] [pid 44059:tid 44073] [client 153.75.250.149:28484] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 09:46:30.253229 2026] [proxy_fcgi:error] [pid 44059:tid 44084] [client 153.75.250.149:28484] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 10:28:10.106175 2026] [proxy_fcgi:error] [pid 44059:tid 44084] [client 5.255.125.179:2894] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 14:04:06.602365 2026] [proxy_fcgi:error] [pid 41277:tid 41291] [client 74.7.243.242:48964] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 14:04:07.734670 2026] [proxy_fcgi:error] [pid 44059:tid 44073] [client 74.7.230.49:58580] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 14:33:58.983673 2026] [proxy_fcgi:error] [pid 7731:tid 7749] [client 34.46.57.55:57592] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 15:58:53.455891 2026] [proxy_fcgi:error] [pid 7731:tid 7754] [client 38.43.93.130:46618] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Wed May 20 16:49:41.121027 2026] [proxy_fcgi:error] [pid 44059:tid 44084] [client 192.36.109.84:51771] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:17:19.143357 2026] [proxy_fcgi:error] [pid 41278:tid 41328] [client 101.100.249.238:51190] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:17:19.762336 2026] [proxy_fcgi:error] [pid 41278:tid 41319] [client 101.100.249.238:51190] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:17:22.076731 2026] [proxy_fcgi:error] [pid 44059:tid 44064] [client 5.35.126.87:38998] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:17:28.604685 2026] [proxy_fcgi:error] [pid 7664:tid 7684] [client 41.111.171.133:40282] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:17:31.439677 2026] [proxy_fcgi:error] [pid 7731:tid 7752] [client 101.100.249.238:51186] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:17:41.513039 2026] [:error] [pid 44059:tid 44068] [client 51.161.172.164:48444] [client 51.161.172.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.161.172.164, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "ag3epRfFs-oSOOcyjyxOdgAAAQc"]
[Thu May 21 00:17:41.842149 2026] [proxy_fcgi:error] [pid 44059:tid 44068] [client 51.161.172.164:48444] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:17:42.148945 2026] [proxy_fcgi:error] [pid 44059:tid 44061] [client 89.252.139.70:42462] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:17:42.960416 2026] [proxy_fcgi:error] [pid 41279:tid 41343] [client 94.130.198.204:33020] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:17:42.967965 2026] [proxy_fcgi:error] [pid 7664:tid 7675] [client 198.38.81.14:34368] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:17:43.925886 2026] [proxy_fcgi:error] [pid 41279:tid 41357] [client 94.130.198.204:33020] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:17:59.488674 2026] [proxy_fcgi:error] [pid 41279:tid 41352] [client 51.104.44.27:52082] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:18:21.240926 2026] [proxy_fcgi:error] [pid 7664:tid 7668] [client 45.77.6.68:53960] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:18:25.311096 2026] [:error] [pid 41364:tid 41371] [client 212.83.150.177:56352] [client 212.83.150.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users"] [unique_id "ag3e0RKTmyvxtNXrN-gSiwAAAIU"]
[Thu May 21 00:18:45.434081 2026] [proxy_fcgi:error] [pid 44059:tid 44066] [client 86.107.77.112:59284] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:18:57.062194 2026] [proxy_fcgi:error] [pid 41364:tid 41380] [client 81.16.172.97:36924] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:18:57.124141 2026] [proxy_fcgi:error] [pid 7664:tid 7675] [client 135.125.5.71:46170] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:19:06.041993 2026] [proxy_fcgi:error] [pid 41364:tid 41389] [client 98.156.100.191:43152] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:19:27.047280 2026] [proxy_fcgi:error] [pid 7664:tid 7667] [client 50.6.192.190:38082] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:19:44.532252 2026] [proxy_fcgi:error] [pid 41364:tid 41374] [client 51.161.172.164:53222] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:20:54.369172 2026] [proxy_fcgi:error] [pid 41279:tid 41339] [client 38.99.81.38:39768] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:21:55.347162 2026] [proxy_fcgi:error] [pid 41364:tid 41381] [client 51.161.172.164:33412] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:23:25.940649 2026] [proxy_fcgi:error] [pid 44059:tid 44083] [client 94.130.198.204:52758] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 00:25:33.504367 2026] [proxy_fcgi:error] [pid 41279:tid 41359] [client 157.230.148.169:34292] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 01:30:19.828841 2026] [proxy_fcgi:error] [pid 41278:tid 41328] [client 31.98.38.114:36947] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 01:53:50.145457 2026] [proxy_fcgi:error] [pid 41279:tid 41345] [client 74.7.241.48:36276] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 01:53:51.001847 2026] [proxy_fcgi:error] [pid 7664:tid 7671] [client 74.7.244.46:57054] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:04:34.520322 2026] [proxy_fcgi:error] [pid 41364:tid 41375] [client 66.249.73.205:61140] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:12:16.042200 2026] [proxy_fcgi:error] [pid 41364:tid 41389] [client 101.100.249.238:57436] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:12:17.428648 2026] [proxy_fcgi:error] [pid 41364:tid 41374] [client 101.100.249.238:57436] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:12:26.564362 2026] [proxy_fcgi:error] [pid 41278:tid 41325] [client 85.131.213.55:51956] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:12:26.925887 2026] [proxy_fcgi:error] [pid 7731:tid 7752] [client 45.77.6.68:42760] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:12:27.251885 2026] [proxy_fcgi:error] [pid 44059:tid 44085] [client 142.93.171.165:49300] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:12:30.103205 2026] [proxy_fcgi:error] [pid 7664:tid 7684] [client 41.111.171.133:44364] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:12:32.314566 2026] [proxy_fcgi:error] [pid 41364:tid 41375] [client 101.100.249.238:35214] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:12:38.763152 2026] [proxy_fcgi:error] [pid 41278:tid 41327] [client 67.227.191.16:58562] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:12:44.069807 2026] [proxy_fcgi:error] [pid 7664:tid 7684] [client 104.244.79.40:57688] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:12:49.334065 2026] [proxy_fcgi:error] [pid 7731:tid 7740] [client 77.81.247.13:59362] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:13:29.313280 2026] [proxy_fcgi:error] [pid 41364:tid 41386] [client 138.68.243.214:57468] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:14:16.693088 2026] [proxy_fcgi:error] [pid 7731:tid 7733] [client 46.225.237.187:32900] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:14:17.007265 2026] [proxy_fcgi:error] [pid 7731:tid 7740] [client 190.92.158.246:36902] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:14:18.780979 2026] [proxy_fcgi:error] [pid 41277:tid 41288] [client 46.225.237.187:40810] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:15:20.691295 2026] [proxy_fcgi:error] [pid 41277:tid 41306] [client 138.68.243.214:39524] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:16:28.302270 2026] [proxy_fcgi:error] [pid 7664:tid 7683] [client 93.39.85.202:57596] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:16:58.912967 2026] [proxy_fcgi:error] [pid 41277:tid 41288] [client 103.27.63.13:11398] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:19:12.903959 2026] [proxy_fcgi:error] [pid 7731:tid 7756] [client 69.49.112.72:15660] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:20:18.258745 2026] [proxy_fcgi:error] [pid 41364:tid 41379] [client 24.199.108.111:60952] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 02:20:36.204597 2026] [proxy_fcgi:error] [pid 41364:tid 41380] [client 3.94.31.177:45418] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 07:47:42.168004 2026] [:error] [pid 9189:tid 9226] [client 135.119.26.13:17355] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ag5IHpvTDh1NbYizKVwdVwAAAgc"]
[Thu May 21 07:47:43.189187 2026] [:error] [pid 49982:tid 49997] [client 135.119.26.13:17375] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ag5IH2FwIDa5Tf8O4bY5-wAAAM0"]
[Thu May 21 07:47:43.756517 2026] [:error] [pid 49982:tid 49985] [client 135.119.26.13:17376] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ag5IH2FwIDa5Tf8O4bY5_gAAAME"]
[Thu May 21 07:47:44.428788 2026] [:error] [pid 49877:tid 49906] [client 135.119.26.13:17283] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ag5IIBgN4MeSe4kIL9ACrwAAABI"]
[Thu May 21 07:48:40.289395 2026] [proxy_fcgi:error] [pid 49877:tid 49908] [client 43.165.1.24:60434] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 07:48:40.289700 2026] [:error] [pid 49877:tid 49908] [client 43.165.1.24:60434] [client 43.165.1.24] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:_wpnonce" required. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ag5IVxgN4MeSe4kIL9ACyAAAABQ"]
[Thu May 21 07:48:40.289833 2026] [proxy_fcgi:error] [pid 49877:tid 49908] (20014)Internal error (specific information not available): [client 43.165.1.24:60434] AH01075: Error dispatching request to : (passing brigade to output filters)
[Thu May 21 09:18:15.723648 2026] [proxy_fcgi:error] [pid 49877:tid 49906] [client 77.36.124.136:4613] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 10:12:25.458610 2026] [proxy_fcgi:error] [pid 9114:tid 9116] [client 15.204.183.221:51856] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 11:35:29.136896 2026] [proxy_fcgi:error] [pid 49982:tid 49991] [client 15.204.183.221:19738] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 13:19:46.085622 2026] [proxy_fcgi:error] [pid 49884:tid 49971] [client 74.7.230.49:40164] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 14:20:02.263746 2026] [proxy_fcgi:error] [pid 49884:tid 49957] [client 15.204.161.7:16090] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 14:38:04.606404 2026] [proxy_fcgi:error] [pid 49884:tid 49958] [client 192.175.111.233:35418] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 15:39:58.852844 2026] [proxy_fcgi:error] [pid 49884:tid 49971] [client 15.204.161.7:11892] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 15:56:30.630751 2026] [proxy_fcgi:error] [pid 9189:tid 9223] [client 132.145.183.153:53410] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 15:56:32.953647 2026] [proxy_fcgi:error] [pid 49884:tid 49949] [client 132.145.183.153:35872] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 17:48:17.123476 2026] [proxy_fcgi:error] [pid 49879:tid 49941] [client 40.160.16.154:44476] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 17:49:52.370440 2026] [:error] [pid 9189:tid 9237] [client 108.179.252.35:33050] [client 108.179.252.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.252.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7VQJvTDh1NbYizKVybaQAAAhI"]
[Thu May 21 17:49:52.699253 2026] [proxy_fcgi:error] [pid 9189:tid 9237] [client 108.179.252.35:33050] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 17:49:53.025629 2026] [:error] [pid 9189:tid 9236] [client 108.179.252.35:33050] [client 108.179.252.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.252.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7VQZvTDh1NbYizKVybagAAAhE"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 17:49:53.337701 2026] [proxy_fcgi:error] [pid 9189:tid 9236] [client 108.179.252.35:33050] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 18:23:36.305039 2026] [:error] [pid 49879:tid 49920] [client 190.92.174.86:60252] [client 190.92.174.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.86, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7dKIVqYDjFSyG2gFpZwQAAAEA"]
[Thu May 21 18:23:38.000685 2026] [proxy_fcgi:error] [pid 49879:tid 49920] [client 190.92.174.86:60252] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 18:23:38.211108 2026] [:error] [pid 49879:tid 49932] [client 190.92.174.86:60252] [client 190.92.174.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.86, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7dKoVqYDjFSyG2gFpZwgAAAEw"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 18:23:38.510676 2026] [proxy_fcgi:error] [pid 49879:tid 49932] [client 190.92.174.86:60252] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 18:32:00.620251 2026] [:error] [pid 9114:tid 9116] [client 35.168.16.231:50766] [client 35.168.16.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.168.16.231, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7fIG8FiJqDBEoTvqx0RAAAAUA"]
[Thu May 21 18:32:00.921818 2026] [proxy_fcgi:error] [pid 9114:tid 9116] [client 35.168.16.231:50766] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 18:32:01.129589 2026] [:error] [pid 9114:tid 9139] [client 35.168.16.231:50766] [client 35.168.16.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.168.16.231, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7fIW8FiJqDBEoTvqx0SAAAAVc"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 18:32:01.468429 2026] [proxy_fcgi:error] [pid 9114:tid 9139] [client 35.168.16.231:50766] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 18:32:29.444015 2026] [:error] [pid 49982:tid 50005] [client 162.241.2.36:50286] [client 162.241.2.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.2.36, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7fPWFwIDa5Tf8O4bbg2AAAANU"]
[Thu May 21 18:32:29.724350 2026] [proxy_fcgi:error] [pid 49982:tid 50005] [client 162.241.2.36:50286] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 18:32:30.039152 2026] [:error] [pid 49982:tid 50003] [client 162.241.2.36:50286] [client 162.241.2.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.2.36, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7fPmFwIDa5Tf8O4bbg2gAAANM"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 18:32:30.328188 2026] [proxy_fcgi:error] [pid 49982:tid 50003] [client 162.241.2.36:50286] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 18:33:16.443608 2026] [:error] [pid 9188:tid 9192] [client 65.0.161.248:55446] [client 65.0.161.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.0.161.248, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7fbLGYm6q5dNSUvA_V5wAAAcA"]
[Thu May 21 18:33:16.711057 2026] [proxy_fcgi:error] [pid 9188:tid 9192] [client 65.0.161.248:55446] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 18:33:17.482684 2026] [:error] [pid 9188:tid 9199] [client 65.0.161.248:55446] [client 65.0.161.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.0.161.248, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7fbbGYm6q5dNSUvA_V6gAAAcc"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 18:33:17.760641 2026] [proxy_fcgi:error] [pid 9188:tid 9199] [client 65.0.161.248:55446] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 18:38:00.886789 2026] [proxy_fcgi:error] [pid 9114:tid 9131] [client 40.160.16.154:18362] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 18:41:31.171839 2026] [:error] [pid 49982:tid 49991] [client 65.254.225.233:58532] [client 65.254.225.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.233, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7hW2FwIDa5Tf8O4bbi5wAAAMc"]
[Thu May 21 18:41:31.470328 2026] [proxy_fcgi:error] [pid 49982:tid 49991] [client 65.254.225.233:58532] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 18:41:31.816907 2026] [:error] [pid 49982:tid 50002] [client 65.254.225.233:58532] [client 65.254.225.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.233, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7hW2FwIDa5Tf8O4bbi6gAAANI"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 18:41:32.137793 2026] [proxy_fcgi:error] [pid 49982:tid 50002] [client 65.254.225.233:58532] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 18:43:23.548834 2026] [:error] [pid 9189:tid 9241] [client 3.133.180.32:42488] [client 3.133.180.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.133.180.32, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7hy5vTDh1NbYizKVykkQAAAhY"]
[Thu May 21 18:43:23.865290 2026] [proxy_fcgi:error] [pid 9189:tid 9241] [client 3.133.180.32:42488] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 18:43:24.199819 2026] [:error] [pid 9189:tid 9240] [client 3.133.180.32:42488] [client 3.133.180.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.133.180.32, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7hzJvTDh1NbYizKVykkgAAAhU"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 18:43:24.504572 2026] [proxy_fcgi:error] [pid 9189:tid 9240] [client 3.133.180.32:42488] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 18:46:22.667890 2026] [proxy_fcgi:error] [pid 9189:tid 9235] [client 74.7.244.46:55302] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 18:52:20.481995 2026] [:error] [pid 49884:tid 49960] [client 209.142.64.245:58406] [client 209.142.64.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.142.64.245, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7j5K5MPpsTNNHWS6jGygAAAI0"]
[Thu May 21 18:52:21.152628 2026] [proxy_fcgi:error] [pid 49884:tid 49960] [client 209.142.64.245:58406] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 18:52:23.187718 2026] [:error] [pid 49884:tid 49950] [client 209.142.64.245:58406] [client 209.142.64.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.142.64.245, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7j565MPpsTNNHWS6jGywAAAIM"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 18:52:23.499793 2026] [proxy_fcgi:error] [pid 49884:tid 49950] [client 209.142.64.245:58406] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 19:26:11.440431 2026] [:error] [pid 51613:tid 51627] [client 47.131.85.251:45226] [client 47.131.85.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.131.85.251, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7r02bP0MDvqrVnwer4rAAAAQw"]
[Thu May 21 19:26:11.873522 2026] [proxy_fcgi:error] [pid 51613:tid 51627] [client 47.131.85.251:45226] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 19:26:11.972302 2026] [:error] [pid 51613:tid 51630] [client 47.131.85.251:45226] [client 47.131.85.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.131.85.251, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7r02bP0MDvqrVnwer4rgAAAQ8"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 19:26:12.290230 2026] [proxy_fcgi:error] [pid 51613:tid 51630] [client 47.131.85.251:45226] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 19:33:02.610685 2026] [:error] [pid 9189:tid 9231] [client 43.98.255.162:50110] [client 43.98.255.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.98.255.162, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7tbpvTDh1NbYizKVytegAAAgw"]
[Thu May 21 19:33:03.001301 2026] [proxy_fcgi:error] [pid 9189:tid 9231] [client 43.98.255.162:50110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 19:33:04.558365 2026] [:error] [pid 9189:tid 9221] [client 43.98.255.162:50110] [client 43.98.255.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.98.255.162, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7tcJvTDh1NbYizKVytfgAAAgI"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 19:33:04.851354 2026] [proxy_fcgi:error] [pid 9189:tid 9221] [client 43.98.255.162:50110] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 19:39:02.614550 2026] [:error] [pid 49884:tid 49956] [client 198.57.247.148:16752] [client 198.57.247.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.57.247.148, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7u1q5MPpsTNNHWS6jVcQAAAIk"]
[Thu May 21 19:39:03.084130 2026] [proxy_fcgi:error] [pid 49884:tid 49956] [client 198.57.247.148:16752] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 19:39:03.248789 2026] [:error] [pid 49884:tid 49969] [client 198.57.247.148:16752] [client 198.57.247.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.57.247.148, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7u165MPpsTNNHWS6jVeAAAAJY"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 19:39:03.557851 2026] [proxy_fcgi:error] [pid 49884:tid 49969] [client 198.57.247.148:16752] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 19:47:24.279872 2026] [:error] [pid 49884:tid 49955] [client 178.128.36.92:48042] [client 178.128.36.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.36.92, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7wzK5MPpsTNNHWS6jYpgAAAIg"]
[Thu May 21 19:47:25.105543 2026] [proxy_fcgi:error] [pid 49884:tid 49955] [client 178.128.36.92:48042] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 19:47:25.737820 2026] [:error] [pid 49884:tid 49962] [client 178.128.36.92:48042] [client 178.128.36.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.36.92, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7wza5MPpsTNNHWS6jYpwAAAI8"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 19:47:26.044399 2026] [proxy_fcgi:error] [pid 49884:tid 49962] [client 178.128.36.92:48042] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 19:53:46.665647 2026] [:error] [pid 49982:tid 50008] [client 159.203.25.248:46132] [client 159.203.25.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.25.248, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7ySmFwIDa5Tf8O4bbzYQAAANg"]
[Thu May 21 19:53:47.057141 2026] [proxy_fcgi:error] [pid 49982:tid 50008] [client 159.203.25.248:46132] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 19:53:48.102622 2026] [:error] [pid 49982:tid 49992] [client 159.203.25.248:46132] [client 159.203.25.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.25.248, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7yTGFwIDa5Tf8O4bbzYgAAAMg"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 19:53:48.395574 2026] [proxy_fcgi:error] [pid 49982:tid 49992] [client 159.203.25.248:46132] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 19:57:42.111443 2026] [:error] [pid 49884:tid 49971] [client 67.205.18.1:50424] [client 67.205.18.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.205.18.1, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7zNq5MPpsTNNHWS6jadAAAAJg"]
[Thu May 21 19:57:42.411782 2026] [proxy_fcgi:error] [pid 49884:tid 49971] [client 67.205.18.1:50424] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 19:57:42.624613 2026] [:error] [pid 49884:tid 49962] [client 67.205.18.1:50424] [client 67.205.18.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.205.18.1, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag7zNq5MPpsTNNHWS6jadQAAAI8"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 19:57:42.935303 2026] [proxy_fcgi:error] [pid 49884:tid 49962] [client 67.205.18.1:50424] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 20:11:48.228718 2026] [proxy_fcgi:error] [pid 9188:tid 9208] [client 66.249.73.204:58159] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 20:45:01.105278 2026] [proxy_fcgi:error] [pid 49982:tid 49996] [client 138.246.253.24:59770] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 20:55:40.544610 2026] [:error] [pid 49982:tid 49990] [client 103.6.196.39:46250] [client 103.6.196.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.6.196.39, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag8AzGFwIDa5Tf8O4bYChwAAAMY"]
[Thu May 21 20:55:40.985163 2026] [proxy_fcgi:error] [pid 49982:tid 49990] [client 103.6.196.39:46250] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 20:55:41.081352 2026] [:error] [pid 49982:tid 49994] [client 103.6.196.39:46250] [client 103.6.196.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.6.196.39, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag8AzWFwIDa5Tf8O4bYCiAAAAMo"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 20:55:41.369814 2026] [proxy_fcgi:error] [pid 49982:tid 49994] [client 103.6.196.39:46250] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 21:52:43.090858 2026] [proxy_fcgi:error] [pid 9188:tid 9209] [client 3.106.246.206:50420] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 21:59:39.502251 2026] [:error] [pid 9114:tid 9120] [client 103.27.63.13:42933] [client 103.27.63.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.27.63.13, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag8Py28FiJqDBEoTvqyGDgAAAUQ"]
[Thu May 21 21:59:41.240313 2026] [proxy_fcgi:error] [pid 9114:tid 9120] [client 103.27.63.13:42933] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 21:59:41.405801 2026] [:error] [pid 9114:tid 9116] [client 103.27.63.13:42933] [client 103.27.63.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.27.63.13, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag8PzW8FiJqDBEoTvqyGEAAAAUA"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 21:59:41.697091 2026] [proxy_fcgi:error] [pid 9114:tid 9116] [client 103.27.63.13:42933] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 22:02:15.745455 2026] [:error] [pid 49982:tid 49994] [client 168.144.30.105:60162] [client 168.144.30.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.144.30.105, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag8QZ2FwIDa5Tf8O4bYRDwAAAMo"]
[Thu May 21 22:02:16.079531 2026] [proxy_fcgi:error] [pid 49982:tid 49994] [client 168.144.30.105:60162] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 22:02:16.266417 2026] [:error] [pid 49982:tid 50001] [client 168.144.30.105:60162] [client 168.144.30.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.144.30.105, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag8QaGFwIDa5Tf8O4bYREQAAANE"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 22:02:16.583369 2026] [proxy_fcgi:error] [pid 49982:tid 50001] [client 168.144.30.105:60162] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 22:34:40.345213 2026] [:error] [pid 49884:tid 49962] [client 192.248.32.140:48070] [client 192.248.32.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.248.32.140, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag8YAK5MPpsTNNHWS6gLIAAAAI8"]
[Thu May 21 22:34:40.709582 2026] [proxy_fcgi:error] [pid 49884:tid 49962] [client 192.248.32.140:48070] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 22:34:41.042113 2026] [:error] [pid 49884:tid 49956] [client 192.248.32.140:48070] [client 192.248.32.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.248.32.140, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag8YAa5MPpsTNNHWS6gLIgAAAIk"], referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 22:34:41.332192 2026] [proxy_fcgi:error] [pid 49884:tid 49956] [client 192.248.32.140:48070] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Thu May 21 23:16:22.493394 2026] [proxy_fcgi:error] [pid 49884:tid 49950] [client 88.151.33.237:59612] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Thu May 21 23:24:08.912727 2026] [proxy_fcgi:error] [pid 49982:tid 49986] [client 34.150.255.112:53567] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 01:32:55.858039 2026] [:error] [pid 49982:tid 49999] [client 104.244.79.40:34104] [client 104.244.79.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.79.40, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag9Bx2FwIDa5Tf8O4bY3AwAAAM8"]
[Fri May 22 01:32:56.184148 2026] [proxy_fcgi:error] [pid 49982:tid 49999] [client 104.244.79.40:34104] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 01:32:56.524921 2026] [:error] [pid 49982:tid 49990] [client 104.244.79.40:34104] [client 104.244.79.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.79.40, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag9ByGFwIDa5Tf8O4bY3BQAAAMY"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 01:32:56.818432 2026] [proxy_fcgi:error] [pid 49982:tid 49990] [client 104.244.79.40:34104] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 01:49:10.176908 2026] [:error] [pid 38463:tid 38651] [client 198.177.123.157:50616] [client 198.177.123.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.177.123.157, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag9Flh4oIQTtH1fRix0fNwAAAk0"]
[Fri May 22 01:49:11.036369 2026] [proxy_fcgi:error] [pid 38463:tid 38651] [client 198.177.123.157:50616] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 01:49:11.392249 2026] [:error] [pid 38463:tid 38662] [client 198.177.123.157:50616] [client 198.177.123.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.177.123.157, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag9Flx4oIQTtH1fRix0fOAAAAlg"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 01:49:11.695752 2026] [proxy_fcgi:error] [pid 38463:tid 38662] [client 198.177.123.157:50616] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 02:21:53.586790 2026] [proxy_fcgi:error] [pid 49877:tid 49889] [client 143.105.111.140:57837] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 02:26:34.757044 2026] [:error] [pid 49884:tid 49970] [client 3.133.180.32:50914] [client 3.133.180.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.133.180.32, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag9OWq5MPpsTNNHWS6g02wAAAJc"]
[Fri May 22 02:26:35.071417 2026] [proxy_fcgi:error] [pid 49884:tid 49970] [client 3.133.180.32:50914] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 02:26:35.410094 2026] [:error] [pid 49884:tid 49964] [client 3.133.180.32:50914] [client 3.133.180.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.133.180.32, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag9OW65MPpsTNNHWS6g03QAAAJE"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 02:26:35.707652 2026] [proxy_fcgi:error] [pid 49884:tid 49964] [client 3.133.180.32:50914] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 02:37:28.353794 2026] [:error] [pid 9157:tid 9162] [client 45.55.33.147:52290] [client 45.55.33.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.55.33.147, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag9Q6MGfHcLNqE8m88LBzgAAAYM"]
[Fri May 22 02:37:28.751206 2026] [proxy_fcgi:error] [pid 9157:tid 9162] [client 45.55.33.147:52290] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 02:37:29.403056 2026] [:error] [pid 9157:tid 9171] [client 45.55.33.147:52290] [client 45.55.33.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.55.33.147, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag9Q6cGfHcLNqE8m88LB0AAAAYw"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 02:37:29.701864 2026] [proxy_fcgi:error] [pid 9157:tid 9171] [client 45.55.33.147:52290] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 04:24:36.150966 2026] [proxy_fcgi:error] [pid 15585:tid 15667] [client 130.89.144.166:56107] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 04:24:36.956716 2026] [proxy_fcgi:error] [pid 15679:tid 15690] [client 130.89.144.166:38702] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 05:11:25.623352 2026] [proxy_fcgi:error] [pid 58813:tid 58836] [client 74.7.230.49:41076] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 05:44:41.059517 2026] [:error] [pid 15679:tid 15698] [client 3.128.142.167:43234] [client 3.128.142.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.128.142.167, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag98ySh8tgGc38WJ-GxjvAAAANE"]
[Fri May 22 05:44:41.380386 2026] [proxy_fcgi:error] [pid 15679:tid 15698] [client 3.128.142.167:43234] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 05:44:41.732376 2026] [:error] [pid 15679:tid 15691] [client 3.128.142.167:43234] [client 3.128.142.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.128.142.167, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag98ySh8tgGc38WJ-GxjvQAAAMo"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 05:44:42.041790 2026] [proxy_fcgi:error] [pid 15679:tid 15691] [client 3.128.142.167:43234] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 06:00:40.123213 2026] [proxy_fcgi:error] [pid 15585:tid 15666] [client 153.75.250.146:44232] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 06:00:41.779323 2026] [proxy_fcgi:error] [pid 15585:tid 15651] [client 153.75.250.146:44232] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 06:15:26.688745 2026] [:error] [pid 58813:tid 58824] [client 198.38.94.13:58822] [client 198.38.94.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.38.94.13, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag-D_p6yyKWDKULhxJ372QAAAUg"]
[Fri May 22 06:15:27.450600 2026] [proxy_fcgi:error] [pid 58813:tid 58824] [client 198.38.94.13:58822] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 06:15:27.705810 2026] [:error] [pid 58813:tid 58821] [client 198.38.94.13:58822] [client 198.38.94.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.38.94.13, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag-D_56yyKWDKULhxJ372wAAAUU"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 06:15:28.044271 2026] [proxy_fcgi:error] [pid 58813:tid 58821] [client 198.38.94.13:58822] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 07:42:33.671265 2026] [proxy_fcgi:error] [pid 58782:tid 58805] [client 34.4.103.226:50818] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 08:42:29.853150 2026] [:error] [pid 15679:tid 15703] [client 144.76.97.62:43928] [client 144.76.97.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.76.97.62, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag-mdSh8tgGc38WJ-GyW3wAAANY"]
[Fri May 22 08:42:30.208398 2026] [proxy_fcgi:error] [pid 15679:tid 15703] [client 144.76.97.62:43928] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 08:42:30.530948 2026] [:error] [pid 15679:tid 15700] [client 144.76.97.62:43928] [client 144.76.97.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.76.97.62, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag-mdih8tgGc38WJ-GyW4AAAANM"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 08:42:30.876830 2026] [proxy_fcgi:error] [pid 15679:tid 15700] [client 144.76.97.62:43928] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 08:50:33.104567 2026] [:error] [pid 15584:tid 15637] [client 69.164.206.232:50934] [client 69.164.206.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.164.206.232, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag-oWd9Z_TVLbNEx52icugAAAFE"]
[Fri May 22 08:50:33.696819 2026] [proxy_fcgi:error] [pid 15584:tid 15637] [client 69.164.206.232:50934] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 08:50:34.018846 2026] [:error] [pid 15584:tid 15638] [client 69.164.206.232:50934] [client 69.164.206.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.164.206.232, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag-oWt9Z_TVLbNEx52icvQAAAFI"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 08:50:34.372786 2026] [proxy_fcgi:error] [pid 15584:tid 15638] [client 69.164.206.232:50934] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 10:24:06.755053 2026] [:error] [pid 15585:tid 15660] [client 167.99.240.161:53972] [client 167.99.240.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.240.161, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag--RiKb-vB41AF-LC2vsAAAAI0"]
[Fri May 22 10:24:07.381977 2026] [proxy_fcgi:error] [pid 15585:tid 15660] [client 167.99.240.161:53972] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 10:24:08.439014 2026] [:error] [pid 15585:tid 15648] [client 167.99.240.161:54823] [client 167.99.240.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.240.161, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag--SCKb-vB41AF-LC2vtwAAAIE"]
[Fri May 22 10:24:08.766880 2026] [proxy_fcgi:error] [pid 15585:tid 15648] [client 167.99.240.161:54823] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 10:24:09.438465 2026] [proxy_fcgi:error] [pid 15585:tid 15665] [client 167.99.240.161:54823] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 10:24:10.813109 2026] [proxy_fcgi:error] [pid 58813:tid 58819] [client 167.99.240.161:55525] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 10:24:11.378975 2026] [proxy_fcgi:error] [pid 58813:tid 58822] [client 167.99.240.161:55525] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 10:30:52.390276 2026] [:error] [pid 15584:tid 15630] [client 198.38.94.67:41826] [client 198.38.94.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.38.94.67, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag-_3N9Z_TVLbNEx52i21AAAAEo"]
[Fri May 22 10:30:52.758742 2026] [proxy_fcgi:error] [pid 15584:tid 15630] [client 198.38.94.67:41826] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 10:30:53.641585 2026] [:error] [pid 15584:tid 15633] [client 198.38.94.67:41826] [client 198.38.94.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.38.94.67, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag-_3d9Z_TVLbNEx52i21QAAAE0"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 10:30:53.974215 2026] [proxy_fcgi:error] [pid 15584:tid 15633] [client 198.38.94.67:41826] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 10:46:36.238392 2026] [:error] [pid 58813:tid 58833] [client 64.225.121.94:45056] [client 64.225.121.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.225.121.94, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_DjJ6yyKWDKULhxJ0qsQAAAVE"]
[Fri May 22 10:46:37.022561 2026] [proxy_fcgi:error] [pid 58813:tid 58833] [client 64.225.121.94:45056] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 11:13:13.797116 2026] [:error] [pid 15585:tid 15660] [client 167.99.240.161:61861] [client 167.99.240.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.240.161, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_JySKb-vB41AF-LC3EFQAAAI0"]
[Fri May 22 11:13:14.175402 2026] [proxy_fcgi:error] [pid 15585:tid 15660] [client 167.99.240.161:61861] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 11:13:50.252329 2026] [:error] [pid 15679:tid 15683] [client 159.89.87.76:59648] [client 159.89.87.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.87.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_J7ih8tgGc38WJ-GzJ8wAAAMI"]
[Fri May 22 11:13:50.545888 2026] [proxy_fcgi:error] [pid 15679:tid 15683] [client 159.89.87.76:59648] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 11:13:51.449060 2026] [:error] [pid 15679:tid 15694] [client 159.89.87.76:59648] [client 159.89.87.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.87.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_J7yh8tgGc38WJ-GzJ9gAAAM0"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 11:13:51.724473 2026] [proxy_fcgi:error] [pid 15679:tid 15694] [client 159.89.87.76:59648] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 11:16:51.146050 2026] [:error] [pid 15679:tid 15686] [client 167.99.240.161:63544] [client 167.99.240.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.240.161, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_Koyh8tgGc38WJ-GzK6AAAAMU"]
[Fri May 22 11:16:51.485699 2026] [proxy_fcgi:error] [pid 15679:tid 15686] [client 167.99.240.161:63544] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 11:20:16.162039 2026] [:error] [pid 58813:tid 58827] [client 167.99.240.161:55399] [client 167.99.240.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.240.161, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_LcJ6yyKWDKULhxJ0wdQAAAUs"]
[Fri May 22 11:20:16.549537 2026] [proxy_fcgi:error] [pid 58813:tid 58827] [client 167.99.240.161:55399] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 11:23:14.101104 2026] [:error] [pid 58782:tid 58801] [client 111.109.37.114:36804] [client 111.109.37.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 111.109.37.114, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_MIoxsdTFafgO8vhTbsgAAARE"]
[Fri May 22 11:23:14.431090 2026] [proxy_fcgi:error] [pid 58782:tid 58801] [client 111.109.37.114:36804] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 11:23:15.528472 2026] [:error] [pid 58782:tid 58807] [client 111.109.37.114:36804] [client 111.109.37.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 111.109.37.114, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_MI4xsdTFafgO8vhTbswAAARc"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 11:23:15.825177 2026] [proxy_fcgi:error] [pid 58782:tid 58807] [client 111.109.37.114:36804] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 11:45:59.758208 2026] [:error] [pid 15584:tid 15630] [client 85.215.36.85:59902] [client 85.215.36.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.215.36.85, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_Rd99Z_TVLbNEx52jGbwAAAEo"]
[Fri May 22 11:46:00.381826 2026] [proxy_fcgi:error] [pid 15584:tid 15630] [client 85.215.36.85:59902] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 11:46:00.642940 2026] [:error] [pid 15584:tid 15624] [client 85.215.36.85:59902] [client 85.215.36.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.215.36.85, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_ReN9Z_TVLbNEx52jGcAAAAEQ"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 11:46:00.959015 2026] [proxy_fcgi:error] [pid 15584:tid 15624] [client 85.215.36.85:59902] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 11:46:58.731848 2026] [:error] [pid 15679:tid 15685] [client 108.179.252.35:12032] [client 108.179.252.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.252.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_Rsih8tgGc38WJ-GzS6QAAAMQ"]
[Fri May 22 11:46:59.294805 2026] [proxy_fcgi:error] [pid 15679:tid 15685] [client 108.179.252.35:12032] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 11:46:59.614444 2026] [:error] [pid 15679:tid 15705] [client 108.179.252.35:12032] [client 108.179.252.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.252.35, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_Rsyh8tgGc38WJ-GzS6gAAANg"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 11:46:59.911216 2026] [proxy_fcgi:error] [pid 15679:tid 15705] [client 108.179.252.35:12032] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 12:06:47.517060 2026] [:error] [pid 15583:tid 15595] [client 82.223.49.31:53336] [client 82.223.49.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.49.31, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_WV3naOncRcIm17YW82wAAAAc"]
[Fri May 22 12:06:47.876301 2026] [proxy_fcgi:error] [pid 15583:tid 15595] [client 82.223.49.31:53336] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 12:06:51.142543 2026] [:error] [pid 15583:tid 15612] [client 82.223.49.31:53336] [client 82.223.49.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.49.31, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_WW3naOncRcIm17YW84gAAABg"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 12:06:51.445564 2026] [proxy_fcgi:error] [pid 15583:tid 15612] [client 82.223.49.31:53336] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 12:23:16.940104 2026] [:error] [pid 15585:tid 15659] [client 45.131.195.223:61171] [client 45.131.195.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ag_aNCKb-vB41AF-LC3eCQAAAIw"]
[Fri May 22 12:25:26.335651 2026] [:error] [pid 15679:tid 15702] [client 176.9.144.171:49166] [client 176.9.144.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.9.144.171, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_atih8tgGc38WJ-GzdWgAAANU"]
[Fri May 22 12:25:26.685688 2026] [proxy_fcgi:error] [pid 15679:tid 15702] [client 176.9.144.171:49166] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 12:25:28.298128 2026] [:error] [pid 15679:tid 15703] [client 176.9.144.171:49166] [client 176.9.144.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.9.144.171, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_auCh8tgGc38WJ-GzdZgAAANY"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 12:25:28.593852 2026] [proxy_fcgi:error] [pid 15679:tid 15703] [client 176.9.144.171:49166] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 13:17:14.463883 2026] [:error] [pid 15679:tid 15681] [client 159.203.25.248:47088] [client 159.203.25.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.25.248, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_m2ih8tgGc38WJ-GztRQAAAMA"]
[Fri May 22 13:17:14.793525 2026] [proxy_fcgi:error] [pid 15679:tid 15681] [client 159.203.25.248:47088] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 13:17:15.195220 2026] [:error] [pid 15679:tid 15701] [client 159.203.25.248:47088] [client 159.203.25.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.25.248, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_m2yh8tgGc38WJ-GztSQAAANQ"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 13:17:15.498654 2026] [proxy_fcgi:error] [pid 15679:tid 15701] [client 159.203.25.248:47088] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 13:32:38.814426 2026] [:error] [pid 15585:tid 15650] [client 142.93.171.165:44644] [client 142.93.171.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.171.165, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_qdiKb-vB41AF-LC33ZwAAAIM"]
[Fri May 22 13:32:39.179262 2026] [proxy_fcgi:error] [pid 15585:tid 15650] [client 142.93.171.165:44644] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 13:32:39.461540 2026] [:error] [pid 15585:tid 15661] [client 142.93.171.165:44644] [client 142.93.171.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.171.165, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_qdyKb-vB41AF-LC33bAAAAI4"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 13:32:39.764761 2026] [proxy_fcgi:error] [pid 15585:tid 15661] [client 142.93.171.165:44644] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 13:40:24.868459 2026] [:error] [pid 15585:tid 15665] [client 69.163.181.218:36296] [client 69.163.181.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.163.181.218, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_sSCKb-vB41AF-LC35ywAAAJI"]
[Fri May 22 13:40:25.235407 2026] [proxy_fcgi:error] [pid 15585:tid 15665] [client 69.163.181.218:36296] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 13:40:26.283944 2026] [:error] [pid 15585:tid 15658] [client 69.163.181.218:36296] [client 69.163.181.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.163.181.218, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_sSiKb-vB41AF-LC350AAAAIs"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 13:40:26.587837 2026] [proxy_fcgi:error] [pid 15585:tid 15658] [client 69.163.181.218:36296] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 13:48:38.197731 2026] [proxy_fcgi:error] [pid 15585:tid 15651] [client 23.91.96.13:39296] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 13:48:51.602889 2026] [proxy_fcgi:error] [pid 15583:tid 15612] [client 103.28.36.220:45790] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 13:51:57.068917 2026] [:error] [pid 15679:tid 15699] [client 162.240.101.155:48418] [client 162.240.101.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.101.155, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_u_Sh8tgGc38WJ-Gz36QAAANI"]
[Fri May 22 13:51:57.444104 2026] [proxy_fcgi:error] [pid 15679:tid 15699] [client 162.240.101.155:48418] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 13:51:57.842552 2026] [:error] [pid 15679:tid 15703] [client 162.240.101.155:48418] [client 162.240.101.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.101.155, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_u_Sh8tgGc38WJ-Gz37AAAANY"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 13:51:58.139338 2026] [proxy_fcgi:error] [pid 15679:tid 15703] [client 162.240.101.155:48418] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 14:56:58.912945 2026] [:error] [pid 15585:tid 15651] [client 208.68.37.246:44690] [client 208.68.37.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.68.37.246, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_-OiKb-vB41AF-LC0YSAAAAIQ"]
[Fri May 22 14:57:00.677326 2026] [proxy_fcgi:error] [pid 15585:tid 15651] [client 208.68.37.246:44690] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 14:57:01.173103 2026] [:error] [pid 15585:tid 15662] [client 208.68.37.246:44690] [client 208.68.37.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.68.37.246, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ag_-PSKb-vB41AF-LC0YTwAAAI8"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 14:57:01.489765 2026] [proxy_fcgi:error] [pid 15585:tid 15662] [client 208.68.37.246:44690] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 15:10:59.566198 2026] [proxy_fcgi:error] [pid 15679:tid 15704] [client 43.165.125.97:63341] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 15:36:20.355738 2026] [proxy_fcgi:error] [pid 15679:tid 15682] [client 43.165.70.156:65386] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 15:44:58.994113 2026] [proxy_fcgi:error] [pid 15585:tid 15671] [client 23.106.28.103:64687] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 17:11:08.040554 2026] [:error] [pid 15585:tid 15665] [client 34.93.63.75:60341] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/"] [unique_id "ahAdrCKb-vB41AF-LC1JNgAAAJI"]
[Fri May 22 17:11:08.332420 2026] [:error] [pid 15584:tid 15644] [client 34.93.63.75:61990] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahAdrN9Z_TVLbNEx52gL_wAAAFg"]
[Fri May 22 17:11:08.622986 2026] [:error] [pid 15584:tid 15620] [client 34.93.63.75:63407] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "southerncrosscentre.au"] [uri "/feed/"] [unique_id "ahAdrN9Z_TVLbNEx52gMIAAAAEA"]
[Fri May 22 17:15:39.507584 2026] [proxy_fcgi:error] [pid 15584:tid 15620] [client 54.196.199.60:42664] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 17:15:39.785940 2026] [proxy_fcgi:error] [pid 15679:tid 15682] [client 54.196.199.60:39364] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 17:22:39.066799 2026] [proxy_fcgi:error] [pid 15583:tid 15593] [client 134.209.183.38:38146] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 17:22:39.932653 2026] [proxy_fcgi:error] [pid 15585:tid 15649] [client 134.209.183.38:38154] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: http://southerncrosscentre.au/
[Fri May 22 17:22:41.205781 2026] [proxy_fcgi:error] [pid 15679:tid 15697] [client 134.209.183.38:36834] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 17:22:47.402267 2026] [proxy_fcgi:error] [pid 58782:tid 58797] [client 134.209.183.38:51712] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/
[Fri May 22 21:28:18.339127 2026] [proxy_fcgi:error] [pid 58782:tid 58804] [client 34.26.247.152:56280] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 21:31:38.520435 2026] [proxy_fcgi:error] [pid 58782:tid 58807] [client 34.12.210.113:65087] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 21:48:24.878310 2026] [:error] [pid 15679:tid 15683] [client 64.31.31.90:37420] [client 64.31.31.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.31.31.90, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahBeqCh8tgGc38WJ-GxyewAAAMI"]
[Fri May 22 21:48:25.483490 2026] [proxy_fcgi:error] [pid 15679:tid 15683] [client 64.31.31.90:37420] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 21:48:26.577307 2026] [:error] [pid 15679:tid 15702] [client 64.31.31.90:37420] [client 64.31.31.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.31.31.90, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahBeqih8tgGc38WJ-GxyjQAAANU"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 21:48:26.875423 2026] [proxy_fcgi:error] [pid 15679:tid 15702] [client 64.31.31.90:37420] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 21:55:47.841119 2026] [proxy_fcgi:error] [pid 15584:tid 15644] [client 34.26.247.152:52442] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 21:58:43.998104 2026] [proxy_fcgi:error] [pid 15583:tid 15605] [client 35.188.61.13:64355] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:18:21.692407 2026] [proxy_fcgi:error] [pid 15584:tid 15631] [client 136.111.116.230:56409] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:33:35.072649 2026] [proxy_fcgi:error] [pid 15585:tid 15659] [client 34.75.130.177:61950] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:38:15.161808 2026] [proxy_fcgi:error] [pid 58813:tid 58827] [client 135.119.49.97:4050] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:38:18.387601 2026] [proxy_fcgi:error] [pid 15679:tid 15683] [client 135.119.49.97:25971] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:38:21.360591 2026] [proxy_fcgi:error] [pid 58813:tid 58830] [client 135.119.49.97:21127] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:38:29.847679 2026] [proxy_fcgi:error] [pid 58813:tid 58837] [client 135.119.49.97:25950] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:38:31.422752 2026] [proxy_fcgi:error] [pid 15584:tid 15640] [client 135.119.49.97:28050] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:38:33.767947 2026] [proxy_fcgi:error] [pid 58813:tid 58836] [client 135.119.49.97:25584] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:38:35.170841 2026] [proxy_fcgi:error] [pid 15583:tid 15597] [client 135.119.49.97:3317] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:38:37.224097 2026] [proxy_fcgi:error] [pid 58813:tid 58820] [client 135.119.49.97:29212] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:38:38.463277 2026] [proxy_fcgi:error] [pid 58813:tid 58832] [client 135.119.49.97:30026] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:38:40.242664 2026] [proxy_fcgi:error] [pid 15585:tid 15647] [client 135.119.49.97:29237] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:38:42.909999 2026] [proxy_fcgi:error] [pid 15679:tid 15682] [client 135.119.49.97:24809] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:38:44.636665 2026] [proxy_fcgi:error] [pid 15583:tid 15591] [client 135.119.49.97:3756] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:38:49.387221 2026] [proxy_fcgi:error] [pid 15585:tid 15649] [client 135.119.49.97:15687] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:38:54.122609 2026] [proxy_fcgi:error] [pid 15585:tid 15658] [client 135.119.49.97:3464] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:38:57.540796 2026] [proxy_fcgi:error] [pid 15584:tid 15622] [client 135.119.49.97:3487] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:00.918053 2026] [proxy_fcgi:error] [pid 15585:tid 15655] [client 135.119.49.97:3500] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:10.852290 2026] [proxy_fcgi:error] [pid 15585:tid 15654] [client 135.119.49.97:27476] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:14.172034 2026] [proxy_fcgi:error] [pid 15583:tid 15590] [client 135.119.49.97:15234] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:17.067315 2026] [proxy_fcgi:error] [pid 58782:tid 58807] [client 135.119.49.97:15291] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:18.338702 2026] [proxy_fcgi:error] [pid 15584:tid 15629] [client 135.119.49.97:25552] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:20.585396 2026] [proxy_fcgi:error] [pid 58813:tid 58834] [client 135.119.49.97:13929] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:22.047463 2026] [proxy_fcgi:error] [pid 15583:tid 15591] [client 135.119.49.97:25573] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:24.033679 2026] [proxy_fcgi:error] [pid 15585:tid 15657] [client 135.119.49.97:25572] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:27.380554 2026] [proxy_fcgi:error] [pid 15585:tid 15660] [client 135.119.49.97:16067] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:30.953760 2026] [:error] [pid 15583:tid 15607] [client 135.119.49.97:20032] [client 135.119.49.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "southerncrosscentre.au"] [uri "/tiny.php"] [unique_id "ahBqonnaOncRcIm17YUxjQAAABM"]
[Fri May 22 22:39:33.573463 2026] [proxy_fcgi:error] [pid 15583:tid 15599] [client 135.119.49.97:28334] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:42.004709 2026] [proxy_fcgi:error] [pid 15583:tid 15601] [client 135.119.49.97:23140] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:47.652890 2026] [proxy_fcgi:error] [pid 15583:tid 15605] [client 135.119.49.97:13872] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:50.330371 2026] [proxy_fcgi:error] [pid 15679:tid 15683] [client 135.119.49.97:13857] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:52.155782 2026] [proxy_fcgi:error] [pid 15679:tid 15694] [client 135.119.49.97:28096] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:53.908099 2026] [proxy_fcgi:error] [pid 15679:tid 15705] [client 135.119.49.97:13871] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:55.019721 2026] [proxy_fcgi:error] [pid 58813:tid 58833] [client 135.119.49.97:13863] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:56.579518 2026] [proxy_fcgi:error] [pid 15584:tid 15640] [client 135.119.49.97:19202] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:58.456676 2026] [proxy_fcgi:error] [pid 15679:tid 15700] [client 135.119.49.97:19207] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:39:59.617668 2026] [proxy_fcgi:error] [pid 15679:tid 15682] [client 135.119.49.97:17286] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:02.159207 2026] [proxy_fcgi:error] [pid 58813:tid 58819] [client 135.119.49.97:22685] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:03.837453 2026] [proxy_fcgi:error] [pid 15584:tid 15627] [client 135.119.49.97:17280] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:05.601709 2026] [proxy_fcgi:error] [pid 58782:tid 58796] [client 135.119.49.97:16915] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:07.504422 2026] [proxy_fcgi:error] [pid 15679:tid 15703] [client 135.119.49.97:23076] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:09.627181 2026] [proxy_fcgi:error] [pid 15584:tid 15625] [client 135.119.49.97:30963] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:12.259030 2026] [proxy_fcgi:error] [pid 58813:tid 58837] [client 135.119.49.97:18093] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:14.176314 2026] [proxy_fcgi:error] [pid 15583:tid 15597] [client 135.119.49.97:16949] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:15.555181 2026] [proxy_fcgi:error] [pid 58782:tid 58794] [client 135.119.49.97:18543] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:17.933812 2026] [proxy_fcgi:error] [pid 58813:tid 58833] [client 135.119.49.97:18109] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:19.354650 2026] [proxy_fcgi:error] [pid 15585:tid 15658] [client 135.119.49.97:20748] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:20.722371 2026] [proxy_fcgi:error] [pid 58782:tid 58804] [client 135.119.49.97:20755] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:21.537742 2026] [proxy_fcgi:error] [pid 58813:tid 58835] [client 135.119.49.97:17294] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:22.366949 2026] [proxy_fcgi:error] [pid 15584:tid 15640] [client 135.119.49.97:17315] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:23.766747 2026] [proxy_fcgi:error] [pid 15584:tid 15634] [client 135.119.49.97:21515] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:25.041534 2026] [proxy_fcgi:error] [pid 15584:tid 15637] [client 135.119.49.97:17298] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:27.173649 2026] [proxy_fcgi:error] [pid 15584:tid 15636] [client 135.119.49.97:16914] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:28.480887 2026] [proxy_fcgi:error] [pid 15584:tid 15641] [client 135.119.49.97:18551] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:33.307890 2026] [proxy_fcgi:error] [pid 58813:tid 58829] [client 135.119.49.97:25573] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:37.341286 2026] [proxy_fcgi:error] [pid 15583:tid 15594] [client 135.119.49.97:16972] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:46.704128 2026] [proxy_fcgi:error] [pid 15585:tid 15661] [client 135.119.49.97:3706] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:49.422685 2026] [proxy_fcgi:error] [pid 15584:tid 15629] [client 135.119.49.97:26720] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:51.921150 2026] [proxy_fcgi:error] [pid 15583:tid 15596] [client 135.119.49.97:26358] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:54.223505 2026] [proxy_fcgi:error] [pid 15585:tid 15650] [client 135.119.49.97:30591] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:55.904951 2026] [proxy_fcgi:error] [pid 15585:tid 15664] [client 135.119.49.97:27096] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:57.077050 2026] [proxy_fcgi:error] [pid 15584:tid 15638] [client 135.119.49.97:26350] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:40:59.907494 2026] [proxy_fcgi:error] [pid 15583:tid 15611] [client 135.119.49.97:27054] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:02.489944 2026] [proxy_fcgi:error] [pid 15584:tid 15634] [client 135.119.49.97:14691] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:06.532591 2026] [proxy_fcgi:error] [pid 15583:tid 15611] [client 135.119.49.97:30506] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:08.553316 2026] [proxy_fcgi:error] [pid 15679:tid 15698] [client 135.119.49.97:30487] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:12.124716 2026] [proxy_fcgi:error] [pid 58813:tid 58817] [client 135.119.49.97:27447] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:15.952038 2026] [proxy_fcgi:error] [pid 15583:tid 15590] [client 135.119.49.97:21589] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:18.409347 2026] [proxy_fcgi:error] [pid 58813:tid 58834] [client 135.119.49.97:18930] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:20.853211 2026] [proxy_fcgi:error] [pid 15583:tid 15609] [client 135.119.49.97:17724] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:22.845845 2026] [proxy_fcgi:error] [pid 15585:tid 15648] [client 135.119.49.97:19624] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:24.056734 2026] [proxy_fcgi:error] [pid 15679:tid 15698] [client 135.119.49.97:18844] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:25.821555 2026] [proxy_fcgi:error] [pid 58782:tid 58791] [client 135.119.49.97:19676] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:27.915566 2026] [proxy_fcgi:error] [pid 15584:tid 15644] [client 135.119.49.97:19656] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:28.834352 2026] [proxy_fcgi:error] [pid 15585:tid 15661] [client 135.119.49.97:15051] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:30.152081 2026] [proxy_fcgi:error] [pid 15583:tid 15610] [client 135.119.49.97:14311] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:32.205689 2026] [proxy_fcgi:error] [pid 15679:tid 15697] [client 135.119.49.97:19637] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:33.075984 2026] [proxy_fcgi:error] [pid 15679:tid 15699] [client 135.119.49.97:19660] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:34.918912 2026] [proxy_fcgi:error] [pid 15679:tid 15685] [client 135.119.49.97:18870] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:35.858272 2026] [proxy_fcgi:error] [pid 15583:tid 15601] [client 135.119.49.97:28049] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:37.909590 2026] [proxy_fcgi:error] [pid 15584:tid 15643] [client 135.119.49.97:19658] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:39.634091 2026] [proxy_fcgi:error] [pid 15583:tid 15606] [client 135.119.49.97:21607] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:41.191304 2026] [proxy_fcgi:error] [pid 15583:tid 15598] [client 135.119.49.97:15299] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:42.375767 2026] [proxy_fcgi:error] [pid 15583:tid 15611] [client 135.119.49.97:23509] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:44.179667 2026] [proxy_fcgi:error] [pid 15584:tid 15622] [client 135.119.49.97:18843] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:46.827843 2026] [proxy_fcgi:error] [pid 15585:tid 15667] [client 135.119.49.97:18821] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:49.274834 2026] [proxy_fcgi:error] [pid 15583:tid 15595] [client 135.119.49.97:16388] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:50.717851 2026] [proxy_fcgi:error] [pid 15583:tid 15593] [client 135.119.49.97:16407] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:52.613085 2026] [proxy_fcgi:error] [pid 58782:tid 58807] [client 135.119.49.97:28073] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:54.756650 2026] [proxy_fcgi:error] [pid 15583:tid 15612] [client 135.119.49.97:3363] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:41:57.039860 2026] [proxy_fcgi:error] [pid 15583:tid 15610] [client 135.119.49.97:16427] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:42:01.650257 2026] [proxy_fcgi:error] [pid 58813:tid 58827] [client 135.119.49.97:21214] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:42:04.992151 2026] [proxy_fcgi:error] [pid 58782:tid 58804] [client 135.119.49.97:29685] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:42:08.331881 2026] [proxy_fcgi:error] [pid 15679:tid 15697] [client 135.119.49.97:14266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:42:10.914683 2026] [proxy_fcgi:error] [pid 15584:tid 15627] [client 135.119.49.97:28092] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:42:13.756253 2026] [proxy_fcgi:error] [pid 58782:tid 58789] [client 135.119.49.97:29964] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:42:15.605789 2026] [proxy_fcgi:error] [pid 58813:tid 58817] [client 135.119.49.97:27784] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:42:16.711653 2026] [proxy_fcgi:error] [pid 58813:tid 58838] [client 135.119.49.97:29979] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:42:18.897469 2026] [proxy_fcgi:error] [pid 15585:tid 15666] [client 135.119.49.97:14249] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:42:23.920572 2026] [proxy_fcgi:error] [pid 15585:tid 15649] [client 135.119.49.97:27808] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:42:26.891595 2026] [proxy_fcgi:error] [pid 15583:tid 15593] [client 135.119.49.97:20476] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:42:28.013354 2026] [proxy_fcgi:error] [pid 58782:tid 58788] [client 135.119.49.97:26271] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:42:30.152667 2026] [proxy_fcgi:error] [pid 58782:tid 58792] [client 135.119.49.97:28064] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:42:32.482747 2026] [proxy_fcgi:error] [pid 15585:tid 15665] [client 135.119.49.97:27798] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:44:08.883909 2026] [:error] [pid 15679:tid 15688] [client 38.76.169.105:34064] [client 38.76.169.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.76.169.105, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahBruCh8tgGc38WJ-Gx-HgAAAMc"]
[Fri May 22 22:44:10.523925 2026] [proxy_fcgi:error] [pid 15679:tid 15688] [client 38.76.169.105:34064] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 22:44:11.842595 2026] [:error] [pid 15679:tid 15684] [client 38.76.169.105:34064] [client 38.76.169.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.76.169.105, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahBruyh8tgGc38WJ-Gx-IgAAAMM"], referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 22:44:12.172534 2026] [proxy_fcgi:error] [pid 15679:tid 15684] [client 38.76.169.105:34064] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Fri May 22 23:17:48.947529 2026] [:error] [pid 15679:tid 15702] [client 167.99.240.161:53680] [client 167.99.240.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.240.161, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahBznCh8tgGc38WJ-GyFoQAAANU"]
[Fri May 22 23:17:49.364469 2026] [proxy_fcgi:error] [pid 15679:tid 15702] [client 167.99.240.161:53680] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 23:27:19.099408 2026] [:error] [pid 15584:tid 15621] [client 167.99.240.161:52078] [client 167.99.240.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.240.161, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahB1199Z_TVLbNEx52hP8AAAAEE"]
[Fri May 22 23:27:19.490112 2026] [proxy_fcgi:error] [pid 15584:tid 15621] [client 167.99.240.161:52078] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Fri May 22 23:36:45.812081 2026] [:error] [pid 15583:tid 15608] [client 167.99.240.161:63062] [client 167.99.240.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.240.161, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahB4DXnaOncRcIm17YVC9wAAABQ"]
[Fri May 22 23:36:46.272248 2026] [proxy_fcgi:error] [pid 15583:tid 15608] [client 167.99.240.161:63062] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 00:18:03.940424 2026] [:error] [pid 15583:tid 15610] [client 192.200.122.142:44170] [client 192.200.122.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.200.122.142, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahCBu3naOncRcIm17YVVcQAAABY"]
[Sat May 23 00:18:04.670357 2026] [proxy_fcgi:error] [pid 15583:tid 15610] [client 192.200.122.142:44170] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 00:18:06.358967 2026] [:error] [pid 15583:tid 15588] [client 192.200.122.142:44170] [client 192.200.122.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.200.122.142, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahCBvnnaOncRcIm17YVVeAAAAAA"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 00:18:06.686206 2026] [proxy_fcgi:error] [pid 15583:tid 15588] [client 192.200.122.142:44170] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 02:04:12.028168 2026] [:error] [pid 15679:tid 15688] [client 192.144.82.218:49008] [client 192.144.82.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.144.82.218, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahCanCh8tgGc38WJ-Gy2jwAAAMc"]
[Sat May 23 02:04:13.753136 2026] [proxy_fcgi:error] [pid 15679:tid 15688] [client 192.144.82.218:49008] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 02:04:14.750508 2026] [:error] [pid 15679:tid 15700] [client 192.144.82.218:49008] [client 192.144.82.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.144.82.218, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahCanih8tgGc38WJ-Gy2kwAAANM"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 02:04:15.045831 2026] [proxy_fcgi:error] [pid 15679:tid 15700] [client 192.144.82.218:49008] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 03:46:11.897283 2026] [:error] [pid 30366:tid 30368] [client 103.124.95.33:53568] [client 103.124.95.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.124.95.33, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahCyg4vyrqclk5U3UnS5xgAAAUA"]
[Sat May 23 03:46:12.724444 2026] [proxy_fcgi:error] [pid 30366:tid 30368] [client 103.124.95.33:53568] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 03:46:13.150048 2026] [:error] [pid 30366:tid 30382] [client 103.124.95.33:53568] [client 103.124.95.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.124.95.33, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahCyhYvyrqclk5U3UnS5yQAAAU4"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 03:46:13.482412 2026] [proxy_fcgi:error] [pid 30366:tid 30382] [client 103.124.95.33:53568] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 03:59:51.938693 2026] [:error] [pid 30940:tid 30973] [client 37.27.102.46:35882] [client 37.27.102.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.27.102.46, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahC1t5qUP2XZmzp7RDphJQAAABg"]
[Sat May 23 03:59:52.245851 2026] [proxy_fcgi:error] [pid 30940:tid 30973] [client 37.27.102.46:35882] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 03:59:53.138127 2026] [:error] [pid 30940:tid 30963] [client 37.27.102.46:35882] [client 37.27.102.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.27.102.46, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahC1uZqUP2XZmzp7RDphJgAAAA4"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 03:59:53.432416 2026] [proxy_fcgi:error] [pid 30940:tid 30963] [client 37.27.102.46:35882] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 05:09:47.671414 2026] [:error] [pid 30942:tid 31007] [client 64.31.31.90:50104] [client 64.31.31.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.31.31.90, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahDGG9Uosz64YFiBlG2sZwAAAIQ"]
[Sat May 23 05:09:49.590414 2026] [proxy_fcgi:error] [pid 30942:tid 31007] [client 64.31.31.90:50104] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 05:09:50.281426 2026] [:error] [pid 30942:tid 31015] [client 64.31.31.90:50104] [client 64.31.31.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.31.31.90, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahDGHtUosz64YFiBlG2sbQAAAIw"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 05:09:50.592738 2026] [proxy_fcgi:error] [pid 30942:tid 31015] [client 64.31.31.90:50104] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 05:38:10.437771 2026] [:error] [pid 25876:tid 25892] [client 82.223.49.31:42738] [client 82.223.49.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.49.31, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahDMwgSpWUCKPezIBJBvcQAAAQ4"]
[Sat May 23 05:38:10.749844 2026] [proxy_fcgi:error] [pid 25876:tid 25892] [client 82.223.49.31:42738] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 05:38:11.339322 2026] [:error] [pid 25876:tid 25879] [client 82.223.49.31:42738] [client 82.223.49.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.49.31, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahDMwwSpWUCKPezIBJBvcwAAAQE"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 05:38:11.621953 2026] [proxy_fcgi:error] [pid 25876:tid 25879] [client 82.223.49.31:42738] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 07:17:26.561879 2026] [:error] [pid 30940:tid 30957] [client 49.13.171.11:60300] [client 49.13.171.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 49.13.171.11, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahDkBpqUP2XZmzp7RDqFOwAAAAg"]
[Sat May 23 07:17:26.897592 2026] [proxy_fcgi:error] [pid 30940:tid 30957] [client 49.13.171.11:60300] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 07:17:27.273185 2026] [:error] [pid 30940:tid 30954] [client 49.13.171.11:60300] [client 49.13.171.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 49.13.171.11, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahDkB5qUP2XZmzp7RDqFPAAAAAU"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 07:17:27.604095 2026] [proxy_fcgi:error] [pid 30940:tid 30954] [client 49.13.171.11:60300] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 07:44:04.562768 2026] [proxy_fcgi:error] [pid 25876:tid 25892] [client 104.28.156.139:56906] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 07:44:10.724780 2026] [proxy_fcgi:error] [pid 31039:tid 31051] [client 104.28.156.139:55662] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 09:29:13.046316 2026] [:error] [pid 31039:tid 31053] [client 165.140.156.83:59468] [client 165.140.156.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.140.156.83, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahEC6aIYDYo8WvA5zLKWZwAAAMw"]
[Sat May 23 09:29:13.394099 2026] [proxy_fcgi:error] [pid 31039:tid 31053] [client 165.140.156.83:59468] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 09:29:13.796387 2026] [:error] [pid 31039:tid 31042] [client 165.140.156.83:59468] [client 165.140.156.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.140.156.83, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahEC6aIYDYo8WvA5zLKWaAAAAME"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 09:29:14.108445 2026] [proxy_fcgi:error] [pid 31039:tid 31042] [client 165.140.156.83:59468] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 09:37:12.950826 2026] [proxy_fcgi:error] [pid 30941:tid 30994] [client 168.231.90.47:44168] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 10:00:03.424402 2026] [proxy_fcgi:error] [pid 25876:tid 25885] [client 85.11.167.136:64723] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 10:48:02.595085 2026] [proxy_fcgi:error] [pid 25876:tid 25894] [client 98.80.224.63:57064] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 10:48:05.364633 2026] [proxy_fcgi:error] [pid 25876:tid 25890] [client 98.80.224.63:54872] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 10:48:07.675613 2026] [proxy_fcgi:error] [pid 25876:tid 25893] [client 98.80.224.63:57074] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 10:48:10.131090 2026] [proxy_fcgi:error] [pid 31039:tid 31043] [client 98.80.224.63:54898] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 11:27:58.416121 2026] [proxy_fcgi:error] [pid 31039:tid 31051] [client 192.36.109.118:43901] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:08.383756 2026] [proxy_fcgi:error] [pid 30942:tid 31021] [client 142.93.129.190:48960] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:09.495645 2026] [proxy_fcgi:error] [pid 30942:tid 31020] [client 142.93.129.190:37828] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:10.616657 2026] [proxy_fcgi:error] [pid 30942:tid 31004] [client 142.93.129.190:37844] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:11.686456 2026] [authz_core:error] [pid 30942:tid 31026] [client 142.93.129.190:37852] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Sat May 23 12:10:13.583823 2026] [proxy_fcgi:error] [pid 30942:tid 31017] [client 142.93.129.190:37868] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:14.903631 2026] [proxy_fcgi:error] [pid 30942:tid 31004] [client 142.93.129.190:37880] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:15.930326 2026] [proxy_fcgi:error] [pid 31039:tid 31065] [client 142.93.129.190:37890] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:16.822725 2026] [proxy_fcgi:error] [pid 30942:tid 31006] [client 142.93.129.190:37892] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:17.975974 2026] [proxy_fcgi:error] [pid 30942:tid 31010] [client 142.93.129.190:37896] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:18.830323 2026] [proxy_fcgi:error] [pid 25876:tid 25884] [client 142.93.129.190:48690] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:20.092488 2026] [proxy_fcgi:error] [pid 31039:tid 31043] [client 142.93.129.190:48704] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:21.100121 2026] [:error] [pid 30941:tid 30979] [client 142.93.129.190:48706] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "ahEorXTIgjSDhiZmvlVjjQAAAEM"]
[Sat May 23 12:10:23.257851 2026] [proxy_fcgi:error] [pid 30942:tid 31027] [client 142.93.129.190:48714] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:24.890026 2026] [:error] [pid 30941:tid 30998] [client 142.93.129.190:48716] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ahEosHTIgjSDhiZmvlVjmgAAAFY"]
[Sat May 23 12:10:26.133450 2026] [proxy_fcgi:error] [pid 30940:tid 30955] [client 142.93.129.190:48730] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:27.031876 2026] [proxy_fcgi:error] [pid 30940:tid 30963] [client 142.93.129.190:48736] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:28.098832 2026] [proxy_fcgi:error] [pid 30941:tid 30994] [client 142.93.129.190:48744] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:28.890374 2026] [proxy_fcgi:error] [pid 31039:tid 31056] [client 142.93.129.190:48298] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:29.830478 2026] [proxy_fcgi:error] [pid 25876:tid 25891] [client 142.93.129.190:48314] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:30.637311 2026] [proxy_fcgi:error] [pid 25876:tid 25898] [client 142.93.129.190:48316] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:31.798798 2026] [proxy_fcgi:error] [pid 30940:tid 30967] [client 142.93.129.190:48328] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:33.687193 2026] [proxy_fcgi:error] [pid 30940:tid 30951] [client 142.93.129.190:48342] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:34.204020 2026] [:error] [pid 25876:tid 25881] [client 142.93.129.190:48348] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ahEougSpWUCKPezIBJAIiAAAAQM"]
[Sat May 23 12:10:35.566881 2026] [proxy_fcgi:error] [pid 25876:tid 25891] [client 142.93.129.190:48352] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:36.516867 2026] [proxy_fcgi:error] [pid 30941:tid 30980] [client 142.93.129.190:48360] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:37.513672 2026] [proxy_fcgi:error] [pid 30941:tid 30985] [client 142.93.129.190:48370] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:39.564237 2026] [proxy_fcgi:error] [pid 25876:tid 25883] [client 142.93.129.190:58500] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:40.723735 2026] [proxy_fcgi:error] [pid 30940:tid 30958] [client 142.93.129.190:58502] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:41.950915 2026] [proxy_fcgi:error] [pid 30941:tid 30990] [client 142.93.129.190:58516] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:43.703733 2026] [proxy_fcgi:error] [pid 25876:tid 25892] [client 142.93.129.190:58530] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:45.272266 2026] [proxy_fcgi:error] [pid 31039:tid 31055] [client 142.93.129.190:58534] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:47.008721 2026] [proxy_fcgi:error] [pid 30941:tid 30978] [client 142.93.129.190:58538] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:48.638511 2026] [proxy_fcgi:error] [pid 25876:tid 25895] [client 142.93.129.190:53468] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:50.182943 2026] [proxy_fcgi:error] [pid 30941:tid 30977] [client 142.93.129.190:53474] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:51.725768 2026] [proxy_fcgi:error] [pid 25876:tid 25899] [client 142.93.129.190:53478] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:53.175008 2026] [proxy_fcgi:error] [pid 30941:tid 30998] [client 142.93.129.190:53486] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:54.335934 2026] [:error] [pid 30942:tid 31022] [client 142.93.129.190:53496] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "ahEoztUosz64YFiBlG0NqgAAAJM"]
[Sat May 23 12:10:55.415976 2026] [proxy_fcgi:error] [pid 30942:tid 31008] [client 142.93.129.190:53506] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:56.717038 2026] [proxy_fcgi:error] [pid 30942:tid 31010] [client 142.93.129.190:53518] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:58.336334 2026] [proxy_fcgi:error] [pid 30941:tid 30976] [client 142.93.129.190:53524] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:10:59.639032 2026] [proxy_fcgi:error] [pid 25876:tid 25896] [client 142.93.129.190:44260] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:11:00.709353 2026] [proxy_fcgi:error] [pid 31039:tid 31044] [client 142.93.129.190:44274] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 12:46:23.863101 2026] [:error] [pid 25876:tid 25882] [client 103.168.67.36:23798] [client 103.168.67.36] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.southerncrosscentre.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.southerncrosscentre.au"] [uri "/"] [unique_id "ahExHwSpWUCKPezIBJAWewAAAQQ"]
[Sat May 23 12:46:23.863144 2026] [:error] [pid 25876:tid 25882] [client 103.168.67.36:23798] [client 103.168.67.36] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||www.southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.southerncrosscentre.au"] [uri "/"] [unique_id "ahExHwSpWUCKPezIBJAWewAAAQQ"]
[Sat May 23 12:46:23.864747 2026] [:error] [pid 25876:tid 25897] [client 103.168.67.36:23804] [client 103.168.67.36] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.southerncrosscentre.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.southerncrosscentre.au"] [uri "/"] [unique_id "ahExHwSpWUCKPezIBJAWfAAAARM"]
[Sat May 23 12:46:23.864807 2026] [:error] [pid 25876:tid 25897] [client 103.168.67.36:23804] [client 103.168.67.36] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||www.southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.southerncrosscentre.au"] [uri "/"] [unique_id "ahExHwSpWUCKPezIBJAWfAAAARM"]
[Sat May 23 12:46:24.039785 2026] [:error] [pid 25876:tid 25879] [client 103.168.67.36:23804] [client 103.168.67.36] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.southerncrosscentre.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.southerncrosscentre.au"] [uri "/"] [unique_id "ahExIASpWUCKPezIBJAWgQAAAQE"]
[Sat May 23 12:46:24.039859 2026] [:error] [pid 25876:tid 25879] [client 103.168.67.36:23804] [client 103.168.67.36] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||www.southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.southerncrosscentre.au"] [uri "/"] [unique_id "ahExIASpWUCKPezIBJAWgQAAAQE"]
[Sat May 23 12:46:24.040070 2026] [:error] [pid 25876:tid 25894] [client 103.168.67.36:23798] [client 103.168.67.36] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.southerncrosscentre.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.southerncrosscentre.au"] [uri "/"] [unique_id "ahExIASpWUCKPezIBJAWgAAAARA"]
[Sat May 23 12:46:24.040204 2026] [:error] [pid 25876:tid 25894] [client 103.168.67.36:23798] [client 103.168.67.36] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||www.southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.southerncrosscentre.au"] [uri "/"] [unique_id "ahExIASpWUCKPezIBJAWgAAAARA"]
[Sat May 23 14:57:56.100207 2026] [proxy_fcgi:error] [pid 30940:tid 30958] [client 69.165.67.161:54092] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au
[Sat May 23 15:04:11.338568 2026] [:error] [pid 30941:tid 30991] [client 84.54.13.3:39634] [client 84.54.13.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.54.13.3, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahFRa3TIgjSDhiZmvlWJDQAAAE8"]
[Sat May 23 15:04:13.119783 2026] [proxy_fcgi:error] [pid 30941:tid 30991] [client 84.54.13.3:39634] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 15:04:13.512834 2026] [:error] [pid 30941:tid 30983] [client 84.54.13.3:39634] [client 84.54.13.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.54.13.3, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahFRbXTIgjSDhiZmvlWJEgAAAEc"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 15:04:13.819558 2026] [proxy_fcgi:error] [pid 30941:tid 30983] [client 84.54.13.3:39634] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 15:06:17.605022 2026] [proxy_fcgi:error] [pid 31039:tid 31060] [client 34.214.12.77:39048] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:11.821618 2026] [proxy_fcgi:error] [pid 31039:tid 31049] [client 164.90.208.56:36336] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:13.490871 2026] [proxy_fcgi:error] [pid 31039:tid 31055] [client 164.90.208.56:36352] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:14.663985 2026] [proxy_fcgi:error] [pid 30941:tid 30976] [client 164.90.208.56:36366] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:15.504387 2026] [authz_core:error] [pid 30941:tid 30997] [client 164.90.208.56:36380] AH01630: client denied by server configuration: /home/crosscen/public_html/server-status
[Sat May 23 16:21:17.711915 2026] [proxy_fcgi:error] [pid 25876:tid 25901] [client 164.90.208.56:36394] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:18.727304 2026] [proxy_fcgi:error] [pid 30942:tid 31023] [client 164.90.208.56:36398] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:19.983859 2026] [proxy_fcgi:error] [pid 25876:tid 25896] [client 164.90.208.56:36402] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:21.007162 2026] [proxy_fcgi:error] [pid 25876:tid 25895] [client 164.90.208.56:37474] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:22.143615 2026] [proxy_fcgi:error] [pid 25876:tid 25902] [client 164.90.208.56:37476] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:23.159943 2026] [proxy_fcgi:error] [pid 25876:tid 25890] [client 164.90.208.56:37480] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:24.277547 2026] [proxy_fcgi:error] [pid 30942:tid 31007] [client 164.90.208.56:37486] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:25.211674 2026] [:error] [pid 31039:tid 31046] [client 164.90.208.56:37500] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.env"] [unique_id "ahFjhaIYDYo8WvA5zLIcLgAAAMU"]
[Sat May 23 16:21:27.482055 2026] [proxy_fcgi:error] [pid 30941:tid 30987] [client 164.90.208.56:37512] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:29.244053 2026] [:error] [pid 31039:tid 31065] [client 164.90.208.56:37516] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ahFjiaIYDYo8WvA5zLIcPAAAANg"]
[Sat May 23 16:21:30.524684 2026] [proxy_fcgi:error] [pid 30940:tid 30957] [client 164.90.208.56:57670] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:31.546441 2026] [proxy_fcgi:error] [pid 25876:tid 25882] [client 164.90.208.56:57682] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:32.585560 2026] [proxy_fcgi:error] [pid 30942:tid 31009] [client 164.90.208.56:57686] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:33.598636 2026] [proxy_fcgi:error] [pid 30941:tid 30993] [client 164.90.208.56:57688] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:34.631463 2026] [proxy_fcgi:error] [pid 25876:tid 25894] [client 164.90.208.56:57698] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:35.675238 2026] [proxy_fcgi:error] [pid 30942:tid 31010] [client 164.90.208.56:57710] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:36.699996 2026] [proxy_fcgi:error] [pid 25876:tid 25897] [client 164.90.208.56:57726] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:38.679260 2026] [proxy_fcgi:error] [pid 30941:tid 30991] [client 164.90.208.56:57738] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:39.438474 2026] [:error] [pid 30941:tid 30997] [client 164.90.208.56:57748] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||southerncrosscentre.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "southerncrosscentre.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ahFjk3TIgjSDhiZmvlWcwQAAAFU"]
[Sat May 23 16:21:40.719816 2026] [proxy_fcgi:error] [pid 31039:tid 31056] [client 164.90.208.56:60134] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:41.737621 2026] [proxy_fcgi:error] [pid 31039:tid 31047] [client 164.90.208.56:60140] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:42.799241 2026] [proxy_fcgi:error] [pid 30941:tid 30986] [client 164.90.208.56:60154] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:44.828422 2026] [proxy_fcgi:error] [pid 30942:tid 31006] [client 164.90.208.56:60164] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:45.842475 2026] [proxy_fcgi:error] [pid 31039:tid 31049] [client 164.90.208.56:60176] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:46.861183 2026] [proxy_fcgi:error] [pid 30941:tid 30997] [client 164.90.208.56:60182] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:47.882560 2026] [proxy_fcgi:error] [pid 30941:tid 31000] [client 164.90.208.56:60186] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:48.899051 2026] [proxy_fcgi:error] [pid 25876:tid 25900] [client 164.90.208.56:60196] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:49.991914 2026] [proxy_fcgi:error] [pid 31039:tid 31047] [client 164.90.208.56:37678] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:51.020662 2026] [proxy_fcgi:error] [pid 25876:tid 25884] [client 164.90.208.56:37680] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:52.065970 2026] [proxy_fcgi:error] [pid 31039:tid 31054] [client 164.90.208.56:37694] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:53.075137 2026] [proxy_fcgi:error] [pid 31039:tid 31062] [client 164.90.208.56:37710] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:54.113149 2026] [proxy_fcgi:error] [pid 30940:tid 30973] [client 164.90.208.56:37722] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:54.855321 2026] [:error] [pid 30941:tid 30980] [client 164.90.208.56:37736] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southerncrosscentre.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southerncrosscentre.au"] [uri "/trace.axd"] [unique_id "ahFjonTIgjSDhiZmvlWc3gAAAEQ"]
[Sat May 23 16:21:56.145798 2026] [proxy_fcgi:error] [pid 25876:tid 25883] [client 164.90.208.56:37748] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:57.172145 2026] [proxy_fcgi:error] [pid 30942:tid 31018] [client 164.90.208.56:37758] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:58.195725 2026] [proxy_fcgi:error] [pid 30940:tid 30966] [client 164.90.208.56:37768] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:21:59.286761 2026] [proxy_fcgi:error] [pid 31039:tid 31054] [client 164.90.208.56:37778] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 16:22:00.335144 2026] [proxy_fcgi:error] [pid 30941:tid 31000] [client 164.90.208.56:38278] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 18:36:48.380486 2026] [:error] [pid 30940:tid 30963] [client 91.227.37.60:58590] [client 91.227.37.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.227.37.60, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahGDQJqUP2XZmzp7RDoACAAAAA4"]
[Sat May 23 18:36:50.107840 2026] [proxy_fcgi:error] [pid 30940:tid 30963] [client 91.227.37.60:58590] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 18:36:50.398388 2026] [:error] [pid 30940:tid 30960] [client 91.227.37.60:58590] [client 91.227.37.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.227.37.60, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahGDQpqUP2XZmzp7RDoADAAAAAs"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 18:36:50.692035 2026] [proxy_fcgi:error] [pid 30940:tid 30960] [client 91.227.37.60:58590] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 19:08:16.397600 2026] [proxy_fcgi:error] [pid 30941:tid 30995] [client 138.246.253.24:38714] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 21:02:54.784181 2026] [:error] [pid 30941:tid 30990] [client 159.223.117.90:37822] [client 159.223.117.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.117.90, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahGlfnTIgjSDhiZmvlX0UAAAAE4"]
[Sat May 23 21:02:55.339322 2026] [proxy_fcgi:error] [pid 30941:tid 30990] [client 159.223.117.90:37822] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 21:02:55.633840 2026] [:error] [pid 30941:tid 30991] [client 159.223.117.90:37822] [client 159.223.117.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.117.90, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahGlf3TIgjSDhiZmvlX0UwAAAE8"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 21:02:55.951033 2026] [proxy_fcgi:error] [pid 30941:tid 30991] [client 159.223.117.90:37822] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 21:46:37.746836 2026] [proxy_fcgi:error] [pid 30941:tid 30989] [client 192.175.111.237:23205] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 21:46:39.390271 2026] [proxy_fcgi:error] [pid 44325:tid 44337] [client 192.175.111.228:16704] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 21:46:42.396115 2026] [proxy_fcgi:error] [pid 31039:tid 31057] [client 192.175.111.233:33922] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 21:46:43.470347 2026] [proxy_fcgi:error] [pid 44325:tid 44345] [client 192.175.111.249:57266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 21:46:48.236526 2026] [proxy_fcgi:error] [pid 31039:tid 31059] [client 192.175.111.234:30420] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 21:46:49.869058 2026] [proxy_fcgi:error] [pid 31039:tid 31064] [client 192.175.111.237:2303] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 21:46:52.815283 2026] [proxy_fcgi:error] [pid 31039:tid 31045] [client 192.175.111.249:43362] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 21:46:53.635998 2026] [proxy_fcgi:error] [pid 31039:tid 31059] [client 192.175.111.233:44303] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:17.246281 2026] [proxy_fcgi:error] [pid 44296:tid 44311] [client 20.9.70.139:29133] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:20.060736 2026] [proxy_fcgi:error] [pid 44296:tid 44314] [client 20.9.70.139:51877] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:24.490809 2026] [proxy_fcgi:error] [pid 44296:tid 44318] [client 20.9.70.139:17008] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:26.608614 2026] [proxy_fcgi:error] [pid 25876:tid 25899] [client 20.9.70.139:17724] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:28.682808 2026] [proxy_fcgi:error] [pid 30941:tid 30983] [client 20.9.70.139:51861] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:30.870250 2026] [proxy_fcgi:error] [pid 30942:tid 31003] [client 20.9.70.139:51860] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:34.144761 2026] [proxy_fcgi:error] [pid 44325:tid 44333] [client 20.9.70.139:17027] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:37.005214 2026] [proxy_fcgi:error] [pid 31039:tid 31047] [client 20.9.70.139:17535] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:38.242425 2026] [proxy_fcgi:error] [pid 30940:tid 30958] [client 20.9.70.139:17030] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:39.014603 2026] [proxy_fcgi:error] [pid 30941:tid 30999] [client 20.9.70.139:17692] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:39.490217 2026] [proxy_fcgi:error] [pid 30941:tid 30986] [client 20.9.70.139:17692] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:40.509781 2026] [proxy_fcgi:error] [pid 44326:tid 44375] [client 20.9.70.139:17475] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:41.714320 2026] [proxy_fcgi:error] [pid 44296:tid 44320] [client 20.9.70.139:21424] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:42.196295 2026] [proxy_fcgi:error] [pid 44296:tid 44314] [client 20.9.70.139:21424] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:43.356352 2026] [proxy_fcgi:error] [pid 30942:tid 31022] [client 20.9.70.139:21392] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:45.684311 2026] [proxy_fcgi:error] [pid 44296:tid 44306] [client 20.9.70.139:17691] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:48.008140 2026] [proxy_fcgi:error] [pid 44326:tid 44362] [client 20.9.70.139:17481] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:50.998983 2026] [proxy_fcgi:error] [pid 30942:tid 31025] [client 20.9.70.139:25258] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:52.784591 2026] [proxy_fcgi:error] [pid 44325:tid 44348] [client 20.9.70.139:28795] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:54.713187 2026] [proxy_fcgi:error] [pid 25876:tid 25885] [client 20.9.70.139:28791] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:57:57.410845 2026] [proxy_fcgi:error] [pid 25876:tid 25888] [client 20.9.70.139:17033] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:02.029511 2026] [proxy_fcgi:error] [pid 44325:tid 44343] [client 20.9.70.139:16968] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:03.949066 2026] [proxy_fcgi:error] [pid 30941:tid 30982] [client 20.9.70.139:17697] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:07.453960 2026] [proxy_fcgi:error] [pid 31039:tid 31062] [client 20.9.70.139:17696] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:11.050084 2026] [proxy_fcgi:error] [pid 25876:tid 25894] [client 20.9.70.139:17512] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:16.952453 2026] [proxy_fcgi:error] [pid 44326:tid 44375] [client 20.9.70.139:34979] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:20.098072 2026] [proxy_fcgi:error] [pid 30940:tid 30963] [client 20.9.70.139:27144] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:22.182179 2026] [proxy_fcgi:error] [pid 44326:tid 44377] [client 20.9.70.139:28915] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:28.522596 2026] [proxy_fcgi:error] [pid 44296:tid 44306] [client 20.9.70.139:17072] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:33.508331 2026] [proxy_fcgi:error] [pid 30941:tid 30995] [client 20.9.70.139:34999] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:35.437490 2026] [proxy_fcgi:error] [pid 30941:tid 30996] [client 20.9.70.139:17491] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:37.999806 2026] [proxy_fcgi:error] [pid 30940:tid 30966] [client 20.9.70.139:25262] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:40.272157 2026] [proxy_fcgi:error] [pid 30940:tid 30970] [client 20.9.70.139:27174] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:42.323166 2026] [proxy_fcgi:error] [pid 30941:tid 30976] [client 20.9.70.139:25219] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:43.975015 2026] [proxy_fcgi:error] [pid 31039:tid 31060] [client 20.9.70.139:17510] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:45.136093 2026] [proxy_fcgi:error] [pid 30941:tid 30983] [client 20.9.70.139:25266] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:46.791429 2026] [proxy_fcgi:error] [pid 30941:tid 30993] [client 20.9.70.139:25261] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:49.978026 2026] [proxy_fcgi:error] [pid 44326:tid 44372] [client 20.9.70.139:17080] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:51.547960 2026] [proxy_fcgi:error] [pid 44296:tid 44317] [client 20.9.70.139:34996] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:52.999647 2026] [proxy_fcgi:error] [pid 31039:tid 31062] [client 20.9.70.139:27160] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:54.849043 2026] [proxy_fcgi:error] [pid 44326:tid 44366] [client 20.9.70.139:17077] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:57.479660 2026] [proxy_fcgi:error] [pid 30941:tid 30979] [client 20.9.70.139:35001] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:58:58.827463 2026] [proxy_fcgi:error] [pid 25876:tid 25892] [client 20.9.70.139:28753] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:00.631756 2026] [proxy_fcgi:error] [pid 44326:tid 44366] [client 20.9.70.139:17678] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:02.520734 2026] [proxy_fcgi:error] [pid 30942:tid 31021] [client 20.9.70.139:27172] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:05.193205 2026] [proxy_fcgi:error] [pid 30942:tid 31006] [client 20.9.70.139:17086] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:07.116388 2026] [proxy_fcgi:error] [pid 30942:tid 31015] [client 20.9.70.139:17476] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:09.092279 2026] [proxy_fcgi:error] [pid 44325:tid 44332] [client 20.9.70.139:28868] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:10.738405 2026] [proxy_fcgi:error] [pid 30942:tid 31023] [client 20.9.70.139:28894] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:12.198362 2026] [proxy_fcgi:error] [pid 30940:tid 30956] [client 20.9.70.139:17031] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:13.510317 2026] [proxy_fcgi:error] [pid 30940:tid 30955] [client 20.9.70.139:27143] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:14.685721 2026] [proxy_fcgi:error] [pid 30941:tid 30989] [client 20.9.70.139:21435] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:18.293046 2026] [proxy_fcgi:error] [pid 31039:tid 31053] [client 20.9.70.139:29672] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:19.959619 2026] [proxy_fcgi:error] [pid 44325:tid 44345] [client 20.9.70.139:21438] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:22.387152 2026] [proxy_fcgi:error] [pid 44296:tid 44313] [client 20.9.70.139:25323] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:24.622440 2026] [proxy_fcgi:error] [pid 30941:tid 30990] [client 20.9.70.139:27139] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:26.873754 2026] [proxy_fcgi:error] [pid 30940:tid 30959] [client 20.9.70.139:29692] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:28.188679 2026] [proxy_fcgi:error] [pid 30940:tid 30965] [client 20.9.70.139:25271] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:29.148060 2026] [proxy_fcgi:error] [pid 30940:tid 30963] [client 20.9.70.139:27158] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:31.025737 2026] [proxy_fcgi:error] [pid 44326:tid 44377] [client 20.9.70.139:34988] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:32.020603 2026] [proxy_fcgi:error] [pid 30941:tid 30986] [client 20.9.70.139:28924] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:33.290655 2026] [proxy_fcgi:error] [pid 44325:tid 44344] [client 20.9.70.139:21385] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:34.629489 2026] [proxy_fcgi:error] [pid 30941:tid 30995] [client 20.9.70.139:28762] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:36.408734 2026] [proxy_fcgi:error] [pid 44325:tid 44348] [client 20.9.70.139:52477] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:38.427151 2026] [proxy_fcgi:error] [pid 30941:tid 30999] [client 20.9.70.139:29661] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:39.969478 2026] [proxy_fcgi:error] [pid 44296:tid 44321] [client 20.9.70.139:30029] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:41.385436 2026] [proxy_fcgi:error] [pid 44325:tid 44337] [client 20.9.70.139:29682] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:43.001023 2026] [proxy_fcgi:error] [pid 44326:tid 44365] [client 20.9.70.139:34948] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:44.742859 2026] [proxy_fcgi:error] [pid 44296:tid 44304] [client 20.9.70.139:52470] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:46.136184 2026] [proxy_fcgi:error] [pid 30941:tid 30978] [client 20.9.70.139:25320] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:47.539969 2026] [proxy_fcgi:error] [pid 44296:tid 44310] [client 20.9.70.139:30078] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:49.461144 2026] [proxy_fcgi:error] [pid 44296:tid 44320] [client 20.9.70.139:28797] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:50.852299 2026] [proxy_fcgi:error] [pid 30941:tid 30993] [client 20.9.70.139:25291] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:52.082111 2026] [proxy_fcgi:error] [pid 31039:tid 31054] [client 20.9.70.139:25316] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:53.697640 2026] [proxy_fcgi:error] [pid 30941:tid 30982] [client 20.9.70.139:21387] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:54.685765 2026] [proxy_fcgi:error] [pid 44326:tid 44370] [client 20.9.70.139:30018] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:55.157960 2026] [proxy_fcgi:error] [pid 44326:tid 44372] [client 20.9.70.139:30018] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:56.297129 2026] [proxy_fcgi:error] [pid 30940:tid 30969] [client 20.9.70.139:25299] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:57.828702 2026] [proxy_fcgi:error] [pid 44296:tid 44321] [client 20.9.70.139:34995] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 22:59:59.390514 2026] [proxy_fcgi:error] [pid 44325:tid 44336] [client 20.9.70.139:52451] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 23:00:00.775914 2026] [proxy_fcgi:error] [pid 44325:tid 44342] [client 20.9.70.139:28747] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 23:31:28.546690 2026] [proxy_fcgi:error] [pid 44296:tid 44317] [client 185.12.250.58:36487] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 23:31:30.251877 2026] [proxy_fcgi:error] [pid 30942:tid 31019] [client 192.36.53.210:49431] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 23:38:33.183620 2026] [:error] [pid 30941:tid 30992] [client 103.90.232.170:57116] [client 103.90.232.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.90.232.170, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahHJ-XTIgjSDhiZmvlUuCQAAAFA"]
[Sat May 23 23:38:33.533336 2026] [proxy_fcgi:error] [pid 30941:tid 30992] [client 103.90.232.170:57116] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sat May 23 23:38:34.099990 2026] [:error] [pid 30941:tid 30985] [client 103.90.232.170:57116] [client 103.90.232.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.90.232.170, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahHJ-nTIgjSDhiZmvlUuCwAAAEk"], referer: https://southerncrosscentre.au/wp-login.php
[Sat May 23 23:38:34.432286 2026] [proxy_fcgi:error] [pid 30941:tid 30985] [client 103.90.232.170:57116] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 24 01:02:57.311157 2026] [:error] [pid 30940:tid 30961] [client 58.251.94.5:58484] [client 58.251.94.5] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ahHdwZqUP2XZmzp7RDorPQAAAAw"]
[Sun May 24 02:26:24.459913 2026] [proxy_fcgi:error] [pid 44325:tid 44333] [client 192.71.142.134:48221] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 03:49:57.026735 2026] [:error] [pid 20299:tid 20343] [client 45.117.169.86:44866] [client 45.117.169.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.117.169.86, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahIE5b_Lo2IvhjE-ZWpzxQAAAEY"]
[Sun May 24 03:49:57.611064 2026] [proxy_fcgi:error] [pid 20299:tid 20343] [client 45.117.169.86:44866] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 03:49:58.033214 2026] [:error] [pid 20299:tid 20348] [client 45.117.169.86:44866] [client 45.117.169.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.117.169.86, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahIE5r_Lo2IvhjE-ZWpzyAAAAEs"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 24 03:49:58.337047 2026] [proxy_fcgi:error] [pid 20299:tid 20348] [client 45.117.169.86:44866] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 24 03:55:30.924367 2026] [:error] [pid 50978:tid 50987] [client 109.234.160.91:58480] [client 109.234.160.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.234.160.91, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahIGMiu0qFnUKJJuyO5oHAAAAMI"]
[Sun May 24 03:55:31.256039 2026] [proxy_fcgi:error] [pid 50978:tid 50987] [client 109.234.160.91:58480] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 03:55:31.643025 2026] [:error] [pid 50978:tid 51008] [client 109.234.160.91:58480] [client 109.234.160.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.234.160.91, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahIGMyu0qFnUKJJuyO5oHwAAANU"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 24 03:55:31.941293 2026] [proxy_fcgi:error] [pid 50978:tid 51008] [client 109.234.160.91:58480] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 24 04:07:15.510327 2026] [proxy_fcgi:error] [pid 50978:tid 50987] [client 45.133.176.2:21777] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 04:07:17.001759 2026] [proxy_fcgi:error] [pid 50978:tid 51010] [client 45.133.176.2:21777] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 04:07:17.329945 2026] [:error] [pid 50978:tid 51009] [client 45.133.176.2:21777] [client 45.133.176.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.2, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "ahII9Su0qFnUKJJuyO5tpAAAANY"]
[Sun May 24 04:07:18.154887 2026] [proxy_fcgi:error] [pid 50978:tid 51009] [client 45.133.176.2:21777] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 04:07:19.845841 2026] [:error] [pid 50978:tid 51010] [client 45.133.176.27:46287] [client 45.133.176.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.27, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "ahII9yu0qFnUKJJuyO5trgAAANc"]
[Sun May 24 04:07:20.954437 2026] [proxy_fcgi:error] [pid 50978:tid 51010] [client 45.133.176.27:46287] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 04:07:22.265953 2026] [:error] [pid 50978:tid 51005] [client 45.133.176.28:21729] [client 45.133.176.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.28, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "ahII-iu0qFnUKJJuyO5twgAAANI"]
[Sun May 24 04:07:22.728282 2026] [proxy_fcgi:error] [pid 50978:tid 51005] [client 45.133.176.28:21729] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 04:07:24.037682 2026] [:error] [pid 58797:tid 58807] [client 45.133.176.16:28663] [client 45.133.176.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.16, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "ahII_PzoIKLVypLB5NgFqAAAAUc"]
[Sun May 24 04:07:24.739515 2026] [proxy_fcgi:error] [pid 58797:tid 58807] [client 45.133.176.16:28663] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 04:07:26.385032 2026] [:error] [pid 50978:tid 51000] [client 45.133.176.12:48277] [client 45.133.176.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.12, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "ahII_iu0qFnUKJJuyO5t6gAAAM0"]
[Sun May 24 04:07:27.205837 2026] [proxy_fcgi:error] [pid 50978:tid 51000] [client 45.133.176.12:48277] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 04:07:28.516593 2026] [:error] [pid 58521:tid 58539] [client 45.133.176.33:45741] [client 45.133.176.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.33, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "ahIJAGu03QVCX-cF2G-5oQAAARA"]
[Sun May 24 04:07:29.549380 2026] [proxy_fcgi:error] [pid 58521:tid 58539] [client 45.133.176.33:45741] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 04:07:30.872981 2026] [:error] [pid 50872:tid 50927] [client 45.133.176.31:33667] [client 45.133.176.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.31, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "ahIJAkbX_GQ5p_34ISZJ-wAAAE4"]
[Sun May 24 04:07:32.938530 2026] [proxy_fcgi:error] [pid 50872:tid 50927] [client 45.133.176.31:33667] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 04:07:34.246820 2026] [:error] [pid 58918:tid 58933] [client 45.133.176.41:26321] [client 45.133.176.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.41, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "ahIJBqT5tvv40jh4HYbhLwAAAY0"]
[Sun May 24 04:07:36.068999 2026] [proxy_fcgi:error] [pid 58918:tid 58933] [client 45.133.176.41:26321] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 04:07:37.385889 2026] [:error] [pid 50978:tid 51003] [client 45.133.176.33:32117] [client 45.133.176.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.33, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "ahIJCSu0qFnUKJJuyO5uBwAAANA"]
[Sun May 24 04:07:39.178004 2026] [proxy_fcgi:error] [pid 50978:tid 51003] [client 45.133.176.33:32117] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 04:07:40.566397 2026] [:error] [pid 58797:tid 58805] [client 45.133.176.17:27305] [client 45.133.176.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.17, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "ahIJDPzoIKLVypLB5NgGHAAAAUU"]
[Sun May 24 04:07:43.913975 2026] [proxy_fcgi:error] [pid 58797:tid 58805] [client 45.133.176.17:27305] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 04:07:45.239728 2026] [:error] [pid 58797:tid 58801] [client 45.133.176.53:55943] [client 45.133.176.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.53, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "ahIJEfzoIKLVypLB5NgGLwAAAUE"]
[Sun May 24 04:07:47.760531 2026] [proxy_fcgi:error] [pid 58797:tid 58801] [client 45.133.176.53:55943] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 04:07:49.075573 2026] [:error] [pid 50978:tid 50985] [client 45.133.176.38:54239] [client 45.133.176.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.38, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "ahIJFSu0qFnUKJJuyO5uIQAAAMA"]
[Sun May 24 04:07:51.951914 2026] [proxy_fcgi:error] [pid 50978:tid 50985] [client 45.133.176.38:54239] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 04:07:53.263287 2026] [:error] [pid 50873:tid 50962] [client 45.133.176.51:32311] [client 45.133.176.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.51, incrementing ddos counter"] [hostname "southerncrosscentre.au"] [uri "/xmlrpc.php"] [unique_id "ahIJGelYxsqwDcWZbhK9ZwAAAJY"]
[Sun May 24 04:07:54.598708 2026] [proxy_fcgi:error] [pid 50873:tid 50962] [client 45.133.176.51:32311] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 04:27:54.452910 2026] [:error] [pid 58797:tid 58813] [client 109.75.161.204:41214] [client 109.75.161.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.75.161.204, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahINyvzoIKLVypLB5NgLqAAAAU0"]
[Sun May 24 04:27:54.792760 2026] [proxy_fcgi:error] [pid 58797:tid 58813] [client 109.75.161.204:41214] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 04:27:56.011276 2026] [:error] [pid 58797:tid 58801] [client 109.75.161.204:41214] [client 109.75.161.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.75.161.204, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahINzPzoIKLVypLB5NgLqgAAAUE"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 24 04:27:56.312107 2026] [proxy_fcgi:error] [pid 58797:tid 58801] [client 109.75.161.204:41214] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 24 04:45:46.354518 2026] [:error] [pid 58918:tid 58935] [client 213.55.96.154:36866] [client 213.55.96.154] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southerncrosscentre.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southerncrosscentre.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ahIR-qT5tvv40jh4HYbxDAAAAY8"]
[Sun May 24 04:53:59.433932 2026] [:error] [pid 50871:tid 50887] [client 159.223.117.90:41188] [client 159.223.117.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.117.90, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahIT5-cdOvA3ACH24leVRgAAAAc"]
[Sun May 24 04:53:59.743936 2026] [proxy_fcgi:error] [pid 50871:tid 50887] [client 159.223.117.90:41188] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 04:54:00.399846 2026] [:error] [pid 50871:tid 50882] [client 159.223.117.90:41188] [client 159.223.117.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.117.90, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahIT6OcdOvA3ACH24leVSAAAAAI"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 24 04:54:00.702891 2026] [proxy_fcgi:error] [pid 50871:tid 50882] [client 159.223.117.90:41188] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 24 05:43:51.214727 2026] [:error] [pid 58918:tid 58938] [client 186.234.80.85:53142] [client 186.234.80.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 186.234.80.85, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahIfl6T5tvv40jh4HYYGQAAAAZI"]
[Sun May 24 05:43:53.683805 2026] [proxy_fcgi:error] [pid 58918:tid 58938] [client 186.234.80.85:53142] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 05:43:56.923570 2026] [:error] [pid 58918:tid 58942] [client 186.234.80.85:53142] [client 186.234.80.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 186.234.80.85, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahIfnKT5tvv40jh4HYYGQwAAAZY"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 24 05:43:57.220302 2026] [proxy_fcgi:error] [pid 58918:tid 58942] [client 186.234.80.85:53142] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 24 07:56:32.308350 2026] [proxy_fcgi:error] [pid 58918:tid 58940] [client 35.213.205.170:32888] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 08:53:06.440650 2026] [:error] [pid 50871:tid 50895] [client 167.71.214.163:48810] [client 167.71.214.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.214.163, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahJL8ucdOvA3ACH24leuLQAAAA4"]
[Sun May 24 08:53:08.114507 2026] [proxy_fcgi:error] [pid 50871:tid 50895] [client 167.71.214.163:48810] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 08:53:08.842939 2026] [:error] [pid 50871:tid 50885] [client 167.71.214.163:48810] [client 167.71.214.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.214.163, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahJL9OcdOvA3ACH24leuLwAAAAU"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 24 08:53:09.141928 2026] [proxy_fcgi:error] [pid 50871:tid 50885] [client 167.71.214.163:48810] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 24 10:04:51.142777 2026] [:error] [pid 49775:tid 49787] [client 103.28.36.122:33904] [client 103.28.36.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.122, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahJcw4vZb8G6T8WpI1glAAAAAAo"]
[Sun May 24 10:04:51.821252 2026] [proxy_fcgi:error] [pid 49775:tid 49787] [client 103.28.36.122:33904] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 10:04:52.299953 2026] [:error] [pid 49775:tid 49788] [client 103.28.36.122:33904] [client 103.28.36.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.122, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahJcxIvZb8G6T8WpI1glBAAAAAs"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 24 10:04:52.589184 2026] [proxy_fcgi:error] [pid 49775:tid 49788] [client 103.28.36.122:33904] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 24 11:57:50.253514 2026] [:error] [pid 49688:tid 49700] [client 143.198.203.76:53814] [client 143.198.203.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.203.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahJ3PmYoQ9V6a_4pBsh9xAAAAEk"]
[Sun May 24 11:57:51.977645 2026] [proxy_fcgi:error] [pid 49688:tid 49700] [client 143.198.203.76:53814] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 11:57:52.707410 2026] [:error] [pid 49688:tid 49692] [client 143.198.203.76:53814] [client 143.198.203.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.203.76, incrementing brute counter"] [hostname "southerncrosscentre.au"] [uri "/wp-login.php"] [unique_id "ahJ3QGYoQ9V6a_4pBsh9xQAAAEE"], referer: https://southerncrosscentre.au/wp-login.php
[Sun May 24 11:57:52.988289 2026] [proxy_fcgi:error] [pid 49688:tid 49692] [client 143.198.203.76:53814] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0', referer: https://southerncrosscentre.au/wp-login.php
[Sun May 24 12:02:46.454829 2026] [proxy_fcgi:error] [pid 49775:tid 49793] [client 192.175.111.253:35638] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 19:01:51.326424 2026] [proxy_fcgi:error] [pid 49689:tid 49719] [client 77.74.177.118:42476] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 19:01:55.696487 2026] [proxy_fcgi:error] [pid 23497:tid 23515] [client 93.159.230.28:35554] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 19:01:59.971190 2026] [proxy_fcgi:error] [pid 23497:tid 23512] [client 77.74.177.118:50832] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 19:02:04.216308 2026] [proxy_fcgi:error] [pid 4777:tid 4790] [client 77.74.177.114:56809] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 19:14:48.509422 2026] [proxy_fcgi:error] [pid 2639:tid 2650] [client 93.159.230.84:54274] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 19:14:51.509511 2026] [proxy_fcgi:error] [pid 49688:tid 49700] [client 77.74.177.114:17121] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 19:14:55.282094 2026] [proxy_fcgi:error] [pid 41708:tid 41724] [client 93.159.230.84:43447] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 19:14:59.221178 2026] [proxy_fcgi:error] [pid 49744:tid 49750] [client 93.159.230.84:41759] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Sun May 24 19:17:56.145940 2026] [proxy_fcgi:error] [pid 41708:tid 41723] [client 46.151.182.172:55148] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 25 01:14:35.308490 2026] [proxy_fcgi:error] [pid 11282:tid 11350] [client 66.249.73.204:58772] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 25 07:01:13.113966 2026] [proxy_fcgi:error] [pid 9304:tid 9385] [client 17.241.227.224:49148] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 25 07:09:23.810652 2026] [:error] [pid 50423:tid 50435] [client 104.28.246.122:24290] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/ms-themes.php"] [unique_id "ahOFI6JWO7En4nKEQ3g-1QAAAQo"]
[Mon May 25 07:09:24.260754 2026] [:error] [pid 9302:tid 9328] [client 104.28.214.122:38488] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/chosen.php"] [unique_id "ahOFJC1RaFfTSnDQnqFbqgAAABU"]
[Mon May 25 07:09:24.714526 2026] [:error] [pid 9304:tid 9361] [client 104.28.246.122:60679] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/file.php"] [unique_id "ahOFJOVEV2qpMC_1UzSWFgAAAIA"]
[Mon May 25 07:09:25.165014 2026] [:error] [pid 9398:tid 9421] [client 104.28.214.122:20377] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/flower.php"] [unique_id "ahOFJehIu7KstzsCua-3SgAAANE"]
[Mon May 25 07:09:25.616834 2026] [:error] [pid 9304:tid 9370] [client 104.28.214.122:19979] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/gifclass.php"] [unique_id "ahOFJeVEV2qpMC_1UzSWGgAAAIk"]
[Mon May 25 07:09:29.113350 2026] [:error] [pid 9303:tid 9352] [client 104.28.214.122:20027] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/bless.php"] [unique_id "ahOFKX3bQScbssitjPREIQAAAFI"]
[Mon May 25 07:09:30.576122 2026] [:error] [pid 50423:tid 50429] [client 104.28.214.122:20389] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/class-t.api.php"] [unique_id "ahOFKqJWO7En4nKEQ3g-_gAAAQQ"]
[Mon May 25 07:09:31.026448 2026] [:error] [pid 9304:tid 9371] [client 104.28.214.122:19969] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/blurbs.php"] [unique_id "ahOFK-VEV2qpMC_1UzSWYgAAAIo"]
[Mon May 25 07:09:31.475293 2026] [:error] [pid 21606:tid 21632] [client 104.28.246.122:14634] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/akcc.php"] [unique_id "ahOFK2swdp0RYkH5t9XJuwAAAVg"]
[Mon May 25 07:09:31.922707 2026] [:error] [pid 9398:tid 9404] [client 104.28.214.122:20061] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/abcd.php"] [unique_id "ahOFK-hIu7KstzsCua-3gAAAAMQ"]
[Mon May 25 07:09:33.386008 2026] [:error] [pid 9304:tid 9363] [client 104.28.246.122:55384] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/shelp.php"] [unique_id "ahOFLeVEV2qpMC_1UzSWcgAAAII"]
[Mon May 25 07:09:41.077475 2026] [:error] [pid 50423:tid 50437] [client 104.28.214.122:65011] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/cord.php"] [unique_id "ahOFNaJWO7En4nKEQ3g_NgAAAQw"]
[Mon May 25 07:09:41.524697 2026] [:error] [pid 9398:tid 9405] [client 104.28.214.122:58166] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/dex.php"] [unique_id "ahOFNehIu7KstzsCua-3mwAAAMU"]
[Mon May 25 07:09:42.978841 2026] [:error] [pid 9302:tid 9315] [client 104.28.214.122:58199] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "southerncrosscentre.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ahOFNi1RaFfTSnDQnqFb9QAAAAg"]
[Mon May 25 09:26:22.340994 2026] [proxy_fcgi:error] [pid 62722:tid 62728] [client 20.151.114.114:44048] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 25 09:26:23.086827 2026] [proxy_fcgi:error] [pid 62426:tid 62430] [client 20.151.114.114:47429] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 25 16:43:35.631327 2026] [proxy_fcgi:error] [pid 62428:tid 62496] [client 5.255.106.10:43336] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 25 19:01:15.850330 2026] [:error] [pid 62722:tid 62737] [client 134.199.156.173:46776] [client 134.199.156.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ahQr-6M6ssnLWYf6CVA9tQAAAE0"]
[Mon May 25 19:01:16.006970 2026] [:error] [pid 62427:tid 62468] [client 134.199.156.173:54608] [client 134.199.156.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southerncrosscentre.au"] [uri "/.git/config"] [unique_id "ahQr_PMUa83fc4GDyBxx2wAAAUs"]
[Mon May 25 19:01:16.605577 2026] [proxy_fcgi:error] [pid 62515:tid 62530] [client 134.199.156.173:46822] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Mon May 25 23:55:16.938375 2026] [proxy_fcgi:error] [pid 62426:tid 62435] [client 66.249.73.204:42713] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 01:51:41.328172 2026] [proxy_fcgi:error] [pid 62515:tid 62523] [client 35.94.157.46:39090] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 01:51:41.857887 2026] [proxy_fcgi:error] [pid 62515:tid 62528] [client 35.94.157.46:39090] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 08:49:19.533136 2026] [proxy_fcgi:error] [pid 20024:tid 20050] [client 74.7.228.52:42792] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:17:18.836451 2026] [autoindex:error] [pid 55988:tid 55992] [client 161.97.142.128:52604] AH01276: Cannot serve directory /home/crosscen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue May 26 10:47:29.227656 2026] [:error] [pid 20024:tid 20054] [client 170.64.238.42:49090] [client 170.64.238.42] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.southerncrosscentre.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahUJwVdk7QtxEB93NpdBEgAAABA"]
[Tue May 26 10:47:29.656980 2026] [proxy_fcgi:error] [pid 20024:tid 20052] [client 170.64.238.42:49068] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:29.657071 2026] [proxy_fcgi:error] [pid 55988:tid 55994] [client 170.64.238.42:49064] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:29.658231 2026] [proxy_fcgi:error] [pid 20024:tid 20054] [client 170.64.238.42:49090] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:29.966461 2026] [proxy_fcgi:error] [pid 55988:tid 55998] [client 170.64.238.42:49078] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:29.969378 2026] [proxy_fcgi:error] [pid 20026:tid 20109] [client 170.64.238.42:49052] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:29.975362 2026] [proxy_fcgi:error] [pid 20026:tid 20113] [client 170.64.238.42:49074] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:30.273961 2026] [proxy_fcgi:error] [pid 55988:tid 56015] [client 170.64.238.42:49112] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:30.279034 2026] [proxy_fcgi:error] [pid 20026:tid 20099] [client 170.64.238.42:49036] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:30.288392 2026] [proxy_fcgi:error] [pid 20125:tid 20144] [client 170.64.238.42:49104] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:30.590291 2026] [proxy_fcgi:error] [pid 55988:tid 56011] [client 170.64.238.42:49118] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:30.630178 2026] [proxy_fcgi:error] [pid 55988:tid 56001] [client 170.64.238.42:49024] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:31.067151 2026] [:error] [pid 55988:tid 56014] [client 170.64.238.42:49338] [client 170.64.238.42] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.southerncrosscentre.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahUJw_3kVIz2sql52sfNtQAAARc"]
[Tue May 26 10:47:32.142861 2026] [proxy_fcgi:error] [pid 20125:tid 20148] [client 170.64.238.42:49328] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:32.411905 2026] [proxy_fcgi:error] [pid 20024:tid 20056] [client 170.64.238.42:49330] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:32.415989 2026] [proxy_fcgi:error] [pid 55988:tid 56014] [client 170.64.238.42:49338] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:32.468885 2026] [proxy_fcgi:error] [pid 20024:tid 20061] [client 170.64.238.42:49350] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:34.839432 2026] [:error] [pid 20025:tid 20066] [client 170.64.238.42:49560] [client 170.64.238.42] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.southerncrosscentre.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahUJxn7k8Vts-JPOkgUcYAAAAEE"]
[Tue May 26 10:47:35.031038 2026] [proxy_fcgi:error] [pid 55988:tid 56011] [client 170.64.238.42:49518] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:35.322096 2026] [proxy_fcgi:error] [pid 20025:tid 20066] [client 170.64.238.42:49560] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:35.379853 2026] [proxy_fcgi:error] [pid 20125:tid 20151] [client 170.64.238.42:49562] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:39.683978 2026] [:error] [pid 20025:tid 20066] [client 170.64.238.42:49466] [client 170.64.238.42] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.southerncrosscentre.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.southerncrosscentre.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahUJy37k8Vts-JPOkgUcagAAAEE"]
[Tue May 26 10:47:39.908609 2026] [proxy_fcgi:error] [pid 20025:tid 20065] [client 170.64.238.42:49452] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:39.985728 2026] [proxy_fcgi:error] [pid 20025:tid 20066] [client 170.64.238.42:49466] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:40.085490 2026] [proxy_fcgi:error] [pid 20025:tid 20070] [client 170.64.238.42:49480] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:40.542871 2026] [proxy_fcgi:error] [pid 20125:tid 20148] [client 170.64.238.42:49492] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 10:47:40.569215 2026] [proxy_fcgi:error] [pid 20125:tid 20143] [client 170.64.238.42:49482] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 16:53:06.441736 2026] [proxy_fcgi:error] [pid 55988:tid 56013] [client 185.13.98.57:42107] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 17:05:07.007666 2026] [proxy_fcgi:error] [pid 20026:tid 20099] [client 34.11.17.55:52481] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 17:05:51.626634 2026] [proxy_fcgi:error] [pid 20125:tid 20143] [client 18.232.180.122:50402] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 17:05:51.958096 2026] [proxy_fcgi:error] [pid 20024:tid 20041] [client 18.232.180.122:49122] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 17:28:24.463166 2026] [proxy_fcgi:error] [pid 33977:tid 34001] [client 74.7.242.57:53156] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 17:28:24.890711 2026] [proxy_fcgi:error] [pid 33887:tid 33929] [client 74.7.241.169:47340] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 20:02:03.327704 2026] [proxy_fcgi:error] [pid 33887:tid 33921] [client 66.249.73.203:55969] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 22:03:50.112299 2026] [proxy_fcgi:error] [pid 36497:tid 36525] [client 44.250.195.14:60020] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:13.356568 2026] [proxy_fcgi:error] [pid 43701:tid 43704] [client 20.206.111.149:29480] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:15.879151 2026] [proxy_fcgi:error] [pid 43701:tid 43723] [client 20.206.111.149:65051] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:17.150812 2026] [proxy_fcgi:error] [pid 33886:tid 33912] [client 20.206.111.149:35201] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:18.879305 2026] [proxy_fcgi:error] [pid 33887:tid 33931] [client 20.206.111.149:55114] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:20.237380 2026] [proxy_fcgi:error] [pid 36497:tid 36512] [client 20.206.111.149:22840] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:21.785744 2026] [proxy_fcgi:error] [pid 33977:tid 33993] [client 20.206.111.149:35250] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:23.681699 2026] [proxy_fcgi:error] [pid 43701:tid 43720] [client 20.206.111.149:39764] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:25.643734 2026] [proxy_fcgi:error] [pid 33888:tid 33967] [client 20.206.111.149:21693] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:27.198398 2026] [proxy_fcgi:error] [pid 36497:tid 36530] [client 20.206.111.149:55155] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:28.802311 2026] [proxy_fcgi:error] [pid 36497:tid 36522] [client 20.206.111.149:58648] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:30.120737 2026] [proxy_fcgi:error] [pid 43701:tid 43725] [client 20.206.111.149:65058] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:31.158625 2026] [proxy_fcgi:error] [pid 43701:tid 43717] [client 20.206.111.149:35251] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:32.566495 2026] [proxy_fcgi:error] [pid 36497:tid 36520] [client 20.206.111.149:21688] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:33.202359 2026] [proxy_fcgi:error] [pid 36497:tid 36531] [client 20.206.111.149:21688] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:34.369858 2026] [proxy_fcgi:error] [pid 33888:tid 33969] [client 20.206.111.149:22844] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:35.752501 2026] [proxy_fcgi:error] [pid 43701:tid 43711] [client 20.206.111.149:60031] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:36.941987 2026] [proxy_fcgi:error] [pid 33888:tid 33954] [client 20.206.111.149:24817] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:38.660685 2026] [proxy_fcgi:error] [pid 43701:tid 43723] [client 20.206.111.149:2718] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:40.390606 2026] [proxy_fcgi:error] [pid 33888:tid 33952] [client 20.206.111.149:55151] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:41.902473 2026] [proxy_fcgi:error] [pid 43701:tid 43714] [client 20.206.111.149:22153] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:43.882846 2026] [proxy_fcgi:error] [pid 43701:tid 43716] [client 20.206.111.149:22791] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:46.813480 2026] [proxy_fcgi:error] [pid 43701:tid 43725] [client 20.206.111.149:65049] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:50.517638 2026] [proxy_fcgi:error] [pid 33888:tid 33964] [client 20.206.111.149:55130] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:51.109598 2026] [proxy_fcgi:error] [pid 33888:tid 33954] [client 20.206.111.149:55130] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:54.015512 2026] [proxy_fcgi:error] [pid 36497:tid 36522] [client 20.206.111.149:60023] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:18:58.450904 2026] [proxy_fcgi:error] [pid 43701:tid 43721] [client 20.206.111.149:58683] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:04.200927 2026] [proxy_fcgi:error] [pid 33887:tid 33926] [client 20.206.111.149:58626] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:05.399939 2026] [proxy_fcgi:error] [pid 33886:tid 33906] [client 20.206.111.149:58668] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:07.231037 2026] [proxy_fcgi:error] [pid 43701:tid 43713] [client 20.206.111.149:2243] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:09.576214 2026] [proxy_fcgi:error] [pid 43701:tid 43715] [client 20.206.111.149:2282] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:13.441592 2026] [proxy_fcgi:error] [pid 33977:tid 33982] [client 20.206.111.149:2299] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:16.548612 2026] [proxy_fcgi:error] [pid 36497:tid 36517] [client 20.206.111.149:55136] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:20.653932 2026] [proxy_fcgi:error] [pid 33887:tid 33925] [client 20.206.111.149:55144] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:23.118254 2026] [proxy_fcgi:error] [pid 36497:tid 36518] [client 20.206.111.149:55138] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:25.530841 2026] [proxy_fcgi:error] [pid 36497:tid 36510] [client 20.206.111.149:21679] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:27.458241 2026] [proxy_fcgi:error] [pid 43701:tid 43713] [client 20.206.111.149:30696] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:28.836457 2026] [proxy_fcgi:error] [pid 33886:tid 33902] [client 20.206.111.149:21634] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:31.122096 2026] [proxy_fcgi:error] [pid 43701:tid 43725] [client 20.206.111.149:49476] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:33.702830 2026] [proxy_fcgi:error] [pid 33886:tid 33910] [client 20.206.111.149:2281] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:35.733647 2026] [proxy_fcgi:error] [pid 33886:tid 33906] [client 20.206.111.149:39788] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:37.777599 2026] [proxy_fcgi:error] [pid 36497:tid 36517] [client 20.206.111.149:39767] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:39.825749 2026] [proxy_fcgi:error] [pid 43701:tid 43711] [client 20.206.111.149:22836] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:42.266852 2026] [proxy_fcgi:error] [pid 43701:tid 43710] [client 20.206.111.149:2154] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:44.061839 2026] [proxy_fcgi:error] [pid 43701:tid 43724] [client 20.206.111.149:65045] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:49.056690 2026] [proxy_fcgi:error] [pid 33886:tid 33895] [client 20.206.111.149:30701] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:19:57.291373 2026] [proxy_fcgi:error] [pid 43701:tid 43704] [client 20.206.111.149:65025] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:00.767636 2026] [proxy_fcgi:error] [pid 43701:tid 43711] [client 20.206.111.149:58100] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:02.301491 2026] [proxy_fcgi:error] [pid 43701:tid 43711] [client 20.206.111.149:49532] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:05.470876 2026] [proxy_fcgi:error] [pid 33886:tid 33896] [client 20.206.111.149:2703] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:08.648069 2026] [proxy_fcgi:error] [pid 43701:tid 43716] [client 20.206.111.149:58081] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:11.652542 2026] [proxy_fcgi:error] [pid 33888:tid 33966] [client 20.206.111.149:33970] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:14.626725 2026] [proxy_fcgi:error] [pid 43701:tid 43718] [client 20.206.111.149:34036] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:17.367939 2026] [proxy_fcgi:error] [pid 33887:tid 33922] [client 20.206.111.149:58095] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:20.171388 2026] [proxy_fcgi:error] [pid 43701:tid 43716] [client 20.206.111.149:40351] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:29.358877 2026] [proxy_fcgi:error] [pid 33886:tid 33894] [client 20.206.111.149:43105] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:31.724899 2026] [proxy_fcgi:error] [pid 33977:tid 33982] [client 20.206.111.149:58691] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:34.502856 2026] [proxy_fcgi:error] [pid 36497:tid 36514] [client 20.206.111.149:58693] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:38.578298 2026] [proxy_fcgi:error] [pid 33888:tid 33951] [client 20.206.111.149:45146] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:41.331443 2026] [proxy_fcgi:error] [pid 33888:tid 33955] [client 20.206.111.149:64385] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:43.508233 2026] [proxy_fcgi:error] [pid 43701:tid 43726] [client 20.206.111.149:32081] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:45.815964 2026] [proxy_fcgi:error] [pid 43701:tid 43711] [client 20.206.111.149:50356] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:47.484311 2026] [proxy_fcgi:error] [pid 33977:tid 33981] [client 20.206.111.149:2983] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:50.134529 2026] [proxy_fcgi:error] [pid 43701:tid 43706] [client 20.206.111.149:45171] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:52.524982 2026] [proxy_fcgi:error] [pid 33977:tid 33992] [client 20.206.111.149:43087] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:54.407830 2026] [proxy_fcgi:error] [pid 36497:tid 36531] [client 20.206.111.149:63256] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:56.290143 2026] [proxy_fcgi:error] [pid 33888:tid 33970] [client 20.206.111.149:64397] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:20:57.893790 2026] [proxy_fcgi:error] [pid 33977:tid 33997] [client 20.206.111.149:55072] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:21:00.203167 2026] [proxy_fcgi:error] [pid 43701:tid 43710] [client 20.206.111.149:44444] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:21:02.669544 2026] [proxy_fcgi:error] [pid 33887:tid 33936] [client 20.206.111.149:63293] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:21:04.532074 2026] [proxy_fcgi:error] [pid 36497:tid 36515] [client 20.206.111.149:43129] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:22:10.615039 2026] [proxy_fcgi:error] [pid 33977:tid 33984] [client 20.206.111.149:22260] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:22:27.372076 2026] [proxy_fcgi:error] [pid 36497:tid 36519] [client 20.206.111.149:32092] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:22:29.716754 2026] [proxy_fcgi:error] [pid 36497:tid 36530] [client 20.206.111.149:50975] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:22:32.397638 2026] [proxy_fcgi:error] [pid 33886:tid 33902] [client 20.206.111.149:47095] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:22:34.460589 2026] [proxy_fcgi:error] [pid 43701:tid 43715] [client 20.206.111.149:41660] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:22:36.121180 2026] [proxy_fcgi:error] [pid 43701:tid 43712] [client 20.206.111.149:41606] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:22:37.694061 2026] [proxy_fcgi:error] [pid 36497:tid 36515] [client 20.206.111.149:28196] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:22:38.329703 2026] [proxy_fcgi:error] [pid 36497:tid 36528] [client 20.206.111.149:28196] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:22:39.855598 2026] [proxy_fcgi:error] [pid 43701:tid 43709] [client 20.206.111.149:47077] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:22:41.541313 2026] [proxy_fcgi:error] [pid 43701:tid 43711] [client 20.206.111.149:41663] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:22:43.365525 2026] [proxy_fcgi:error] [pid 43701:tid 43716] [client 20.206.111.149:64386] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:22:44.927278 2026] [proxy_fcgi:error] [pid 33977:tid 33992] [client 20.206.111.149:41652] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:22:46.918259 2026] [proxy_fcgi:error] [pid 33977:tid 33992] [client 20.206.111.149:37865] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:22:50.173986 2026] [proxy_fcgi:error] [pid 43701:tid 43719] [client 20.206.111.149:63246] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:22:52.066967 2026] [proxy_fcgi:error] [pid 33888:tid 33964] [client 20.206.111.149:37886] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:22:54.688343 2026] [proxy_fcgi:error] [pid 43701:tid 43726] [client 20.206.111.149:2388] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:22:57.054851 2026] [proxy_fcgi:error] [pid 33888:tid 33948] [client 20.206.111.149:55094] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:00.267154 2026] [proxy_fcgi:error] [pid 33888:tid 33958] [client 20.206.111.149:53560] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:00.917057 2026] [proxy_fcgi:error] [pid 33888:tid 33957] [client 20.206.111.149:53560] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:05.317048 2026] [proxy_fcgi:error] [pid 33977:tid 34004] [client 20.206.111.149:37857] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:10.195127 2026] [proxy_fcgi:error] [pid 33887:tid 33934] [client 20.206.111.149:53510] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:13.749365 2026] [proxy_fcgi:error] [pid 33888:tid 33963] [client 20.206.111.149:47607] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:17.547636 2026] [proxy_fcgi:error] [pid 36497:tid 36532] [client 20.206.111.149:47562] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:19.365482 2026] [proxy_fcgi:error] [pid 36497:tid 36510] [client 20.206.111.149:47573] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:21.312654 2026] [proxy_fcgi:error] [pid 33977:tid 33982] [client 20.206.111.149:49461] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:23.767237 2026] [proxy_fcgi:error] [pid 43701:tid 43715] [client 20.206.111.149:59928] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:25.811654 2026] [proxy_fcgi:error] [pid 33887:tid 33928] [client 20.206.111.149:49430] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:27.830526 2026] [proxy_fcgi:error] [pid 43701:tid 43724] [client 20.206.111.149:26942] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:29.466555 2026] [proxy_fcgi:error] [pid 33886:tid 33906] [client 20.206.111.149:56891] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:32.043759 2026] [proxy_fcgi:error] [pid 33888:tid 33947] [client 20.206.111.149:47570] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:34.702027 2026] [proxy_fcgi:error] [pid 36497:tid 36523] [client 20.206.111.149:51012] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:37.845654 2026] [proxy_fcgi:error] [pid 43701:tid 43726] [client 20.206.111.149:56882] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:39.528252 2026] [proxy_fcgi:error] [pid 33886:tid 33906] [client 20.206.111.149:42338] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:42.357158 2026] [proxy_fcgi:error] [pid 33888:tid 33958] [client 20.206.111.149:64482] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:44.511673 2026] [proxy_fcgi:error] [pid 33886:tid 33908] [client 20.206.111.149:59325] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:46.573175 2026] [proxy_fcgi:error] [pid 43701:tid 43727] [client 20.206.111.149:48139] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:48.235517 2026] [proxy_fcgi:error] [pid 33977:tid 33993] [client 20.206.111.149:38442] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:49.597653 2026] [proxy_fcgi:error] [pid 36497:tid 36526] [client 20.206.111.149:48132] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:50.214838 2026] [proxy_fcgi:error] [pid 36497:tid 36531] [client 20.206.111.149:48132] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:51.954326 2026] [proxy_fcgi:error] [pid 33887:tid 33928] [client 20.206.111.149:35320] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:52.561268 2026] [proxy_fcgi:error] [pid 33887:tid 33922] [client 20.206.111.149:35320] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:55.189602 2026] [proxy_fcgi:error] [pid 33977:tid 33993] [client 20.206.111.149:59271] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:23:57.980899 2026] [proxy_fcgi:error] [pid 43701:tid 43719] [client 20.206.111.149:48140] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:24:01.407110 2026] [proxy_fcgi:error] [pid 33887:tid 33937] [client 20.206.111.149:23176] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:24:04.852564 2026] [proxy_fcgi:error] [pid 36497:tid 36521] [client 20.206.111.149:23179] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:24:07.475877 2026] [proxy_fcgi:error] [pid 36497:tid 36520] [client 20.206.111.149:26353] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:24:09.310780 2026] [proxy_fcgi:error] [pid 33888:tid 33951] [client 20.206.111.149:63827] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:24:10.856829 2026] [proxy_fcgi:error] [pid 43701:tid 43723] [client 20.206.111.149:43651] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:24:12.562093 2026] [proxy_fcgi:error] [pid 33886:tid 33903] [client 20.206.111.149:61948] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:24:15.443497 2026] [proxy_fcgi:error] [pid 33977:tid 33989] [client 20.206.111.149:37775] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:24:17.179684 2026] [proxy_fcgi:error] [pid 36497:tid 36527] [client 20.206.111.149:65025] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:24:18.746499 2026] [proxy_fcgi:error] [pid 43701:tid 43719] [client 20.206.111.149:48843] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:24:21.397619 2026] [proxy_fcgi:error] [pid 33977:tid 33992] [client 20.206.111.149:65060] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:24:23.300893 2026] [proxy_fcgi:error] [pid 33887:tid 33923] [client 20.206.111.149:61888] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:24:24.716582 2026] [proxy_fcgi:error] [pid 33887:tid 33920] [client 20.206.111.149:65076] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:24:30.967059 2026] [proxy_fcgi:error] [pid 43701:tid 43716] [client 20.206.111.149:39731] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:24:43.702584 2026] [proxy_fcgi:error] [pid 43701:tid 43713] [client 20.206.111.149:46993] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:24:56.288026 2026] [proxy_fcgi:error] [pid 36497:tid 36524] [client 20.206.111.149:22192] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:25:11.062735 2026] [proxy_fcgi:error] [pid 43701:tid 43708] [client 20.206.111.149:59990] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:25:16.421828 2026] [proxy_fcgi:error] [pid 33887:tid 33930] [client 20.206.111.149:30199] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:25:19.781830 2026] [proxy_fcgi:error] [pid 43701:tid 43722] [client 20.206.111.149:39103] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:25:26.050768 2026] [proxy_fcgi:error] [pid 33888:tid 33962] [client 20.206.111.149:60592] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:25:39.718812 2026] [proxy_fcgi:error] [pid 33886:tid 33891] [client 20.206.111.149:60642] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:25:40.315838 2026] [proxy_fcgi:error] [pid 33886:tid 33896] [client 20.206.111.149:60642] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:25:52.447856 2026] [proxy_fcgi:error] [pid 36497:tid 36512] [client 20.206.111.149:27536] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:26:18.142572 2026] [proxy_fcgi:error] [pid 36497:tid 36529] [client 20.206.111.149:52323] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:26:41.573883 2026] [proxy_fcgi:error] [pid 33886:tid 33906] [client 20.206.111.149:54305] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:26:53.843344 2026] [proxy_fcgi:error] [pid 33888:tid 33953] [client 20.206.111.149:30124] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'
[Tue May 26 23:26:59.658668 2026] [proxy_fcgi:error] [pid 36497:tid 36511] [client 20.206.111.149:22229] AH01071: Got error 'PHP message: PHP Warning:  PHP Request Startup: Invalid date.timezone value '', using 'UTC' instead in Unknown on line 0'